The Hacker News
前往频道在 Telegram
⭐ Official THN Telegram Channel — A trusted, widely read, independent source for breaking news and tech coverage about cybersecurity and hacking. 📨 Contact: admin@thehackernews.com 🌐 Website: https://thehackernews.com
显示更多2025 年数字统计
153 581
订阅者
+4924 小时
+3937 天
+1 38530 天
数据加载中...
相似频道
标签云
进出提及
---
---
---
---
---
---
吸引订阅者
十二月 '25
十二月 '25
+1 600
在0个频道中
十一月 '25
+1 640
在0个频道中
Get PRO
十月 '25
+1 409
在0个频道中
Get PRO
九月 '25
+1 022
在0个频道中
Get PRO
八月 '25
+1 035
在0个频道中
Get PRO
七月 '25
+1 349
在0个频道中
Get PRO
六月 '25
+2 009
在0个频道中
Get PRO
五月 '25
+5 311
在0个频道中
Get PRO
四月 '250
在0个频道中
Get PRO
三月 '250
在0个频道中
Get PRO
二月 '250
在0个频道中
Get PRO
一月 '25
+1 463
在1个频道中
Get PRO
十二月 '24
+2 825
在0个频道中
Get PRO
十一月 '24
+3 404
在0个频道中
Get PRO
十月 '24
+3 585
在0个频道中
Get PRO
九月 '24
+2 646
在0个频道中
Get PRO
八月 '24
+1 954
在0个频道中
Get PRO
七月 '24
+1 464
在0个频道中
Get PRO
六月 '24
+1 046
在0个频道中
Get PRO
五月 '24
+1 069
在0个频道中
Get PRO
四月 '24
+1 427
在0个频道中
Get PRO
三月 '24
+998
在1个频道中
Get PRO
二月 '24
+414
在0个频道中
Get PRO
一月 '24
+921
在0个频道中
Get PRO
十二月 '23
+866
在0个频道中
Get PRO
十一月 '23
+1 395
在0个频道中
Get PRO
十月 '23
+3 518
在0个频道中
Get PRO
九月 '23
+3 163
在0个频道中
Get PRO
八月 '23
+3 392
在0个频道中
Get PRO
七月 '23
+4 604
在0个频道中
Get PRO
六月 '23
+40
在0个频道中
Get PRO
五月 '23
+2 413
在0个频道中
Get PRO
四月 '23
+2 841
在0个频道中
Get PRO
三月 '23
+1 817
在0个频道中
Get PRO
二月 '23
+10 998
在0个频道中
Get PRO
一月 '230
在0个频道中
Get PRO
十二月 '220
在0个频道中
Get PRO
十一月 '220
在0个频道中
Get PRO
十月 '22
+677
在0个频道中
Get PRO
九月 '22
+3 968
在0个频道中
Get PRO
八月 '22
+2 400
在0个频道中
Get PRO
七月 '22
+2 590
在0个频道中
Get PRO
六月 '22
+2 628
在0个频道中
Get PRO
五月 '22
+3 981
在0个频道中
Get PRO
四月 '22
+4 170
在0个频道中
Get PRO
三月 '22
+5 400
在0个频道中
Get PRO
二月 '22
+4 542
在0个频道中
Get PRO
一月 '22
+63 832
在0个频道中
| 日期 | 订阅者增长 | 提及 | 频道 | |
| 26 十二月 | +98 | |||
| 25 十二月 | +64 | |||
| 24 十二月 | +45 | |||
| 23 十二月 | +52 | |||
| 22 十二月 | +66 | |||
| 21 十二月 | +72 | |||
| 20 十二月 | +49 | |||
| 19 十二月 | +113 | |||
| 18 十二月 | +48 | |||
| 17 十二月 | +51 | |||
| 16 十二月 | +66 | |||
| 15 十二月 | +54 | |||
| 14 十二月 | +58 | |||
| 13 十二月 | +73 | |||
| 12 十二月 | +50 | |||
| 11 十二月 | +58 | |||
| 10 十二月 | +46 | |||
| 09 十二月 | +47 | |||
| 08 十二月 | +77 | |||
| 07 十二月 | +47 | |||
| 06 十二月 | +39 | |||
| 05 十二月 | +66 | |||
| 04 十二月 | +107 | |||
| 03 十二月 | +77 | |||
| 02 十二月 | +40 | |||
| 01 十二月 | +37 |
频道帖子
🛑 Trust Wallet confirmed a security breach in its Chrome extension.
Malicious code was inserted into version 2.68, stealing wallet recovery phrases and draining about $7 million.
Users must update to v2.69.
🔗 Read details here → https://thehackernews.com/2025/12/trust-wallet-chrome-extension-bug.html
3 648410
| 2 | 🛑 Trust Wallet says a bug in its Chrome extension led to real losses. About $7M was drained after malicious code landed in version 2.68, targeting wallet recovery phrases.
Hundreds of users were affected.
🔗 Read → https://thehackernews.com/2025/12/trust-wallet-chrome-extension-bug.html | 549 |
| 3 |  China-linked Evasive Panda ran a targeted DNS poisoning campaign to silently push spyware through fake software updates, Kaspersky reports.
🔗 Learn how poisoned DNS enabled stealth espionage → https://thehackernews.com/2025/12/china-linked-evasive-panda-ran-dns.html | 4 165 |
| 4 |  ThreatsDayBulletin: Cyber threats are shifting tactics this week.
Stealthy loaders now hide in trusted tools, AI chatbot flaws and Docker prompt injection exploits can leak data, and commodity loaders deliver RATs to industry targets.
Android NFC malware and fake PoCs add to the risk.
🔗 Read → https://thehackernews.com/2025/12/threatsday-bulletin-stealth-loaders-ai.html | 7 189 |
| 5 |  Stolen vault backups from the 2022 LastPass breach are still paying out.
$35 Million+ traced as attackers crack weak master passwords years later, draining crypto through 2025.
TRM Labs links laundering to Russian exchanges and mixers, despite CoinJoin use.
🔗 Read → https://thehackernews.com/2025/12/lastpass-2022-breach-led-to-years-long.html | 7 112 |
| 6 |  Fortinet confirms active exploitation of a FortiOS SSL VPN flaw that bypasses 2FA.
CVE-2020-12812 lets attackers log in by changing the case of a username when LDAP is misconfigured.
The bug can allow admin or VPN access without second-factor checks.
🔗 Read → https://thehackernews.com/2025/12/fortinet-warns-of-active-exploitation.html | 7 318 |
| 7 |  CISA added a Digiever NVR bug to its exploited list after confirmed attacks.
CVE-2023-52163 allows remote code execution through command injection once logged in.
Researchers link it to Mirai and ShadowV2 botnets. The device is end-of-life and unpatched.
🔗 Read → https://thehackernews.com/2025/12/cisa-flags-actively-exploited-digiever.html | 6 797 |
| 8 |  A new MacSync malware variant hit macOS via a signed and notarized app, letting it bypass Apple Gatekeeper.
The fake messaging installer ran like a legitimate app until Apple revoked the certificate.
🔗 Read → https://thehackernews.com/2025/12/new-macsync-macos-stealer-uses-signed.html | 7 216 |
| 9 |  Nomani investment scams rose 62% in 2025, ESET says.
Campaigns now run on YouTube as well as Facebook, pushing fake returns with AI-made videos.
64,000+ scam URLs were blocked this year.
🔗 How the fraud chain works → https://thehackernews.com/2025/12/nomani-investment-scam-surges-62-using.html | 7 618 |
| 10 |  Cybercrime shifted in 2025. 70.5% of data breaches hit SMBs, not large enterprises.
Attackers moved to smaller firms after big companies hardened defenses and rejected ransoms. Volume replaced payout size.
🔗 What the data shows from 2025 breaches → https://thehackernews.com/2025/12/attacks-are-evolving-3-ways-to-protect.html | 7 186 |
| 11 | U.S. SEC has charged multiple companies over a crypto scam that took $14M from retail investors.
The scheme used WhatsApp investment clubs and fake AI trading signals to push victims onto non-existent crypto platforms.
No real trading ever happened.
🔗 Read → https://thehackernews.com/2025/12/sec-files-charges-over-14-million.html | 7 229 |
| 12 |  Italy fined Apple €98.6m over how App Tracking Transparency works in the App Store.
Regulators say third-party apps must show double consent prompts, while Apple’s own apps get one-tap approval.
🔗 Read → https://thehackernews.com/2025/12/italy-fines-apple-986-million-over-att.html | 7 745 |
| 13 |  🛑 Two Chrome extensions were caught intercepting browser traffic and stealing credentials from 170+ sites.
They pose as VPN tools, charge subscriptions, then silently proxy traffic and exfiltrate credentials in plaintext.
One has been active since 2017, the other since 2023.
🔗 Details → https://thehackernews.com/2025/12/two-chrome-extensions-caught-secretly.html | 8 670 |
| 14 |  Watch how Passwd handles shared passwords, API keys, and system access for Google Workspace teams.
Centralized admin control with audit trails replaces informal sharing without introducing a new login layer or tool sprawl.
🔗 Learn more → https://thehackernews.com/2025/12/passwd-walkthrough-of-google-workspace.html | 8 127 |
| 15 |  What happens when your security vendor is too distracted by a merger to help you fix a vulnerability?
New insights from JFrog explore the risks of vendor instability in a consolidating market.
Don't let your AppSec stack become a liability. Read the analysis: https://thn.news/sec-vendor-risks-x | 8 033 |
| 16 |  INTERPOL led a cybercrime sweep across Africa. 574 arrests and $3M recovered after targeting BEC, extortion, and ransomware in 19 countries.
Separately, a Ukrainian Nefilim ransomware affiliate pleaded guilty in the U.S.
🔗 Details from both cases → https://thehackernews.com/2025/12/interpol-arrests-574-in-africa.html | 9 677 |
| 17 |  Purdue University tested deepfake detectors where they actually break: real, compressed social media video.
Not clean demos. Not lab data.
The benchmark shows why false-acceptance rate matters more than accuracy when camera feeds drive access and trust.
🔗 What the benchmark reveals → https://thehackernews.com/expert-insights/2025/12/purdue-universitys-real-world-deepfake.html | 7 304 |
| 18 |  💪 The U.S. Justice Department seized fraud infrastructure used to steal bank logins at scale.
Criminals ran fake bank ads on Google and Bing, captured credentials, and drained real accounts.
$14.6M in confirmed losses so far.
🔗 Read details here → https://thehackernews.com/2025/12/us-doj-seizes-fraud-domain-behind-146.html | 7 325 |
| 19 |  ⚠️ ALERT — A critical RCE flaw (CVSS 9.9) was found in the n8n workflow automation platform.
CVE-2025-68613 lets authenticated users execute arbitrary code, enabling full instance takeover, data access, and system-level actions.
More than 103k exposed instances are observed globally.
🔗 Details → https://thehackernews.com/2025/12/critical-n8n-flaw-cvss-99-enables.html | 7 991 |
| 20 |  FCC added foreign-made drones and critical components to its Covered List, blocking new U.S. approvals and imports under a national-security finding.
New DJI, Autel and other foreign models won’t enter the market unless DoD or DHS approves.
🔗 Read → https://thehackernews.com/2025/12/fcc-bans-foreign-made-drones-and-key.html | 7 380 |
