The Hacker News

⚠️ China-linked hackers targeted governments across Asia + a NATO state (Poland), exploiting Exchange/IIS flaws to deploy ShadowPad. At the same time: journalists & activists hit with phishing campaigns. Two ops. Same priorities. Details here → https://thehackernews.com/2026/05/china-linked-hackers-target-asian.html

⚠️ Two cybercrime groups are executing rapid SaaS attacks with minimal trace. Cordial Spider and Snarky Spider use vishing and AiTM phishing to steal credentials, bypass MFA, and access multiple platforms through SSO. Read: https://thehackernews.com/2026/05/cybercrime-groups-using-vishing-and-sso.html

🛑 30,000 Facebook accounts compromised in a phishing campaign using Google AppSheet emails. A Vietnamese-linked operation called AccountDumpling targeted Facebook Business users, stole credentials, sent data to Telegram, and resold accounts. Read: https://thehackernews.com/2026/05/30000-facebook-accounts-hacked-via.html

🚨 Cybersecurity firm Trellix confirms a breach. Attackers accessed part of its source code repository; no exploitation or release impact found. Investigation ongoing with forensic experts and law enforcement. Details ➜ https://thehackernews.com/2026/05/trellix-confirms-source-code-breach.html

🚨 New analysis reveals browser extensions legally selling user data. 80 extensions affect 6.5M+ users—ad blockers and streaming tools included—collecting and reselling browsing, viewing, and demographic data. All disclosed in privacy policies. Read: https://thehackernews.com/2026/04/threatsday-bulletin-sms-blaster-busts.html#extensions-legally-sell-user-data