The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

Following the reports last week using the Windows Global Device ID (GDID) in tracking a malware operators behavior, here is a comprehensive write-up about what goes into the GDID and how it is used.

Microsoft's July 2026 Patch Tuesday arrived on July 14 as the largest security update in the company's history — 622 CVEs, more than triple June's prior record. Buried inside that volume are two ...

A buffer overflow happens when a program writes more data into a memory buffer than the buffer can hold. The extra bytes land in adjacent memory, corrupting whatever was there. If an attacker controls ...

Every vulnerability has two clocks running. One belongs to the defender racing to find it; the other to the cyberattacker hoping to find it first. For as long as software has existed, those clocks ...

Microsoft released security fixes for more than 200 vulnerabilities on June 9, 2026 — the largest single Patch Tuesday in the program's history since its founding in 2003 — while a security researcher ...

The remote code execution flaw enables root access and voice attacks on HP Poly VoIP phones, including eavesdropping and the ability to collect audio to generate deepfakes. HP has released patches for ...

A critical-severity vulnerability in multiple HP Poly Voice VoIP phone models can be exploited for remote code execution (RCE) with root privileges, allowing attackers to gain a foothold in enterprise ...

Attackers are now actively exploiting a critical Windows Netlogon vulnerability patched by Microsoft earlier this year, according to a warning issued by the Centre for Cybersecurity Belgium (CCB). The ...

Threat actors are exploiting a critical-severity Windows Netlogon vulnerability for remote code execution, Centre for Cybersecurity Belgium (CCB) warns. Tracked as CVE-2026-41089 (CVSS score of 9.8), ...

A security researcher published six vulnerabilities in llama.cpp's model-file parser to the oss-security mailing list on May 15, 2026 — and none of them carry an assigned CVE number, meaning standard ...