How can I read @thehackernews without a Telegram account?

TGViewer shows the public web preview Telegram publishes for The Hacker News: recent posts, photos, videos and the subscriber count, with no app, login or account.

How many subscribers does The Hacker News have?

The Hacker News (@thehackernews) has 163K subscribers on Telegram, refreshed roughly every 30 minutes.

Does The Hacker News know I viewed it here?

No. Public channel previews carry no viewer identity, and TGViewer has no accounts or tracking of what you look up.

Channel ✦ Verified Channel

The Hacker News

@thehackernews

⭐ Official THN Telegram Channel — A trusted, widely read, independent source for breaking news and tech coverage about cybersecurity and hacking.

📨 Contact: admin@thehackernews.com

🌐 Website: https://thehackernews.com

Open in Telegram

Subscribers: 163K
Photos: 4.2K
Videos: 28
Links: 10.2K

Recent Posts 20 shown

Post #10364 1.85K Oct 16, 2026, 17:52 UTC

‼️ A 37-year-old BSD bug can still help gain root on OpenBSD 7.9.

Researchers released a local exploit PoC chaining the shared-memory overflow with a kernel use-after-free, bypassing KARL, SMAP and SMEP.

Read - https://thehackernews.com/2026/10/researchers-demonstrate-openbsd-root.html

🤯 8
👍 3
🤔 1

Post #10363 2.29K Oct 16, 2026, 16:48 UTC

‼️ NEW - Attackers tampered with AOMEI Backupper’s update servers in 5–10-minute bursts, delivering a backdoor to PCs checking for updates.

Organizations across 11 countries were affected. AOMEI says its servers are fixed, but infected machines remain compromised.

Read - https://thehackernews.com/2026/10/attackers-tampered-with-aomei.html

⚡ 2
👍 1

Post #10362 2.34K Oct 16, 2026, 16:21 UTC

🚨 UAT-11985 is targeting Taiwan research affiliates with fake event invitations and tampered QR codes.

The lures lead to spoofed Google sign-in pages designed to intercept passwords and MFA codes in real time using AitM phishing.

Read - https://thehackernews.com/2026/10/uat-11985-uses-fake-event-invites-to.html

🔥 4
👍 1

Post #10361 2.5K Oct 16, 2026, 15:57 UTC

“Mitigated” doesn't always mean the threat is gone.

In 2025 SOC data, live memory scans found ~2,600 infected machines. 51% had already been marked mitigated by EDR.

AI decision models can speed up alert triage. But confident verdicts still need forensic evidence.

Read → https://thehackernews.com/2026/10/ai-decision-models-and-their-impact-on.html

🔥 5
👍 2
😱 1

Post #10360 3.19K Oct 16, 2026, 14:06 UTC

⚠️ An OpenAI research model spent test ETH from a third-party wallet without permission to deploy a smart contract.

It derived wallet keys from public seed phrases after failing to get free tokens.

One of 7 new misalignment incidents.

Read - https://thehackernews.com/2026/10/openai-research-model-spent-3rd-party.html

😱 10
😁 5
🤯 3
🔥 2

Post #10359 3.35K Oct 16, 2026, 13:04 UTC

Get more time to revisit course labs after training ends, and a clearer shot at your next GIAC credential with any SANS CDI 2026 course by 11/15.

No promo code, no exclusions.
Dec 14-19 in D.C. and online.

Full details: https://thn.news/sans-initiative

🔥 1

Post #10358 4.51K Oct 16, 2026, 07:03 UTC

‼️ AI agents escaped their assigned tasks and accessed REAL systems in India.

CERT-In confirms they read confidential business records and personal data using exposed credentials and excessive cloud permissions.

None of them noticed. The AI firms reported it themselves.

Read: https://thehackernews.com/2026/10/cert-in-warns-ai-agents-accessed.html

😁 9
🤯 8
👍 3
⚡ 2
🔥 2
👏 2

Post #10357 4.33K Oct 16, 2026, 07:00 UTC

🚨 China-linked hackers exploited a BeyondTrust Remote Support zero-day to gain root access, establish persistence, and reach internal systems.

The Armory Castle group deployed SAWFLY and BARECLAW following the compromise.

Read - https://thehackernews.com/2026/10/china-linked-hackers-exploited.html

🔥 4
😱 3
👏 1

Post #10356 4.51K Oct 16, 2026, 05:06 UTC

🛑 Malware hidden inside legitimate FortiOS processes can bypass security checks on specially tagged VPN sessions.

Attackers deployed the memory-resident PEERSTITCH implant by exploiting a FortiOS flaw after a FortiManager breach.

Read - https://thehackernews.com/2026/10/attackers-exploit-fortios-flaw-to.html

🔥 5
⚡ 3
👍 2

Post #10355 5.39K Oct 15, 2026, 20:38 UTC

‼️ A newly disclosed critical Linux kernel flaw, PwnEscape (CVE-2026-99999), lets code inside guest VMs read host memory and enabled VM escape with root access in lab tests.

Read - https://thehackernews.com/2026/10/critical-pwnescape-linux-kernel.html

Vercel confirmed the memory leak in its live production sandboxes during its $1 million security challenge.

The flaw lies in Linux networking, not the hypervisor, with implications beyond Vercel.

😱 14
🔥 2

Post #10354 4.96K Oct 15, 2026, 18:55 UTC

⚡ Wait, wait... we're not done for the day yet!

27 MORE cybersecurity stories worth catching up on.

> VPN ransomware
> Adobe RCE
> NVIDIA escape bug
> DNS wallet theft
> self-healing backdoor
> Discord RAT
> jump-scare RAT
> AI key theft
> Meta GitHub breach
> browser theft
> Xen VM flaw
>WAF exploits
> SQL injection
+ more.

Your ThreatsDay Bulletin is here ↓ https://thehackernews.com/2026/10/threatsday-adobe-rce-dns-wallet-theft.html

👍 3

Post #10353 4.78K Oct 15, 2026, 16:07 UTC

‼️ NEW: Candiru spyware infected devices at Al Jazeera through ordinary online ads — no click, the ad only had to load.

The vendor that delivered it, Discover-Tech, was a Google-certified ad vendor.

Researchers call it the first proven case of spyware spread via targeted ads.

Read - https://thehackernews.com/2026/10/citizen-lab-traces-zero-click-candiru.html

😁 5
😱 4
🔥 2
👍 1
🤔 1

Post #10352 4.57K Oct 15, 2026, 16:03 UTC

🚨 Hackers are exploiting a WinRAR flaw to plant malware in government systems.

Silent Lynx used CVE-2025-8088 to drop PickleShell, a custom reverse shell, into the Windows Startup folder for execution at the next login.

Full story: https://thehackernews.com/2026/10/silent-lynx-exploits-winrar-flaw-to.html

👏 6
🤯 4
🔥 1
😁 1
🤔 1

Post #10351 4.64K Oct 15, 2026, 14:14 UTC

⚠️ 20,000+ Cloudflare Pages domains detected in a tech support scam operation.

Infoblox links the long-running Help TDS network to Hotejka, a suspected rebrand of ROI777.

The network redirects users to fake Windows security alerts designed to drive calls to scam support centers.

Read: https://thehackernews.com/2026/10/help-tds-linked-to-hotejka-as-20000.html

⚡ 2
👍 2

Post #10350 4.22K Oct 15, 2026, 13:51 UTC

More than 10% of malware verdicts on Go and .NET packages had no match in public sources at the time of detection.

That’s from Chainguard’s beta, where the scanner returned malicious verdicts on 5,000+ packages.

Chainguard Libraries is expanding its ecosystem coverage to GO and .NET. The language ecosystems are now available in early access with multiple layers of security controls to defend against malware.

Learn more about protecting your Go and .NET dependencies from malware → https://thn.news/chainguard-go-dotnet

🤔 2
👏 1

Post #10349 4.12K Oct 15, 2026, 13:03 UTC

‼️ NGINX patches 5 security flaws, including one present since 2005.

Three memory bugs could crash workers or possibly allow code execution in specific configurations. Two others affect TLS client-certificate checks and HTTP/3 requests.

Read - https://thehackernews.com/2026/10/nginx-fixes-5-flaws-including-possible.html

🔥 6
👍 4

Post #10348 3.92K Oct 15, 2026, 12:52 UTC

⚠️ Fake AI downloads are turning into malware traps.

ANYRUN linked 1,258 public sandbox analyses to fake AI campaigns (Apr–Oct 2026).

One fake Claude page copies a command to the clipboard, then tells users to run it in PowerShell to fetch a malicious HTA.

Read → https://thehackernews.com/2026/10/fake-ai-attacks-spread-across-us.html

🔥 5
👍 1

Post #10347 4.56K Oct 15, 2026, 12:36 UTC

‼️ ALERT - Next.js just shipped an out-of-band security update for TWO critical unauthenticated RCE flaws (both CVSS 9.5) + a high-severity DoS.

RCEs: RSC use cache (GHSA-673q-mjm6-r5xr) and librsvg via sharp (CVE-2026-96889).

🔗 Read - https://thehackernews.com/2026/10/nextjs-ships-out-of-band-patch-for-two.html

🔥 2
👍 1

Post #10346 3.82K Oct 15, 2026, 12:19 UTC

🚨 Drupal has patched a critical Field UI RCE flaw (CVE-2026-108097) with at least one known exploit path requiring no login.

Core alone doesn't expose it. Contributed modules can make it reachable.

Read - https://thehackernews.com/2026/10/drupal-patches-critical-core-rce-flaw.html

🔥 3
😁 2

Post #10345 4.03K Oct 15, 2026, 11:31 UTC

IBM found that 1 in 5 organizations reported a breach tied to shadow AI. At the same time, sensitive data enters AI prompts every day, often without anyone flagging it. And without visibility into how AI is actually being used, proving compliant usage becomes guesswork.

To address these risks, NordLayer AI Scout gives security teams the visibility to detect AI usage, flag sensitive data before a prompt is sent, and support governance that works in practice, not just on paper.

Learn more 👉 https://thn.news/security-visibility-tools

🔥 4
🤔 4

Older posts →

About this channel

How can I read @thehackernews without a Telegram account?: TGViewer shows the public web preview Telegram publishes for The Hacker News: recent posts, photos, videos and the subscriber count, with no app, login or account.
How many subscribers does The Hacker News have?: The Hacker News (@thehackernews) has 163K subscribers on Telegram, refreshed roughly every 30 minutes.
Does The Hacker News know I viewed it here?: No. Public channel previews carry no viewer identity, and TGViewer has no accounts or tracking of what you look up.