Pinned
Hackread.com
Hackread.com
@hackread.bsky.social
The official Bluesky account of the most reliable cybersecurity news platform brings exclusive dark web, tech, hacking news, and much more. Contact: admin@hackread.com.
1.8K followers14 following1.6K posts
⚠️📢 Watch out: A Teams message from “IT support” could be an attacker asking for remote access to your PC, as researchers have reviewed 400+ recent incidents involving external chats used to gain a foothold. Listen/Read: hackread.com/hackers-abus... #Cybersecurity #MicrosoftTeams #Scam #ITSupport
After cyberattacks spoiled food at French supermarkets, researchers found 12,976 refrigeration services exposed online in 99 countries, warning that compromised controls could put food and medicines at risk. Listen/Read: hackread.com/refrigeratio... #Cybersecurity #IoT #Vulnerability #OTSecurity
Eight CA private keys were so weak they could be recovered in under a second. Following the incident, eMudhra has announced it will leave the global SSL/TLS certificate business. Listen/Read: hackread.com/emudhra-exit... #Cybersecurity #eMudhra #India #SSL #TLS
⚠️📢🤖 A magnetic tag hidden under a label can fool a robot’s sense of touch. Researchers’ video demos show PhantomTac making robots drop, crush or topple objects without software access. Listen/Read: hackread.com/phantomtac-a... #Cybersecurity #Robotics #PhantomTac #Technology
⚠️📢 After Operation Endgame disrupted StealC, its seller has returned with Stadia RAT, adding hidden desktop control and remote command execution to its credential-stealing capabilities. Listen/Read: hackread.com/stealc-malwa... #Malware #Cybersecurity #StadiaRAT #StealC #OperationEndgame
Even an air-gapped PC, isolated from external networks, can leak secrets as the new #SPECTER technique uses USB power changes to transmit data after malware gains administrator access. Listen/Read: hackread.com/specter-usb-... #Cybersecurity #AirGapped #USB
GoDaddy revoked 404,607 SSL/TLS certificates after finding certificate-policy errors, with affected sites including some Gibraltar government websites. Listen/Read: hackread.com/godaddy-revo... #GoDaddy #Cybersecurity #Hosting #SSL #Certificate
⚠️📢 A fake legal notice can lead to remote control of your PC as researchers traced a new campaign delivering #OverlordRAT through phishing emails impersonating Brazilian notary offices. Listen/Read: hackread.com/overlord-rat... #Malware #Cybersecurity #Windows #Brazil #Phishin
Patching an app won’t fix a vulnerable server behind it. NowSecure found 426 Android and iOS apps contacting servers reporting PHP versions affected by PHP2Shell. Listen/Read: hackread.com/426-android-... #Cybersecurity #PHP2Shell #PHP #Vulnerability
Police in 21 African countries arrested 1,462 suspects and recovered over $105 million in #OperationSerengetiIII, targeting scam rings, phishing and illegal crypto mining. Listen/Read: hackread.com/operation-se... #Cybercrime #INTERPOL #Cybercrime #Phishing #Fraud #Africa
Qilin and INC ransomware operators are exploiting a Palo Alto VPN flaw in ongoing attacks, bypassing authentication, including MFA, to access company networks. Listen/Read: hackread.com/qilin-inc-ex... #Ransomware #Cybersecurity #PaloAlto #VPN #Vulnerability #INC #Qilin
⚠️📢 PHP2Shell flaws can let attackers run code on web servers without logging in. Emergency fixes are out. Updating WordPress alone won’t fix the server’s PHP installation. Listen/Read: hackread.com/php-releases... #PHP #Cybersecurity #PHP2Shell #Vulnerability #WordPress
⚠️📢 Newly exposed records show INC and #TheGentlemen ransomware affiliates are using Claude and Kimi to plan attacks. Researchers recovered 8,257 AI messages, stolen credentials and 46 encryptor builds from the servers. Read: hackread.com/inc-the-gent... #Ransomware #Cybersecurity #Claude
China-based BRONZE SANDCASTLE hackers used legitimate Windows apps to run encrypted backdoors, then searched networks and copied an Active Directory database containing password hashes. Listen/Read: hackread.com/china-bronze... #Cybersecurity #Malware #BRONZESANDCASTLE #Windows
A cyber incident at BAE Systems Inc. has halted US bankruptcy notices, taken federal court services offline and forced courts to change notice procedures and deadlines. Read: hackread.com/bae-systems-... #Cybersecurity #BAESystems #Bankruptcy
Scammers are abusing Adobe #Frame alerts to share malicious PDFs that redirect recipients to fake Microsoft 365 login pages. The campaign is dubbed Phantom Preview. Listen/Read: hackread.com/scammers-fra... #Phishing #Microsoft365 #Cybersecurity
⚠️📢🪝A Chinese couple has been arrested in #Japan over an alleged phishing and credit card fraud. Police traced nearly 480,000 phishing emails to a computer hidden behind a hotel refrigerator and connected to its Wi-Fi. Listen/Read: hackread.com/phishing-ema... #Cybersecurity #Phishing #Cybercrime
Federal investigators suspect a US ransomware negotiator helped ShinyHunters operate its victim-extortion site. The unnamed executive is separate from Edward Dubrovsky. Listen/Read: hackread.com/us-ransomwar... #Cybersecurity #ShinyHunters #Ransomware #Extortion #Cybercrime
⚠️📢🪝That routine meeting invite in your inbox may lead somewhere other than Microsoft Teams. A phishing campaign has sent hundreds of thousands of fake calendar invitations designed to steal Microsoft credentials. Listen/Read: hackread.com/fake-calenda... #Cybersecurity #Phishing #Microsoft365
⚠️📢 An OpenAI model accessed a crypto wallet without permission and spent Sepolia test ETH to deploy smart contracts after authorized funding methods failed. Listen/Read: hackread.com/openai-model... #OpenAI #AI #Crypto #Cybersecurity #HackingNews
Claude Code Desktop’s preview pane could let malicious HTML steal SSH keys, cloud credentials, GitHub and npm tokens. Anthropic fixed it after an initial patch was bypassed. Listen/Read: hackread.com/claude-code-... #Cybersecurity #ClaudeCode #Vulnerability #AI
⚠️📢 Burger King Japan confirms a data breach exposed 11.18 million app member records, including emails, phone numbers, dates of birth and more. Listen/Read: hackread.com/burger-king-... #DataBreach #Cybersecurity #BurgerKing #Japan
⚠️📢 Targeted ads delivered Candiru mercenary spyware to #AlJazeera devices with no clicks required. Citizen Lab found the ads also reached NATO networks, but did not confirm infection. Listen/Read: hackread.com/targeted-ads... #Cybersecurity #Candiru #Spyware #NATO #CitizenLab
A misconfigured database linked to Vibetech exposed 13.7 million records from previous breaches, including AT&T, Casio data, the FBI employee directory, plaintext passwords, and bank details. Listen/Read: hackread.com/vibetech-dat... #DataBreach #Cybersecurity #Vibetech #Privacy
Could AI malware spread between devices on its own? Anthropic tested model replication on Android emulators and ran another model across $55 TV boxes, showing how AI worms might work. Listen/Read: hackread.com/anthropic-wa... #AI #Cybersecurity #Anthropic #Malware #IoT #Android
⚠️📢 Microsoft and Health-ISAC seized domains linked to YAM Store, CoGUI and Iron Man, services blamed for over 1 billion malicious messages targeting 75,000+ organizations. Listen/Read: hackread.com/microsoft-se... #Microsoft #Phishing #Cybercrime #Scam #Fraud
Check Point Research reports two LiteLLM flaws that could let low-privilege authenticated users take over admin accounts, access internal files, execute code and steal AI provider API keys. Listen/Read: hackread.com/check-point-... #LiteLLM #Cybersecurity #AI #APIKeys #Vulnerability
Microsoft fixed 1,413 security flaws in its October Patch Tuesday update, including an actively exploited Windows Shell zero-day that can bypass Mark of the Web protections. Listen/Read: hackread.com/microsoft-fi... #Microsoft #PatchTuesday #Cybersecurity #Windows #Vulnerability
Amazon Fire TV Cube rooted using a four-year-old ARM Mali GPU vulnerability, allowing users to bypass software restrictions and run alternative operating systems. Listen/Read: hackread.com/amazon-fire-... #Amazon #AmazonFireTV #FireTVCube #ArmMali #Cybersecurity
⚠️📢 Hackers manipulated refrigeration-control systems to heat supermarket fridges to 50°C in France, forcing stores to dump spoiled food stocks. Separate IT outages also hit retailers in the Netherlands and Belgium. Read/Listen: hackread.com/hackers-heat... #Cybersecurity #Cyberattack #France #IoT
Empire Market co-creator Raheim Hamilton has been sentenced to 40 years in federal prison after the dark web marketplace handled more than $430 million in illegal transactions. Read/Listen: hackread.com/dark-web-emp... #Cybercrime #DarkWeb #EmpireMarket #Cybersecurity
FBI has arrested Edward Dubrovsky, a Canadian citizen and co-founder of ransomware negotiation firm Cypfer, in the ShinyHunters investigation. Listen/Read: hackread.com/fbi-arrests-... #ShinyHunters #Ransomware #Cybercrime #FBI
Ransomware recovery firm #MonsterCloud’s CEO Zohar Pinhasi is accused by the DOJ of defrauding victims by secretly paying attackers for decryption keys, then charging clients much higher fees. Listen/Read: hackread.com/monstercloud... #Ransomware #Cybercrime #Cybersecurity
FBI and Secret Service warn the FortiBleed campaign is still active, with SOCRadar reporting 86,000+ compromised FortiGate devices in 194 countries. Listen/Read: hackread.com/fbi-fortible... #FortiBleed #Fortinet #Cybersecurity #SOCRadar #FBI
FBI has seized domains linked to #FlaxTyphoon, a China-linked hacking group accused of targeting US critical infrastructure. The operation has disrupted tools like “Microscan” and “FishHub, used for scanning and phishing. Read: hackread.com/fbi-seizes-f... #Cybersecurity #Phishing #China
⚠️📢 Some low-cost Android phones may arrive compromised before users even switch them on. #MidnightMimosa malware is preinstalled in system firmware, enabling ad fraud, proxyware and silent app installation. Listen/Read: hackread.com/midnight-mim... #Android #Malware #Cybersecurity #AdFraud
FBI and French police seized two domains linked to a site accused of advertising leaked sexual images, including material involving minors. A suspected administrator was arrested in France. Listen/Read: hackread.com/fbi-french-p... #Cybercrime #CSAM #FBI #Cybersecurity #France
#Dread, one of the dark web’s most-used discussion forums, has been hijacked, with operators claiming control of its domain keys and promoting another forum as a replacement. Listen/Read: hackread.com/dread-dark-w... #Dread #DarkWeb #Cybersecurity #ThreatIntel
Over 100 Ukrainian websites were hacked to show fake Cloudflare checks that tricked visitors into installing Lunex Stealer, which steals passwords, browser data and crypto wallets. Listen/Read: hackread.com/ukrainian-we... #LunexStealer #ClickFix #Malware #Cybersecurity
Hackers hijacked #ASOS app notifications to announce the breach themselves. The group claims it compromised ASOS’ Snowflake instance, while the retailer says customer names and contact details may have been accessed. Listen/Read: hackread.com/asos-hackers... #Snowflake #DataBreach #Cybersecurity
The FBI removed a contractor from the assignment after a missed security patch left the bureau’s PeopleSoft jobs portal exposed. #ShinyHunters claimed responsibility for the breach. Listen/Read: hackread.com/fbi-removes-... #FBI #Accenture #DataBreach #CyberSecurity #Vulnerability #CyberCrime
⚠️📢 The FBI has confirmed multiple arrests in its ShinyHunters investigation as authorities pursue suspects in several countries. The group’s leak site remains online, but no new breach claims have appeared. Listen/Read: hackread.com/fbi-confirms... #ShinyHunters #FBI #Cybercrime #DataBreach
⚠️📢 Hackers are exploiting 24 known vulnerabilities to install the #ClingSTUN Linux backdoor on internet-facing IoT devices, turning them into remotely controlled proxy nodes. Listen/Read: hackread.com/hackers-expl... #Cybersecurity #IoT #Linux #Malware #Vulnerability
⚠️📢 Russian state-backed hackers targeted 100+ organizations worldwide with large-scale phishing campaigns and a new technique called RedFlick to deliver the #CosmicPulse backdoor. Listen/Read: hackread.com/star-blizzar... #Cybersecurity #Phishing #Malware #StarBlizzard #RedFlick
⚠️📢 A suspected #ShinyHunters member known as “Rey” has been detained in Jordan and is cooperating with the FBI to help identify other hackers, days after the group claimed a major breach of FBI personnel data. Listen/Read: hackread.com/shinyhunters... #FBI #Cybercrime #DataBreach #Jordan
⚠️📢 The Dutch Institute for Vulnerability Disclosure (DIVD) was breached through 2 #Zammad 0-days in what it describes as an “agentic AI-powered attack,” leading to code execution and root access. Listen/Read: hackread.com/dutch-instit... #Cybersecurity #0Day #AI #CyberAttack #AgenticAI
⚠️📢 🚢 A study of 367,000 ships has found evidence of GPS spoofing worldwide, including Red Sea activity detected months before the MSC Antonia grounding. Listen/Read: hackread.com/ship-study-g... #Cybersecurity #GPSSpoofing #MaritimeSecurity #GPS #Shipping
⚠️📢 International police have dismantled #KillSec, arresting three suspects, including a 16-year-old alleged administrator, and seizing five servers and 110TB of stolen data. Listen/Read: hackread.com/killsec-rans... #Ransomware #Cybercrime #OperationKillSwitch #Cybersecurity
⚠️📢 Mac users, watch out! Researchers have uncovered CloudSyncD, a new macOS backdoor distributed through a fake Zoom installer that tricks users into revealing their Mac password and more. Listen/Read: hackread.com/cloudsyncd-m... #macOS #Malware #CloudSyncD #Zoom #Cybersecurity
⚠️📢 Times Car has confirmed a data breach affecting around 6.6 million accounts, with identity documents linked to about 1.6 million accounts also exposed, including driver's licence images. Listen/Read: hackread.com/japanese-car... #DataBreach #TimesCar #Cybersecurity #Japan #Privacy