The Hacker News

Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor

Lazarus-linked attacks exploit Windows CVE-2026-68820 as a zero-day to gain SYSTEM access and deploy Troy against defense and aerospace firms.
TechRepublic

Hacker Exposes Amazon Q Security Flaws Using Covert Code

Generative AI virtual assistant Amazon Q was unveiled by AWS CEO Adam Selipsky in 2023. Image: AWS A hacker recently injected code into Amazon Q in order to warn users of the platform’s potential ...
The Hacker News

ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access

ShieldBreak is a claimed patch bypass for Defender flaw CVE-2026-50656, with a PoC tested on Windows 11 25H2 and Server 2025.
CSOonline

Hacker inserts destructive code in Amazon Q tool as update goes live

A hacker managed to insert destructive system commands into Amazon’s Visual Studio Code extension used for accessing its AI-powered coding assistant, Q, which was later distributed to users through an ...

Google’s top hacker hunter explains why hacking groups get codenames

Google recently changed how it refers and assigns names to hacking groups. TechCrunch spoke with one of the world’s foremost ...
SiliconANGLE

HackerOne advances offensive security with agentic AI system, general availability of HackerOne Code

Offensive security solutions firm HackerOne Inc. today announced the expansion of its artificial intelligence-driven offensive security platform. The updates includes the evolution of its Hai AI ...
International Business Times

Hackers Expose Discord Age Verification System Issue After Persona Frontend Code Left Wide Open

Hackers have revealed that parts of Discord's new age verification system were effectively exposed to the public after the frontend code for third-party vendor Persona was left accessible on the open ...