The Hacker News

The Hacker News (THN) is widely regarded as a top source for Information Security news, boasting over 5 million readers and followers each month. THN delivers up-to-date Cyber Security News and provides thorough insights into current and emerging trends in Information Technology, exploring their impact on the cyber landscape. The platform is backed by a community of security professionals, hackers, administrators, and members from various underground hacking groups around the globe.

International

English

Blog

Outlet metrics

Domain Authority

Ranking

Global

#55011

United States

#25037

Computers Electronics and Technology/Computer Security

#74

Traffic sources

Monthly visitors

Articles

ASUS Patches DriverHub RCE Flaws Exploitable via HTTP and Crafted .ini Files

2 days ago | thehackernews.com | Ravie Lakshmanan

ASUS has released updates to address two security flaws impacting ASUS DriverHub that, if successfully exploited, could enable an attacker to leverage the software in order to achieve remote code execution.
⚡ Weekly Recap: Zero-Day Exploits, Developer Malware, IoT Botnets, and AI-Powered Scams

2 days ago | thehackernews.com | Ravie Lakshmanan

What do a source code editor, a smart billboard, and a web server have in common? They've all become launchpads for attacks—because cybercriminals are rethinking what counts as "infrastructure." Instead of chasing high-value targets directly, threat actors are now quietly taking over the overlooked: outdated software, unpatched IoT devices, and open-source packages. It's not just clever—it's reshaping how intrusion, persistence, and evasion happen at scale.
Fake AI Tools Used to Spread Noodlophile Malware, Targeting 62,000+ via Facebook Lures

2 days ago | thehackernews.com | Ravie Lakshmanan

Threat actors have been observed leveraging fake artificial intelligence (AI)-powered tools as a lure to entice users into downloading an information stealer malware dubbed Noodlophile. "Instead of relying on traditional phishing or cracked software sites, they build convincing AI-themed platforms – often advertised via legitimate-looking Facebook groups and viral social media campaigns," Morphisec researcher Shmuel Uzan said in a report published last week.
Google Pays $1.375 Billion to Texas Over Unauthorized Tracking and Biometric Data Collection

4 days ago | thehackernews.com | Ravie Lakshmanan

Google has agreed to pay the U.S. state of Texas nearly $1.4 billion to settle two lawsuits that accused the company of tracking users' personal location and maintaining their facial recognition data without consent. The $1.375 billion payment dwarfs the fines the tech giant has paid to settle similar lawsuits brought by other U.S. states. In November 2022, it paid $391 million to a group of 40 states. In January 2023, it paid $29.5 million to Indiana and Washington.
Germany Shuts Down eXch Over $1.9B Laundering, Seizes €34M in Crypto and 8TB of Data

4 days ago | thehackernews.com | Ravie Lakshmanan

Germany's Federal Criminal Police Office (aka Bundeskriminalamt or BKA) has seized the online infrastructure and shutdown linked to the eXch cryptocurrency exchange over allegations of money laundering and operating a criminal trading platform. The operation was carried out on April 30, 2025, authorities said, adding they also confiscated 8 terabytes worth of data and cryptocurrency assets worth €34 million ($38.25 million) in Bitcoin, Ether, Litecoin, and Dash.
OtterCookie v4 Adds VM Detection and Chrome, MetaMask Credential Theft Capabilities

5 days ago | thehackernews.com | Ravie Lakshmanan

The North Korean threat actors behind the Contagious Interview campaign have been observed using updated versions of a cross-platform malware called OtterCookie with capabilities to steal credentials from web browsers and other files. NTT Security Holdings, which detailed the new findings, said the attackers have "actively and continuously" updated the malware, introducing versions v3 and v4 in February and April 2025, respectively.
BREAKING: 7,000-Device Proxy Botnet Using IoT, EoL Systems Dismantled in U.S. - Dutch Operation

5 days ago | thehackernews.com | Ravie Lakshmanan

A joint law enforcement operation undertaken by Dutch and U.S. authorities has dismantled a criminal proxy network that's powered by thousands of infected Internet of Things (IoT) and end-of-life (EoL) devices, enlisting them into a botnet for providing anonymity to malicious actors.
Initial Access Brokers Target Brazil Execs via NF-e Spam and Legit RMM Trials

5 days ago | thehackernews.com | Ravie Lakshmanan

Cybersecurity researchers are warning of a new campaign that's targeting Portuguese-speaking users in Brazil with trial versions of commercial remote monitoring and management (RMM) software since January 2025. "The spam message uses the Brazilian electronic invoice system, NF-e, as a lure to entice users into clicking hyperlinks and accessing malicious content hosted in Dropbox," Cisco Talos researcher Guilherme Venere said in a Thursday report.
Malicious npm Packages Infect 3,200+ Cursor Users With Backdoor, Steal Credentials

5 days ago | thehackernews.com | Ravie Lakshmanan

Cybersecurity researchers have flagged three malicious npm packages that are designed to target the Apple macOS version of Cursor, a popular artificial intelligence (AI)-powered source code editor. "Disguised as developer tools offering 'the cheapest Cursor API,' these packages steal user credentials, fetch an encrypted payload from threat actor-controlled infrastructure, overwrite Cursor's main.js file, and disable auto-updates to maintain persistence," Socket researcher Kirill Boychenko said.
Google Rolls Out On-Device AI Protections to Detect Scams in Chrome and Android

5 days ago | thehackernews.com | Ravie Lakshmanan

Google on Thursday announced it's rolling out new artificial intelligence (AI)-powered countermeasures to combat scams across Chrome, Search, and Android. The tech giant said it will begin using Gemini Nano, its on-device large language model (LLM), to improve Safe Browsing in Chrome 137 on desktops. "The on-device approach provides instant insight on risky websites and allows us to offer protection, even against scams that haven't been seen before.