The Hacker News
βœ”
152K subscribers
1.87K photos
10 videos
3 files
7.78K links
⭐ Official THN Telegram Channel β€” A trusted, widely read, independent source for breaking news and tech coverage about cybersecurity and hacking.

πŸ“¨ Contact: [email protected]

🌐 Website: https://thehackernews.com
Download Telegram
The #1 threat to technical work at scale is poor communication.

A study conducted by Harvard University, the Carnegie Foundation, and Stanford Research Center found that 85% of job success comes from soft skills (such as people skills), whereas only 15% stems from hard skills (such as technical capabilities).

Soft skills can distinguish you to help preserve or even further your career, but if they’re not developed, they can create a ceiling over your growth.

Whether sharing status updates on a virtual standup meeting or delivering a keynote tech talk at an in-person conference, how you communicate your work can either fuel its growth or snuff out its success.

If you’re looking to improve your communication and presentation skills, look no further than the new book, Luminary: Master the Art and Science of Storytelling for Technical Professionals.

Learn more about the book and how it can help you and your work advance here: https://thn.news/storytelling-technical-professionals
πŸ‘11πŸ€”9😁4⚑3
Media is too big
VIEW IN TELEGRAM
βš”οΈ Prepare for battle. Defend your network. Master your craft.

At SANS live training events, you'll:
βœ… Train with cybersecurity legends
βœ… Get hands-on with real-world threats
βœ… Build your future with certifications

🎯 Find your next event: πŸ‘‰ https://thn.news/sans-training-tel

#SANSLiveTraining #SANS
⚑5😁4πŸ‘2
🚨 Cybersecurity experts discovered a flaw in a popular travel service that let hackers hijack accounts with a simple click.

Attackers could impersonate victims, book travel, and even use loyalty points!

Learn how: https://thehackernews.com/2025/01/oauth-redirect-flaw-in-airline-travel.html
πŸ”₯13⚑3πŸ‘1
⚠️ A new phishing email campaign is taking over Poland & Germany, using fake order receipts to infect machines with Agent Tesla, Snake Keylogger, and TorNet malware.

Read the full story: https://thehackernews.com/2025/01/purecrypter-deploys-agent-tesla-and-new.html
πŸ‘15πŸ‘6⚑4πŸ”₯2
πŸ”’ SOCs Drowning in Alerts? AI-powered SOC Analysts now triage & investigate within MINUTES!

Speed, accuracy, and efficiencyβ€”ALL in one solution, reducing breach impact and costs.

Find out how AI is transforming SOCs: https://thehackernews.com/2025/01/ai-soc-analysts-propelling-secops-into.html
😁15⚑5🀯4πŸ”₯3πŸ‘1
🚨 URGENT: Critical Zero-Day Alert!

Thousands of Zyxel CPE devices are being actively exploited by attackers. Over 1,500 devices exposed globally.

β€· Limit admin access
β€· Filter traffic for unusual requests

πŸ”— Read: https://thehackernews.com/2025/01/zyxel-cpe-devices-face-active.html
πŸ‘15πŸ”₯7⚑2😁1πŸ€”1
🚨 WATCH OUT: A new vulnerability, CVE-2025-22217, in VMware Avi Load Balancer could give attackers full access to your databases!

No workaroundsβ€”only updates will protect you.

Running affected versions? Learn more: https://thehackernews.com/2025/01/broadcom-warns-of-high-severity-sql.html
πŸ€”8πŸ”₯4😱2⚑1πŸ‘1😁1
πŸ›‘ UAC-0063 has been using stolen documents from Kazakhstan’s Ministry of Foreign Affairs to spear-phish targets and deploy HATVIBE malware.

πŸ‘‰ Read the full details on UAC-0063’s evolving tactics: https://thehackernews.com/2025/01/uac-0063-expands-cyber-attacks-to.html
πŸ‘13⚑1
⚠️ A critical flaw (CVE-2025-22604) in Cacti could lead to remote code execution. If exploited, authenticated attackers could steal or manipulate sensitive data.

Patch to version 1.2.29 to fix this flaw and protect your systems.

Learn more: https://thehackernews.com/2025/01/critical-cacti-security-flaw-cve-2025.html
πŸ”₯9πŸ‘6⚑1πŸ€”1
🚨 Apple Silicon CPUs hit by 2 new vulnerabilities: SLAP & FLOP

These attacks target Load Address and Load Value Predictors in Apple CPUs, risking exposure of your:

β€· Location history
β€· Calendar events
β€· Sensitive data

πŸ”— Read: https://thehackernews.com/2025/01/new-slap-flop-attacks-expose-apple-m.html
😁16πŸ”₯7😱7πŸ‘4πŸ‘3πŸ€”2⚑1
πŸ”₯ AI isn’t just a trend in cybersecurityβ€”it’s already reshaping how teams defend against threats.

But are we fully prepared to tackle its challenges?

In this latest #webinar, you’ll discover:
β€· Real insights from 200 cybersecurity professionals using AI today
β€· What’s working & what’s not in the world of AI-driven security
β€· The real hurdlesβ€”data issues, transparency, and more

πŸ‘¨β€πŸ’» Join Now and discover how to make AI work harder for you: https://thehackernews.com/2025/01/ai-in-cybersecurity-whats-effective-and.html
πŸ”₯11πŸ‘9😁3⚑1🀯1
πŸ›‘ North Korea's Lazarus Group is now using a powerful web-based admin panel to coordinate cyberattacks across the globe.

233 targets, mostly in crypto, with a surge in Indiaβ€”110 new victims just in January.

Learn more: https://thehackernews.com/2025/01/lazarus-group-uses-react-based-admin.html
πŸ”₯24πŸ‘14😱7⚑3😁3πŸ‘1
⚠️ New Mirai Botnet Variant Aquabot Targets CVE-2024-41710 in Mitel Phones for DDoS Attacks.

The flaw affects Mitel 6800, 6900, 6900w phones and Mitel 6970 Conference Units. Attackers have been exploiting CVE-2024-41710 since January 2025.

Attackers are using Telegram to sell DDoS servicesβ€”this threat is already commercialized.

Learn more: https://thehackernews.com/2025/01/new-aquabot-botnet-exploits-cve-2024.html
πŸ‘19😁4πŸ€”3πŸ‘2
🚨 Security Flaws Discovered in Voyager PHP Package.

Attackers can exploit these UNPATCHED flaws with just one clickβ€”allowing them to execute arbitrary code remotely.

Click here to learn more: https://thehackernews.com/2025/01/unpatched-php-voyager-flaws-leave.html
πŸ”₯11πŸ‘6😁1🀯1
🚨 AI Startup #DeepSeek Exposes Sensitive Data!

A ClickHouse database was exposed on the internet, allowing anyone to access internal secrets, chat logs, API secrets, and moreβ€”all unprotected.

Read more: https://thehackernews.com/2025/01/deepseek-ai-database-exposed-over-1.html
😁39😱20πŸ”₯9πŸ‘5πŸ‘5
⚑ SOC Analysts Are Burning Out!

Manual tasks, false positives, and tool overloadβ€”AI is the solution SOC teams need NOW.

AI enables faster research, quicker analysis, and smarter responses to emerging threats.

Learn more: https://thehackernews.com/2025/01/soc-analysts-reimagining-their-role.html
😁13πŸ‘7πŸ€”6⚑4🀯4😱3
⚠️ Warning: Critical Flaw Discovered in Lightning AI Studio!

The vulnerability allowed attackers to run commands with root privileges, potentially compromising entire AI projects.

Get the full analysis: https://thehackernews.com/2025/01/lightning-ai-studio-vulnerability.html
πŸ”₯13πŸ‘7πŸ‘2😁2⚑1
πŸ”’ International law enforcement has dismantled infamous cybercrime hubs linked to platforms like Cracked, Nulled, StarkRDP and Sellix.

These platforms sold malware, hack tools, and personal data.

πŸ”— Read more about the "Operation Talent" β€” https://thehackernews.com/2025/01/authorities-seize-domains-of-popular.html
😁14πŸ‘9🀯6⚑4😱1
🚨 ALERT: Over 57 threat actors from China, Iran, North Korea, and Russia are now using Google's Gemini AI to power their malicious cyber operations.

From researching vulnerabilities to crafting phishing campaigns, they’re leveraging GenAI for faster, more efficient cybercrime.

Learn more: https://thehackernews.com/2025/01/google-over-57-nation-state-threat.html
😁30πŸ‘16😱14🀯7⚑3πŸ€”3πŸ”₯2
🚨 High-Risk VMware Vulnerabilities Discovered – Update ASAP!

5 major flaws have been found in VMware Aria Operations & Aria Operations for Logs, with CVSS scores ranging from 4.3 to 8.5. Attackers could escalate privileges, steal credentials, or inject malicious scripts.

πŸ”— Read more: https://thehackernews.com/2025/01/broadcom-patches-vmware-aria-flaws.html
πŸ”₯15😱7πŸ‘6😁3πŸ‘2🀯2⚑1