Citrix NetScaler zero-day vulnerabilities CVE-2026-88771 and CVE-2026-88772 triggered mass internet exploitation within ...

Explore the latest news, real-world incidents, expert analysis, and trends in Telegram — only on The Hacker News, the leading ...

TIKTOUK targets exposed WordPress backups to steal cloud and email credentials, with 50,000 credentials found across 37,000 domains.

Unknown attackers exploit a patched Citrix NetScaler flaw to gain root access and deploy web shells and a tunneler.

Meta’s new Muse isn’t just an app; every user gets a free Linux box in Meta's cloud. The Muse agent runs as root and will ...

Cisco FMC vulnerability CVE-2026-20079 (CVSS 10.0) is under active exploitation by Sandworm -- the Russian GRU hacking unit - ...

Cisco Talos has confirmed active exploitation of two vulnerabilities affecting Cisco Secure Firewall Management Center (FMC) Software, with state-sponsored hacking groups and a ransomware affiliate ...

Nozomi Networks Labs has uncovered Cling, a botnet that infects exposed IoT and networking devices while hiding command ...

Russian state-sponsored group Star Blizzard has been using the RedFlick infection technique in recent CosmicPulse attacks.

CARBONATO is a Docker-based botnet that utilizes an autonomous AI agent as its command-and-control (C2) engine rather than a static server. Discovered by ThreatDown researchers in August 2026, this is ...

The Carbonato botnet compromises exposed Docker hosts, deploys an AI agent to steal AI API keys, and then spreads to other ...