The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

Nation-state grade iOS exploit chains Coruna and DarkSword are proliferating among cybercriminals, with 17,000 domains hosting variants.

Legit online gambling sites in the U.S. are BetMGM, Horseshoe, bet365, FanDuel, DraftKings, Fanatics and Hard Rock Bet.

Metabase SQL injection vulnerability gave unauthenticated attackers full admin access and downstream database credentials, breaching five companies. CISA added CVSS 10.0 CVE-2026-72898 and Cisco ASA ...

Security researchers have seen evidence that attackers are attempting to exploit a currently unpatched SQL injection vulnerability in GeoServer, an open-source web server for managing and publishing ...

The tactic disabled endpoint defenses as intended, but also accidentally broke the ransomware’s encryption process.

Microsoft Threat Intelligence examines DeadLock ransomware, an emerging financially motivated operation distinguished by its ...

Quantum computing will reshape encryption, but not overnight, and a disciplined, phased approach lets organizations modernize cryptographic foundations without disruption while strengthening security ...

The critical zero-day can provide direct SQL access to Metabase’s underlying database, potentially exposing credentials, API keys, and other sensitive data.

Many of us use Google Docs for our day-to-day documenting needs. With Google Docs it is easy to share your documents, collaborate, and access it on any machine. The best part is that you don’t have to ...

This week’s cybersecurity recap covers rogue AI behavior, an exploited Metabase zero-day, MCP supply-chain attacks, router backdoors, and more.