Two Chrome Extensions Caught Secretly Stealing Credentials from Over 170 Sites | Read more hacking news on The Hacker News ...

Critical n8n flaw CVE-2025-68613 (CVSS 9.9) lets authenticated users run arbitrary code; versions 0.211.0–1.120.4 affected, ...

INTERPOL’s Operation Sentinel led to 574 arrests, $3M recovered, and major ransomware and fraud disruptions across 19 African ...

The US Justice Department seized a domain used to steal bank logins, causing $14.6 million in losses from 19 US victims.

A malicious npm package posing as a WhatsApp API intercepts messages, steals credentials, and links attacker devices after 56 ...

The FCC bans foreign-made drones and critical components under U.S. law, citing national security, surveillance, and airspace safety risks.

Android attackers use fake apps and droppers to spread the Wonderland SMS stealer, stealing OTPs, SMS data, and bank funds, ...

Iranian APT Infy resurfaced after years of silence, using updated Foudre & Tonnerre malware, phishing delivery, resilient C2 ...

WatchGuard fixed CVE-2025-14733, a critical Fireware OS VPN flaw with CVSS 9.3 that is actively exploited in the wild.

UEFI firmware flaws in certain ASRock, ASUS, GIGABYTE, and MSI motherboards allow early-boot DMA attacks before OS security ...

The DOJ charged 54 people over Ploutus malware attacks on ATMs, linked to Tren de Aragua, causing $40.73 million in U.S.

A Russia-aligned threat group uses Microsoft 365 device code phishing to steal credentials and take over accounts, tracked ...