Endigest

About
Privacy
Terms
Contact
RSS

The Hacker News Articles | Endigest

The Hacker News Articles

The Hacker News

01 min read

Security•2026-03-28

TA446 Deploys DarkSword iOS Exploit Kit in Targeted Spear-Phishing Campaign

Proofpoint has disclosed a spear-phishing campaign by Russian state-sponsored group TA446 (also known as Callisto, COLDRIVER, Star Blizzard) leveraging the DarkSword iOS exploit kit.

The Hacker News

01 min read

Security•2026-03-28

CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM Exploitation

CISA added CVE-2025-53521, a critical F5 BIG-IP APM vulnerability, to its Known Exploited Vulnerabilities catalog after confirmed in-the-wild exploitation.

The Hacker News

21 min read

Security•2026-03-27

Apple Sends Lock Screen Alerts to Outdated iPhones Over Active Web-Based Exploits

Apple is issuing Lock Screen notifications to iPhones and iPads running outdated iOS versions to warn users about active web-based exploit kits.

The Hacker News

41 min read

Security•2026-03-27

TeamPCP Pushes Malicious Telnyx Versions to PyPI, Hides Stealer in WAV Files

This article covers a TeamPCP supply chain attack on the telnyx Python package, hiding malware inside .WAV files via audio steganography.

The Hacker News

21 min read

Security•2026-03-27

Open VSX Bug Let Malicious VS Code Extensions Bypass Pre-Publish Security Checks

This article covers a now-patched vulnerability in Open VSX's pre-publish extension scanning pipeline that allowed malicious VS Code extensions to bypass security checks.

The Hacker News

21 min read

Security•2026-03-27

AitM Phishing Targets TikTok Business Accounts Using Cloudflare Turnstile Evasion

This article covers two phishing campaigns: one targeting TikTok for Business accounts via AitM techniques, and another using SVG attachments to deliver malware in Venezuela.

The Hacker News

31 min read

Security•2026-03-27

We Are At War

This article examines how geopolitical tensions have transformed the cyber threat landscape into a multi-front conflict involving state actors, hacktivists, and criminal groups.

The Hacker News

21 min read

Security•2026-03-27

Bearlyfy Hits 70+ Russian Firms with Custom GenieLocker Ransomware

This article covers Bearlyfy, a pro-Ukrainian threat group that has targeted over 70 Russian companies with ransomware since January 2025.

The Hacker News

21 min read

Security•2026-03-27

LangChain, LangGraph Flaws Expose Files, Secrets, Databases in Widely Used AI Frameworks

Three security vulnerabilities in LangChain and LangGraph frameworks expose filesystem data, environment secrets, and conversation history in enterprise AI deployments.

The Hacker News

21 min read

Security•2026-03-26

China-Linked Red Menshen Uses Stealthy BPFDoor Implants to Spy via Telecom Networks

This article covers Red Menshen, a China-linked threat actor, using the stealthy BPFDoor Linux backdoor to conduct long-term espionage via telecom networks.

The Hacker News

41 min read

Security•2026-03-26

Claude Extension Flaw Enabled Zero-Click XSS Prompt Injection via Any Website

A zero-click XSS prompt injection vulnerability in Anthropic's Claude Chrome Extension allowed any website to silently hijack the AI assistant.

The Hacker News

21 min read

Security•2026-03-26

Masters of Imitation: How Hackers and Art Forgers Perfect the Art of Deception

This article draws parallels between art forgery and modern cyberattacks to explain how attackers use mimicry to evade detection, and how Network Detection and Response (NDR) can expose them.