The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

Nation-state grade iOS exploit chains Coruna and DarkSword are proliferating among cybercriminals, with 17,000 domains hosting variants.

Metabase SQL injection vulnerability gave unauthenticated attackers full admin access and downstream database credentials, breaching five companies. CISA added CVSS 10.0 CVE-2026-72898 and Cisco ASA ...

This week’s cybersecurity recap covers rogue AI behavior, an exploited Metabase zero-day, MCP supply-chain attacks, router backdoors, and more.

Google’s Chrome browser has added a new feature that could go a long way in preventing a form of account takeover that’s ...

The critical zero-day can provide direct SQL access to Metabase’s underlying database, potentially exposing credentials, API keys, and other sensitive data.

Quantum computing will reshape encryption, but not overnight, and a disciplined, phased approach lets organizations modernize cryptographic foundations without disruption while strengthening security ...

The attack is called Pass-ta-key—a blending of the word passkey with the phrase “pass the key” and a nod to a plate of pasta.

A financially motivated threat actor previously associated with the Medusa ransomware operation is now deploying a new ...

Spread the loveFor years, when you mentioned automation in the context of enterprise IT, many people immediately thought of ...