Skip to content
[email protected] (The Hacker News)

[email protected] (The Hacker News)

Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data

Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data

Salesforce has revealed that it disabled the Klue Battlecards app integration within its platform in response to a security incident impacting the competitive intelligence company on June 11, 2026. To that end, organizations will be… 

Apple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via Microphone

Apple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via Microphone

Ravie LakshmananJun 19, 2026Mobile Security / Vulnerability Apple has updated its Beats Studio Buds wireless earbuds to patch a high-severity vulnerability that could be exploited by nearby hackers to eavesdrop on users. The vulnerability, tracked… 

F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution

F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution

Ravie LakshmananJun 18, 2026Vulnerability / Cloud Security F5 has released security updates to address two critical security flaws in NGINX Open Source that could be exploited to achieve code execution on affected systems. The vulnerabilities… 

Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Stories

Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Stories

Ravie LakshmananJun 18, 2026Hacking News / Cybersecurity News The internet did not break this week. It got used exactly as designed, which is worse. Searches were siphoned through shady browser add-ons. AI chat links turned… 

Microsoft Details Windows Clipper Malware Campaign Using USB LNK Worm and Tor-Based C2

Microsoft Details Windows Clipper Malware Campaign Using USB LNK Worm and Tor-Based C2

Ravie LakshmananJun 18, 2026Malware / Cryptocurrency Microsoft has disclosed details of a Windows-based cryptocurrency clipper campaign that has targeted users since February 2026. “The clipper in this campaign relies on Windows Script Host and ActiveX-driven… 

INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023

INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023

Ravie LakshmananJun 18, 2026Vulnerability / Enterprise Security Cybersecurity researchers have charted the evolution of INC from an nascent ransomware-as-a-service (RaaS) operation to one of the most prolific cybercrime groups in 2026, claiming no less than… 

DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic

DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic

Ravie LakshmananJun 18, 2026Remote Access Trojan / Ransomware Threat actors associated with the DragonForce ransomware have been observed using a custom Go-based remote access trojan (RAT) called Backdoor.Turn to conceal command-and-control (C2) traffic inside Microsoft… 

Crypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal Comments

Crypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal Comments

Ravie LakshmananJun 17, 2026Malware / Social Engineering An unknown threat actor has been observed leveraging paid or promoted posts on legitimate news websites to drum up buzz for their warez, according to new findings from…