The Hacker News✔

About The Hacker News✔

The Hacker News✔ is a Telegram channel dedicated to Technology, with over 163k subscribers. ⭐ Official THN Telegram Channel — A trusted, widely read, independent source for breaking news and tech coverage about cybersecurity and hacking. 📨 Contact: [email protected] 🌐 Website: https... Join the channel to receive all updates directly on Telegram.

Original description

⭐ Official THN Telegram Channel — A trusted, widely read, independent source for breaking news and tech coverage about cybersecurity and hacking. 📨 Contact: [email protected] 🌐 Website: https://thehackernews.com

Subscriber history

+1.611 (+1,0%)

8 readings over 90 days · Peak: 163.751 (03/10/2026)

Last 30 daily readings (8)

Date	Subscribers	Change
09/10/2026	163.406	-39
08/10/2026	163.445	-29
07/10/2026	163.474	-35
06/10/2026	163.509	-148
05/10/2026	163.657	-59
04/10/2026	163.716	-35
03/10/2026	163.751	+1.956
11/07/2026	161.795	—

Recent messages

🚨 16 malicious Firefox extensions posed as Rabby and OKX wallets to steal recovery phrases and private keys. Their code intercepted wallet secrets during import and attempted to send them to attacker-controlled Cloudflare Workers. All 16 have been removed. Read - https://thehackernews.com/2026/10/16-malicious-firefox-extensions-pose-as.html

08/10/26 4.36K

A phishing scanner may never see the page attackers want victims to open. Meet Wazza. It uses browser checks, short-lived session tokens, and multi-stage redirects to conceal an Adobe-themed Device Code phishing lure. ANYRUN exposes the attack chain: https://thehackernews.com/2026/10/wazza-phishkit-targets-banking.html

08/10/26 4.23K

September’s attacks showed how quickly cyber risk can move beyond the SOC. ⚠️ 🇺🇸 51% of CSuite sandbox sessions came from the US 🔐 M365 sessions + endpoints compromised in one attack chain 🧩 Trusted platforms like Adobe, DocuSign & Microsoft 365 abused 💳 114 malicious domains powered IronToll’s real-time payment phishing The outcome for enterprises: wider incident scope, harder containment, greate

08/10/26 4.24K

‼️ An AI pentesting tool was used in attacks that exfiltrated data from South Korean financial firms. CrowdStrike uncovered the ARTEX campaign through exposed Claude Code sessions. The tool's developer is now moving it to closed source. Read - https://thehackernews.com/2026/10/artex-ai-pentesting-tool-used-in-data.html

08/10/26 4.23K

A fake Ukrainian police document appears on screen. A credential-stealing RAT deploys in the background. Russia-aligned UAC-0099 uses the decoy to deliver ASHVEIN, which also hides attacker commands inside invisible HTML elements. Read - https://thehackernews.com/2026/10/uac-0099-targets-ukrainian-government.html

08/10/26 3.85K

🛑 Japan's web data leaks are surging: 119 reported incidents in 2026 vs. 84 in all of 2025. 81 were disclosed since July. JPCERT/CC reports attackers abusing mobile app APIs and exploiting a Metabase SQL injection flaw. How most incidents began remains unclear. Read - https://thehackernews.com/2026/10/japan-sees-sharp-rise-in-web-data-leaks.html

08/10/26 3.78K

⚡ ThreatsDay Bulletin: Malicious code, exposed tools, AI phishing, and criminals stealing from criminals. This week's 15 stories ↓ → Malicious editor themes + dev packages → C2 infrastructure traced → WhatsApp-delivered RAT → Ransomware extradition + affiliate betrayal → Medical device PQC gaps → Trusted-domain phishing + rogue RMM → File-upload flaws exploited for web shells → AI profiling users

08/10/26 3.55K

🛑 China-linked hackers didn't just steal emails. They ran a web portal giving third parties access to stolen mail, the FBI says. Victims included government, police, and healthcare organizations in Southeast Asia. Their toolkit included 1,300+ scanning scripts. Read: https://thehackernews.com/2026/10/fbi-says-china-linked-hackers-ran.html

08/10/26 3.39K

Text preview of the latest public messages — media content is not shown.