Hackread.com

Hackread.com

@hackread.bsky.social

The official Bluesky account of the most reliable cybersecurity news platform brings exclusive dark web, tech, hacking news, and much more. Contact: admin@hackread.com.

1.8K followers14 following1.6K posts

⚠️📢 Watch out: A Teams message from “IT support” could be an attacker asking for remote access to your PC, as researchers have reviewed 400+ recent incidents involving external chats used to gain a foothold. Listen/Read: hackread.com/hackers-abus... #Cybersecurity #MicrosoftTeams #Scam #ITSupport

hackread.comHackers Abuse Microsoft Teams External Chats to Access Corporate PCsHackers impersonate IT support in Microsoft Teams external chats, tricking employees into granting remote access and installing malware on corporate computers.

After cyberattacks spoiled food at French supermarkets, researchers found 12,976 refrigeration services exposed online in 99 countries, warning that compromised controls could put food and medicines at risk. Listen/Read: hackread.com/refrigeratio... #Cybersecurity #IoT #Vulnerability #OTSecurity

hackread.com12,976 Refrigeration Controls Found Exposed Online in 99 CountriesForescout found 12,976 exposed refrigeration services in 99 countries, warning that attackers could alter temperatures and spoil food, medicines and supplies.

Eight CA private keys were so weak they could be recovered in under a second. Following the incident, eMudhra has announced it will leave the global SSL/TLS certificate business. Listen/Read: hackread.com/emudhra-exit... #Cybersecurity #eMudhra #India #SSL #TLS

hackread.comeMudhra to Exit SSL/TLS Market After 8 CA Keys Found Easily GuessableeMudhra will leave the global SSL/TLS certificate market after eight intermediate CA private keys were found easily guessable, prompting browser distrust actions.

⚠️📢🤖 A magnetic tag hidden under a label can fool a robot’s sense of touch. Researchers’ video demos show PhantomTac making robots drop, crush or topple objects without software access. Listen/Read: hackread.com/phantomtac-a... #Cybersecurity #Robotics #PhantomTac #Technology

hackread.comPhantomTac Attack Tricks Robots Into Dropping or Crushing ObjectsResearchers demonstrated PhantomTac, an attack using hidden magnetic tags to trick robotic touch sensors and make robots drop objects or damage them with force.

⚠️📢 After Operation Endgame disrupted StealC, its seller has returned with Stadia RAT, adding hidden desktop control and remote command execution to its credential-stealing capabilities. Listen/Read: hackread.com/stealc-malwa... #Malware #Cybersecurity #StadiaRAT #StealC #OperationEndgame

hackread.comStealC Malware Returns as Stadia RAT After Operation Endgame TakedownStealC's seller has returned with Stadia RAT, combining credential theft, hidden desktop control, and remote command execution using code reused from StealC v3.5.

Even an air-gapped PC, isolated from external networks, can leak secrets as the new #SPECTER technique uses USB power changes to transmit data after malware gains administrator access. Listen/Read: hackread.com/specter-usb-... #Cybersecurity #AirGapped #USB

hackread.comSPECTER Attack Uses USB Power Signals to Leak Data From Air-Gapped PCsResearchers demonstrated SPECTER, a technique that leaks data from compromised air-gapped PCs through USB power controls, phone charging changes and peripherals.

GoDaddy revoked 404,607 SSL/TLS certificates after finding certificate-policy errors, with affected sites including some Gibraltar government websites. Listen/Read: hackread.com/godaddy-revo... #GoDaddy #Cybersecurity #Hosting #SSL #Certificate

hackread.comGoDaddy Revokes 404,607 SSL Certificates After Policy ErrorsGoDaddy revoked 404,607 SSL/TLS certificates after finding certificate-policy errors, with affected sites including some Gibraltar government websites.

⚠️📢 A fake legal notice can lead to remote control of your PC as researchers traced a new campaign delivering #OverlordRAT through phishing emails impersonating Brazilian notary offices. Listen/Read: hackread.com/overlord-rat... #Malware #Cybersecurity #Windows #Brazil #Phishin

hackread.comOverlord RAT Uses Fake Legal Notices to Infect Windows PCs in New CampaignWatchGuard details Overlord RAT attacks using fake Brazilian legal notices, plus Lampion malware and a separate remote access campaign targeting users in Portugal.

Patching an app won’t fix a vulnerable server behind it. NowSecure found 426 Android and iOS apps contacting servers reporting PHP versions affected by PHP2Shell. Listen/Read: hackread.com/426-android-... #Cybersecurity #PHP2Shell #PHP #Vulnerability

hackread.com426 Android and iOS Apps Linked to PHP2Shell Backend Risks426 mobile apps connecting to servers advertising PHP versions potentially affected by PHP2Shell vulnerabilities, raising concerns about backend security.

Police in 21 African countries arrested 1,462 suspects and recovered over $105 million in #OperationSerengetiIII, targeting scam rings, phishing and illegal crypto mining. Listen/Read: hackread.com/operation-se... #Cybercrime #INTERPOL #Cybercrime #Phishing #Fraud #Africa

hackread.comOperation Serengeti III Nets 1,462 Arrests and $105M in Cybercrime CrackdownINTERPOL’s Operation Serengeti III targeted cybercrime in 21 African countries, recovering over $105 million and identifying 65,929 victims of criminal networks.

Qilin and INC ransomware operators are exploiting a Palo Alto VPN flaw in ongoing attacks, bypassing authentication, including MFA, to access company networks. Listen/Read: hackread.com/qilin-inc-ex... #Ransomware #Cybersecurity #PaloAlto #VPN #Vulnerability #INC #Qilin

hackread.comQilin and INC Exploit Palo Alto VPN Flaw in Ransomware AttacksQilin and INC ransomware operators exploit a PAN-OS vulnerability (CVE-2026-0257) to gain VPN access, then steal domain credentials from VMware virtual disks.

⚠️📢 PHP2Shell flaws can let attackers run code on web servers without logging in. Emergency fixes are out. Updating WordPress alone won’t fix the server’s PHP installation. Listen/Read: hackread.com/php-releases... #PHP #Cybersecurity #PHP2Shell #Vulnerability #WordPress

hackread.comPHP Releases Emergency Fixes for Critical PHP2Shell VulnerabilitiesPHP releases emergency PHP2Shell fixes for two critical flaws allowing unauthenticated code execution. Website owners and hosting providers must update.

⚠️📢 Newly exposed records show INC and #TheGentlemen ransomware affiliates are using Claude and Kimi to plan attacks. Researchers recovered 8,257 AI messages, stolen credentials and 46 encryptor builds from the servers. Read: hackread.com/inc-the-gent... #Ransomware #Cybersecurity #Claude

hackread.comINC and The Gentlemen Ransomware Affiliates Expose 8,257 AI MessagesSOCRadar found seven exposed servers linked to INC and The Gentlemen ransomware affiliates, holding AI chats, stolen credentials and 46 encryptor builds.

China-based BRONZE SANDCASTLE hackers used legitimate Windows apps to run encrypted backdoors, then searched networks and copied an Active Directory database containing password hashes. Listen/Read: hackread.com/china-bronze... #Cybersecurity #Malware #BRONZESANDCASTLE #Windows

hackread.comChina-Based BRONZE SANDCASTLE Hackers Abuse Sandboxie to Load BackdoorsBRONZE SANDCASTLE abuses legitimate Windows apps to load encrypted backdoors, collect system information and steal Active Directory data.

⚠️📢🪝A Chinese couple has been arrested in #Japan over an alleged phishing and credit card fraud. Police traced nearly 480,000 phishing emails to a computer hidden behind a hotel refrigerator and connected to its Wi-Fi. Listen/Read: hackread.com/phishing-ema... #Cybersecurity #Phishing #Cybercrime

hackread.com480,000 Phishing Emails Traced to Computer Hidden Behind Hotel FridgeJapanese police arrested a Chinese couple accused of hiding a computer in a Kobe hotel to send phishing emails and using stolen credit card details for purchases.

Federal investigators suspect a US ransomware negotiator helped ShinyHunters operate its victim-extortion site. The unnamed executive is separate from Edward Dubrovsky. Listen/Read: hackread.com/us-ransomwar... #Cybersecurity #ShinyHunters #Ransomware #Extortion #Cybercrime

hackread.comUS Ransomware Negotiator Suspected of Helping ShinyHunters Extort VictimsFederal investigators suspect a US ransomware negotiator helped ShinyHunters operate an extortion site used to pressure nearly 100 organisations.

⚠️📢🪝That routine meeting invite in your inbox may lead somewhere other than Microsoft Teams. A phishing campaign has sent hundreds of thousands of fake calendar invitations designed to steal Microsoft credentials. Listen/Read: hackread.com/fake-calenda... #Cybersecurity #Phishing #Microsoft365

hackread.comFake Calendar Invites Target 40,000 Firms in Microsoft Credential TheftMore than 40,000 organisations have received fake calendar invitations designed to steal Microsoft account credentials, according to new findings from CPR.

⚠️📢 An OpenAI model accessed a crypto wallet without permission and spent Sepolia test ETH to deploy smart contracts after authorized funding methods failed. Listen/Read: hackread.com/openai-model... #OpenAI #AI #Crypto #Cybersecurity #HackingNews

hackread.comOpenAI Model Hacked Crypto Wallet and Spent Funds to Deploy Smart ContractsOpenAI disclosed that an internal AI model hacked a crypto wallet and spent Sepolia test ETH without permission to deploy smart contracts.

Claude Code Desktop’s preview pane could let malicious HTML steal SSH keys, cloud credentials, GitHub and npm tokens. Anthropic fixed it after an initial patch was bypassed. Listen/Read: hackread.com/claude-code-... #Cybersecurity #ClaudeCode #Vulnerability #AI

hackread.comClaude Code Desktop Flaw Let Malicious HTML Steal Developer CredentialsNoma Labs found a high-severity Claude Code Desktop flaw that let malicious HTML files steal local credentials and private keys through the preview pane.

⚠️📢 Targeted ads delivered Candiru mercenary spyware to #AlJazeera devices with no clicks required. Citizen Lab found the ads also reached NATO networks, but did not confirm infection. Listen/Read: hackread.com/targeted-ads... #Cybersecurity #Candiru #Spyware #NATO #CitizenLab

hackread.comTargeted Ads Used to Infect Al Jazeera Devices with Candiru SpywareCitizen Lab found targeted ads delivered Candiru spyware to Al Jazeera devices without clicks, while the same ad system reached government networks.

A misconfigured database linked to Vibetech exposed 13.7 million records from previous breaches, including AT&T, Casio data, the FBI employee directory, plaintext passwords, and bank details. Listen/Read: hackread.com/vibetech-dat... #DataBreach #Cybersecurity #Vibetech #Privacy

hackread.comVibetech Database Exposes 13.7M Records Including AT&T and FBI DataAn misconfigured Vibetech database exposed 13.7 million records from previous breaches, including AT&T, Casio and FBI data, passwords and bank details.

Could AI malware spread between devices on its own? Anthropic tested model replication on Android emulators and ran another model across $55 TV boxes, showing how AI worms might work. Listen/Read: hackread.com/anthropic-wa... #AI #Cybersecurity #Anthropic #Malware #IoT #Android

hackread.comAnthropic Warns Small AI Models Could Power Self-Spreading AI WormsAnthropic finds small AI models can set up inference servers across different hardware, raising concerns about future AI worms targeting connected devices.

⚠️📢 Microsoft and Health-ISAC seized domains linked to YAM Store, CoGUI and Iron Man, services blamed for over 1 billion malicious messages targeting 75,000+ organizations. Listen/Read: hackread.com/microsoft-se... #Microsoft #Phishing #Cybercrime #Scam #Fraud

hackread.comMicrosoft Seizes YAM Store and Phishing Kit Domains Linked to 1B Malicious MessagesMicrosoft and Health-ISAC seize domains linked to YAM Store, CoGUI and Iron Man, services that enabled over 1 billion malicious messages since January 2026.

Check Point Research reports two LiteLLM flaws that could let low-privilege authenticated users take over admin accounts, access internal files, execute code and steal AI provider API keys. Listen/Read: hackread.com/check-point-... #LiteLLM #Cybersecurity #AI #APIKeys #Vulnerability

hackread.comCheck Point Reports LiteLLM Flaws Enabling Admin Takeover and API Key TheftCheck Point Research found two LiteLLM vulnerabilities that could let low-privilege users execute code, access sensitive files, hijack admin accounts, and steal AI provider API keys.

Microsoft fixed 1,413 security flaws in its October Patch Tuesday update, including an actively exploited Windows Shell zero-day that can bypass Mark of the Web protections. Listen/Read: hackread.com/microsoft-fi... #Microsoft #PatchTuesday #Cybersecurity #Windows #Vulnerability

hackread.comMicrosoft Fixes 1,413 Vulnerabilities in Record October Patch Tuesday UpdateMicrosoft addressed 1,413 security vulnerabilities in its October 2026 Patch Tuesday update, making it the company’s largest monthly security release to date.

Amazon Fire TV Cube rooted using a four-year-old ARM Mali GPU vulnerability, allowing users to bypass software restrictions and run alternative operating systems. Listen/Read: hackread.com/amazon-fire-... #Amazon #AmazonFireTV #FireTVCube #ArmMali #Cybersecurity

hackread.comAmazon Fire TV Cube Rooted Using Four-Year-Old Arm Mali VulnerabilityA four-year-old Arm Mali GPU vulnerability can be used to root the third-generation Amazon Fire TV Cube, but its patch status remains unclear.

⚠️📢 Hackers manipulated refrigeration-control systems to heat supermarket fridges to 50°C in France, forcing stores to dump spoiled food stocks. Separate IT outages also hit retailers in the Netherlands and Belgium. Read/Listen: hackread.com/hackers-heat... #Cybersecurity #Cyberattack #France #IoT

hackread.comHackers Heat Supermarket Fridges to 50°C in France CyberattackHackers reportedly heated supermarket fridges to 50°C in France, spoiling food stocks, while stores in the Netherlands and Belgium faced separate IT outages.

Empire Market co-creator Raheim Hamilton has been sentenced to 40 years in federal prison after the dark web marketplace handled more than $430 million in illegal transactions. Read/Listen: hackread.com/dark-web-emp... #Cybercrime #DarkWeb #EmpireMarket #Cybersecurity

hackread.comDark Web Empire Market Co-Creator Raheim Hamilton Gets 40 Years in PrisonRaheim Hamilton, co-creator of the dark web marketplace Empire Market, was sentenced to 40 years for a platform that handled $430M in illegal sales.

Ransomware recovery firm #MonsterCloud’s CEO Zohar Pinhasi is accused by the DOJ of defrauding victims by secretly paying attackers for decryption keys, then charging clients much higher fees. Listen/Read: hackread.com/monstercloud... #Ransomware #Cybercrime #Cybersecurity

hackread.comMonsterCloud CEO Zohar Pinhasi Accused of Defrauding Ransomware VictimsThe DOJ accuses MonsterCloud CEO Zohar Pinhasi of secretly paying ransomware gangs for decryption keys while charging victims hefty recovery fees.

FBI and Secret Service warn the FortiBleed campaign is still active, with SOCRadar reporting 86,000+ compromised FortiGate devices in 194 countries. Listen/Read: hackread.com/fbi-fortible... #FortiBleed #Fortinet #Cybersecurity #SOCRadar #FBI

hackread.comFBI Warns FortiBleed Campaign Still Active, Hits 86,000+ FortiGate DevicesFortiBleed attacks continue to target Fortinet FortiGate devices, with SOCRadar reporting more than 86,644 compromised devices across 194 countries.

FBI has seized domains linked to #FlaxTyphoon, a China-linked hacking group accused of targeting US critical infrastructure. The operation has disrupted tools like “Microscan” and “FishHub, used for scanning and phishing. Read: hackread.com/fbi-seizes-f... #Cybersecurity #Phishing #China

hackread.comFBI Seizes Flax Typhoon Hacking Tools Linked to Chinese ContractorThe FBI and DOJ seized domains and disrupted scanning and spear-phishing tools used by Flax Typhoon, a China-linked threat group tied to Integrity Technology Group.

⚠️📢 Some low-cost Android phones may arrive compromised before users even switch them on. #MidnightMimosa malware is preinstalled in system firmware, enabling ad fraud, proxyware and silent app installation. Listen/Read: hackread.com/midnight-mim... #Android #Malware #Cybersecurity #AdFraud

hackread.comMidnight Mimosa Malware Found Preinstalled on Low-Cost Android PhonesBitdefender researchers uncover Midnight Mimosa malware preinstalled on low-cost MediaTek Android phones enabling ad fraud and proxyware activity.

FBI and French police seized two domains linked to a site accused of advertising leaked sexual images, including material involving minors. A suspected administrator was arrested in France. Listen/Read: hackread.com/fbi-french-p... #Cybercrime #CSAM #FBI #Cybersecurity #France

hackread.comFBI, French Police Seize CSAM Site Domains, Suspected Admin ArrestedUS and French authorities seized two domains and arrested a suspected administrator in a CSAM and non-consensual intimate image abuse case.

#Dread, one of the dark web’s most-used discussion forums, has been hijacked, with operators claiming control of its domain keys and promoting another forum as a replacement. Listen/Read: hackread.com/dread-dark-w... #Dread #DarkWeb #Cybersecurity #ThreatIntel

hackread.comDread Dark Web Forum Hijacked, Operators Claim Control of Domain KeysDread dark web forum appears hijacked after a pinned post claimed control of the project and domain keys, while denying plans to leak user data.

Over 100 Ukrainian websites were hacked to show fake Cloudflare checks that tricked visitors into installing Lunex Stealer, which steals passwords, browser data and crypto wallets. Listen/Read: hackread.com/ukrainian-we... #LunexStealer #ClickFix #Malware #Cybersecurity

hackread.com100+ Ukrainian Websites Hacked to Install Lunex Stealer with ClickFix LureOver 100 hacked Ukrainian websites used fake Cloudflare checks to install Lunex Stealer and steal browser passwords, tokens and cryptocurrency wallets.

The FBI removed a contractor from the assignment after a missed security patch left the bureau’s PeopleSoft jobs portal exposed. #ShinyHunters claimed responsibility for the breach. Listen/Read: hackread.com/fbi-removes-... #FBI #Accenture #DataBreach #CyberSecurity #Vulnerability #CyberCrime

hackread.comFBI Removes Accenture Contractor Over ShinyHunters Job Site Data BreachThe FBI removed a contractor over a ShinyHunters-linked breach. Reuters sources identified Accenture and an unpatched Oracle PeopleSoft system.

⚠️📢 The FBI has confirmed multiple arrests in its ShinyHunters investigation as authorities pursue suspects in several countries. The group’s leak site remains online, but no new breach claims have appeared. Listen/Read: hackread.com/fbi-confirms... #ShinyHunters #FBI #Cybercrime #DataBreach

hackread.comFBI Confirms Multiple Arrests in ShinyHunters InvestigationThe FBI confirmed multiple arrests in its ShinyHunters investigation after suspected member Saif al-Din Khader was reportedly detained in Jordan.

⚠️📢 Hackers are exploiting 24 known vulnerabilities to install the #ClingSTUN Linux backdoor on internet-facing IoT devices, turning them into remotely controlled proxy nodes. Listen/Read: hackread.com/hackers-expl... #Cybersecurity #IoT #Linux #Malware #Vulnerability

hackread.comHackers Exploit 24 IoT Vulnerabilities to Install ClingSTUN Linux BackdoorMeet ClingSTUN, a new Linux backdoor that exploits IoT flaws, gives attackers remote command access and turns infected devices into proxy nodes.

⚠️📢 Russian state-backed hackers targeted 100+ organizations worldwide with large-scale phishing campaigns and a new technique called RedFlick to deliver the #CosmicPulse backdoor. Listen/Read: hackread.com/star-blizzar... #Cybersecurity #Phishing #Malware #StarBlizzard #RedFlick

hackread.comStar Blizzard Targets 100+ Organizations with Phishing and RedFlick TechniqueRussian group Star Blizzard expands phishing campaigns with the RedFlick technique, using scheduled tasks to deliver the CosmicPulse backdoor.

⚠️📢 A suspected #ShinyHunters member known as “Rey” has been detained in Jordan and is cooperating with the FBI to help identify other hackers, days after the group claimed a major breach of FBI personnel data. Listen/Read: hackread.com/shinyhunters... #FBI #Cybercrime #DataBreach #Jordan

hackread.comShinyHunters Suspect “Rey” Detained in Jordan, Reportedly Helping FBIShinyHunters hacker “Rey” was detained in Jordan and is reportedly cooperating with the FBI after the group claimed major FBI and corporate data breaches.

⚠️📢 The Dutch Institute for Vulnerability Disclosure (DIVD) was breached through 2 #Zammad 0-days in what it describes as an “agentic AI-powered attack,” leading to code execution and root access. Listen/Read: hackread.com/dutch-instit... #Cybersecurity #0Day #AI #CyberAttack #AgenticAI

hackread.comDutch Institute for Vulnerability Disclosure Breached via Zammad 0-DaysDutch Institute for Vulnerability Disclosure was breached through two Zammad 0-days in an AI-powered attack that led to remote code execution and root access.

⚠️📢 🚢 A study of 367,000 ships has found evidence of GPS spoofing worldwide, including Red Sea activity detected months before the MSC Antonia grounding. Listen/Read: hackread.com/ship-study-g... #Cybersecurity #GPSSpoofing #MaritimeSecurity #GPS #Shipping

hackread.com367,000-Ship Study Finds Global GPS Spoofing, Red Sea Activity Before GroundingA study of 367,000 ships finds global GPS spoofing, including Red Sea activity detected months before the MSC Antonia grounding in May 2025.

⚠️📢 International police have dismantled #KillSec, arresting three suspects, including a 16-year-old alleged administrator, and seizing five servers and 110TB of stolen data. Listen/Read: hackread.com/killsec-rans... #Ransomware #Cybercrime #OperationKillSwitch #Cybersecurity

hackread.comKillSec Ransomware Group Dismantled, 16-Year-Old Suspected Admin ArrestedInternational police dismantle the KillSec ransomware group, arresting a 16-year-old suspected admin and seizing five servers and 110TB of stolen data.

⚠️📢 Mac users, watch out! Researchers have uncovered CloudSyncD, a new macOS backdoor distributed through a fake Zoom installer that tricks users into revealing their Mac password and more. Listen/Read: hackread.com/cloudsyncd-m... #macOS #Malware #CloudSyncD #Zoom #Cybersecurity

hackread.comNew CloudSyncD macOS Backdoor Uses Fake Zoom Installer to Steal PasswordsCloudSyncD macOS backdoor uses a fake Zoom installer to steal Mac passwords, bypass Gatekeeper and connect infected devices to remote C2 servers.

⚠️📢 Times Car has confirmed a data breach affecting around 6.6 million accounts, with identity documents linked to about 1.6 million accounts also exposed, including driver's licence images. Listen/Read: hackread.com/japanese-car... #DataBreach #TimesCar #Cybersecurity #Japan #Privacy

hackread.comJapanese Car-Sharing Site Times Car Data Breach Affects 6.6M AccountsTimes Mobility says a data breach exposed data linked to 6.6 million accounts, including 1.6 million identity records with driver's license images and documents too.