Trump Campaign Website Defaced by Cryptocurrency Scam

UPDATE Hackers took over President Trump’s 2020 election campaign website late Tuesday, replacing parts of the site with a cryptocurrency scam before returning it to its original content several minutes later. Journalist Gabriel Lorenzo Greschler was the first to notice the attack while he was...

Hackers blackmail vulnerable patients after psychotherapy clinic hack

By Deeba Ahmed Confidential Data of Thousands of Finnish Psychotherapy Clinic Patients Has Been Exposed after Data Breach. This is a post from HackRead.com Read the original post: Hackers blackmail vulnerable patients after psychotherapy clinic hack...

The Russian Hackers Playing 'Chekhov's Gun' With US Targets

Berserk Bear has had plenty of opportunity to cause serious trouble. So why hasn't it yet?...

U.S. Levies Sanctions Against Russian Research Institution Linked to Triton Malware

The Trump administration sanctioned a Russia government research institution on Friday claiming it was behind a series of cyberattacks using the highly destructive Triton malware. The Department of the Treasury’s Office of Foreign Assets Control OFAC said the Triton malware had been used in vario...

How 30 Lines of Code Blew Up a 27-Ton Generator

A secret experiment in 2007 proved that hackers could devastate power grid equipment beyond repair—with a file no bigger than a gif...

Waze app vulnerability allowed users’ real-time location tracking

By Waqas Waze app has more than 130 million active monthly users globally and that makes it a lucrative target for hackers. Here's what happened. This is a post from HackRead.com Read the original post: Waze app vulnerability allowed users real-time location tracking...

Microsoft is the Most-Imitated Brand for Phishing Emails

Microsoft is top of the heap when it comes to hacker impersonations – with Microsoft products and services featuring in nearly a fifth of all global brand phishing attacks in the third quarter of this year. That’s according to Check Point, which found that the computing giant leapt from fifth pla...

TikTok Launches Bug Bounty Program Amid Security SNAFUs

TikTok has expanded its vulnerability disclosure policy to include a global bug-bounty program through a partnership with the ethical hacker platform HackerOne. The bug-bounty program launch signals a new direction for the Chinese-owned video-sharing app, which has been much maligned for its...

Hackers exploit VPN, Windows flaws to influence US elections

By Sudais Asif According to CISA, these Windows flaws are centered around Fortinet FortiOS Secure Socket Layer SSL VPN and MobileIron platform. This is a post from HackRead.com Read the original post: Hackers exploit VPN, Windows flaws to influence US elections...

Hacking Apple for Profit

Five researchers hacked Apple Computers networks -- not their products -- and found fifty-five vulnerabilities. So far, they have received $289K. One of the worst of all the bugs they found would have allowed criminals to create a worm that would automatically steal all the photos, videos, and...

Researchers Found 55 Flaws in Apple's Corporate Network

The company has patched the vulnerabilities and paid the team of white-hat hackers $288,000...

What Programming Languages Do Ethical Hackers Use?

By Owais Sultan Ethical hacking is when hacking is done for good reasons - The people behind ethical hacking are ethical hackers or white hat hackers. This is a post from HackRead.com Read the original post: What Programming Languages Do Ethical Hackers Use?...

Wormable Apple iCloud Bug Allows Automatic Photo Theft

A group of ethical hackers cracked open Apple’s infrastructure and systems and, over the course of three months, discovered 55 vulnerabilities, a number of which would have given attackers complete control over customer and employee applications. Of note, a critical, wormable iCloud account...

Potential access control security issue in apollo-adminservice

Impact If users expose apollo-adminservice to internetwhich is not recommended, there are potential security issues since apollo-adminservice is designed to work in intranet and it doesn't have built-in access control. Malicious hackers may access apollo-adminservice apis directly to access/edit...

Facebook Shut Down Malware That Hijacked Accounts to Run Ads

Hackers spent $4 million of victims’ money to buy ads for diet pills, fake designer handbags, and more...

Beware: New Android Spyware Found Posing as Telegram and Threema Apps

A hacking group known for its attacks in the Middle East, at least since 2017, has recently been found impersonating legitimate messaging apps such as Telegram and Threema to infect Android devices with a new, previously undocumented malware. "Compared to the versions documented in 2017,...

Cisco Issues Patches For 2 High-Severity IOS XR Flaws Under Active Attacks

Cisco yesterday released security patches for two high-severity vulnerabilities affecting its IOS XR software that were found exploited in the wild a month ago. Tracked as CVE-2020-3566 and CVE-2020-3569, details for both zero-day unauthenticated DoS vulnerabilities were made public by Cisco late...

KuCoin crypto exchange loses $150m after hackers drain its hot wallets

By Waqas Hackers have stolen a whopping $150 million worth of cryptocurrency from KuCoin, a major crypto exchange based in Singapore. This is a post from HackRead.com Read the original post: KuCoin crypto exchange loses $150m after hackers drain its hot wallets...

Bug Bounty FAQ: Top Questions, Expert Answers

Seldom does Threatpost have the privilege to tap the collective brain trust of one cybersecurity corner of the threat landscape. But last month, Threatpost brought together leading voices in the bug bounty community to participate in a webinar Five Essentials for Running a Successful Bug Bounty...

Instagram iOS & Android app flaw allowed full account access to hackers

By Sudais Asif Instagram is one social media platform that is used predominantly by millennials today taking over Facebook as well. This is a post from HackRead.com Read the original post: Instagram iOS & Android app flaw allowed full account access to hackers...