The Hacker News

Leaked n8n API Tokens Exposed Live Instances to Credential Theft

GitGuardian found 321 n8n instances accepting leaked GitHub tokens that could expose workflows, data, and downstream ...

77 Open VSX extensions found harvesting developer info

Open VSX marketplace impersonated legitimate developer tools while transmitting information about the systems and development ...

New bill would stop Trump Media from selling speedy access to president’s posts

Calif., takes aim at a new paid service from Trump Media promising faster alerts to posts from President Donald Trump and ...

Trump Media’s Truth API launches with early access to market-moving posts

(DJT) rolls out Truth API via Truth Social, selling real-time posts from President Donald Trump and other high profile users. Read more here.
The Hacker News

Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation

Russian hackers exploit CVE-2026-42897 in OWA to deploy OWAReaper, a browser implant that persists through credential ...

Contrast Security Launches CVE Shield as AI Accelerates Exploitation of Known Vulnerabilities

With a free tier to be available for runtime visibility, Contrast CVE Shield blocks Mythos-level attacks inside production applications and APIs before a patch is implementedPLEASANTON, ...