Endigest

About
Privacy
Terms
Contact
RSS

The Hacker News Articles | Endigest

The Hacker News Articles

The Hacker News

01 min read

Security•2026-03-18

Ubuntu CVE-2026-3888 Bug Lets Attackers Gain Root via systemd Cleanup Timing Exploit

A high-severity privilege escalation vulnerability (CVE-2026-3888, CVSS 7.8) affects default Ubuntu Desktop 24.04+ installations via a timing-based exploit chain.

The Hacker News

11 min read

Security•2026-03-18

Apple Fixes WebKit Vulnerability Enabling Same-Origin Policy Bypass on iOS and macOS

Apple released Background Security Improvements to patch a WebKit vulnerability (CVE-2026-20643) that allows same-origin policy bypass on iOS and macOS.

The Hacker News

01 min read

Security•2026-03-18

Critical Unpatched Telnetd Flaw (CVE-2026-32746) Enables Unauthenticated Root RCE via Port 23

A critical unauthenticated remote code execution vulnerability (CVE-2026-32746, CVSS 9.8) has been disclosed in GNU InetUtils telnetd, affecting all versions through 2.7.

The Hacker News

01 min read

Security•2026-03-17

AI Flaws in Amazon Bedrock, LangSmith, and SGLang Enable Data Exfiltration and RCE

This article covers critical security vulnerabilities in three AI platforms—Amazon Bedrock, LangSmith, and SGLang—that enable data exfiltration and remote code execution.

The Hacker News

01 min read

Security•2026-03-17

LeakNet Ransomware Uses ClickFix via Hacked Sites, Deploys Deno In-Memory Loader

LeakNet ransomware group has adopted ClickFix social engineering via compromised websites and a Deno-based in-memory loader as new attack vectors.

The Hacker News

01 min read

Security•2026-03-17

AI is Everywhere, But CISOs are Still Securing It with Yesterday's Skills and Tools, Study Finds

A 2026 benchmark report reveals that most CISOs are securing AI systems using outdated tools and skills not designed for AI-specific threats.

The Hacker News

01 min read

Security•2026-03-17

Konni Deploys EndRAT Through Phishing, Uses KakaoTalk to Propagate Malware

This article covers a cyberattack campaign by the North Korean hacking group Konni, which uses spear-phishing and KakaoTalk to spread malware.

The Hacker News

21 min read

Security•2026-03-17

CISA Flags Actively Exploited Wing FTP Vulnerability Leaking Server Paths

CISA has added CVE-2025-47813, an information disclosure vulnerability in Wing FTP Server, to its Known Exploited Vulnerabilities catalog.

The Hacker News

31 min read

Security•2026-03-16

GlassWorm Attack Uses Stolen GitHub Tokens to Force-Push Malware Into Python Repos

The GlassWorm ForceMemo campaign uses stolen GitHub tokens to force-push malware into hundreds of Python repositories without leaving visible traces.

The Hacker News

11 min read

Security•2026-03-16

⚡ Weekly Recap: Chrome 0-Days, Router Botnets, AWS Breach, Rogue AI Agents & More

This article is a weekly cybersecurity recap covering major threats, vulnerabilities, and incidents from the week of March 16, 2026.

The Hacker News

41 min read

Security•2026-03-16

Why Security Validation Is Becoming Agentic

This article argues that security validation must evolve into an agentic, unified discipline to match how modern adversaries actually operate.

The Hacker News

11 min read

Security•2026-03-16

ClickFix Campaigns Spread MacSync macOS Infostealer via Fake AI Tool Installers

This article covers three ClickFix campaigns that distributed the MacSync macOS infostealer by impersonating AI tool installers and exploiting user trust in platforms like ChatGPT.