Two newly disclosed vulnerabilities in Discourse let unauthenticated attackers execute JavaScript against anonymous visitors ...

ThreatsDay: Malicious VS Code themes, npm supply-chain attacks, AI phishing, ransomware betrayal, exposed hacker tools, and ...

WordPress released version 7.1.3 on October 6, 2026, addressing vulnerabilities involving cross-site scripting, SQL injection ...

Roundcube SQL injection CVE-2026-48842 is now being exploited in the wild, putting unpatched webmail servers at risk of database compromise.

Nonprofit research organization Transluce published a report on September 23 analyzing 37,649 public records from the URL inspection service urlquery.net. Timestamped logs show AI agents that were ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach reports, expert analysis, and actionable insights for infosec professionals and ...

In late July, Oracle released a mammoth security patch dump with 1,449 patches, in a perhaps unprecedented bad day for database admins. None of them, it turns out, would have prevented the credential ...

The HTML rendering extension renders a paginated report in HTML format. The rendering extension can also produce fully formed HTML pages or fragments of HTML to embed in other HTML pages. All HTML is ...

We've got good news for developers who are enamored with Cloudflare Workers and Durable Objects but don’t want to be tied into that company’s backend infrastructure. Last week, Node.js creator Ryan ...

Couchbase, an operational data platform for AI, announced general availability of the AI Data Plane, a unified data infrastructure layer for enterprise AI agents. The Couchbase AI Data Plane gives ...

SQL injection remains the most reliably exploited web vulnerability in 2026. According to the Verizon 2025 Data Breach Investigations Report, injection attacks account for 17% of all confirmed data ...

Google Threat Intelligence Group (GTIG) has conducted an in-depth analysis of a .NET backdoor, tracked as STOCKSTAY, that has been continually developed and deployed by the Russia-linked threat actor ...