The Hacker News

Trivy Supply Chain Attack Triggers Self-Spreading CanisterWorm Across 47 npm Packages

Trivy Supply Chain Attack Triggers Self-Spreading Canis...

Darpan Neupane Mar 22, 2026 0 59

The threat actors behind the supply chain attack targeting the popular Trivy sca...

CISA Flags Apple, Craft CMS, Laravel Bugs in KEV, Orders Patching by April 3, 2026

CISA Flags Apple, Craft CMS, Laravel Bugs in KEV, Order...

Darpan Neupane Mar 22, 2026 0 58

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added...

Oracle Patches Critical CVE-2026-21992 Enabling Unauthenticated RCE in Identity Manager

Oracle Patches Critical CVE-2026-21992 Enabling Unauthe...

Darpan Neupane Mar 22, 2026 0 65

Oracle has released security updates to address a critical security flaw impacti...

Trivy Security Scanner GitHub Actions Breached, 75 Tags Hijacked to Steal CI/CD Secrets

Trivy Security Scanner GitHub Actions Breached, 75 Tags...

Darpan Neupane Mar 22, 2026 0 56

Trivy, a popular open-source vulnerability scanner maintained by Aqua Security, ...

FBI Warns Russian Hackers Target Signal, WhatsApp in Mass Phishing Attacks

FBI Warns Russian Hackers Target Signal, WhatsApp in Ma...

Darpan Neupane Mar 22, 2026 0 51

Threat actors affiliated with Russian Intelligence Services are conducting phish...

ASUS Confirms Critical Flaw in AiCloud Routers; Users Urged to Update Firmware

ASUS Confirms Critical Flaw in AiCloud Routers; Users U...

Darpan Neupane Apr 19, 2025 0 210

ASUS has disclosed a critical security flaw impacting routers with AiCloud enabl...

[Webinar] AI Is Already Inside Your SaaS Stack — Learn How to Prevent the Next Silent Breach

[Webinar] AI Is Already Inside Your SaaS Stack — Learn ...

Darpan Neupane Apr 19, 2025 0 275

Your employees didn’t mean to expose sensitive data. They just wanted to move fa...

Rogue npm Packages Mimic Telegram Bot API to Plant SSH Backdoors on Linux Systems

Rogue npm Packages Mimic Telegram Bot API to Plant SSH ...

Darpan Neupane Apr 19, 2025 0 78

Cybersecurity researchers have uncovered three malicious packages in the npm reg...

Multi-Stage Malware Attack Uses .JSE and PowerShell to Deploy Agent Tesla and XLoader

Multi-Stage Malware Attack Uses .JSE and PowerShell to ...

Darpan Neupane Apr 19, 2025 0 178

A new multi-stage attack has been observed delivering malware families like Agen...

Chinese Smishing Kit Powers Widespread Toll Fraud Campaign Targeting U.S. Users in 8 States

Chinese Smishing Kit Powers Widespread Toll Fraud Campa...

Darpan Neupane Apr 19, 2025 0 257

Cybersecurity researchers are warning of a "widespread and ongoing" SMS phishing...