Quish Splash QR Code Phishing Campaign Hits 1.6 Million Users

7AI research reveals a massive QR code phishing attack that evaded SPF, DKIM, and DMARC. Find out how 1.6 million emails went undetected...

Cal AI, New Owner of MyFitnessPal, Hit by Alleged Breach of 3 Million Users

Cal AI faces data breach claims after hackers post alleged data of 3 million users, including emails, health details, and subscriptions...

287 Chrome Extensions Caught Harvesting Browsing Data from 37M Users

New investigation by Q Continuum reveals 287 Chrome extensions leaking the private browsing data of 37.4 million users to firms like Similarweb and Alibaba. Learn how these harmless tools turn your history into a product...

UK’s ICO Fine LastPass £1.2 Million Over 2022 Security Breach

UK's ICO fines LastPass £1.2M for the 2022 data breach that exposed 1.6 million users’ data. Learn how a flaw in an employee's personal PC led to the massive security failure...

7 Year Long ShadyPanda Attack Spied on 4.3M Chrome and Edge Users

Koi Security exposes ShadyPanda, a group that used trusted Chrome/Edge extensions to infect 4.3 million users over 7 years for deep surveillance and corporate espionage...

Update Firefox to Patch CVE-2025-13016 Vulnerability Affecting 180 Million Users

AI security firm AISLE revealed CVE-2025-13016, a critical Firefox Wasm bug that risked 180M users for six months. Learn how the memory flaw allowed code execution...

PT-2025-39213

Name of the Vulnerable Software and Affected Versions Chamilo versions prior to 1.11.34 Description Chamilo is a learning management system susceptible to a stored cross-site scripting XSS issue. An attacker with a low-privileged account, such as a trainer, can inject malicious JavaScript into th...

Central Tickets Confirms Data Breach as Hacker Leaks Data of 1 Million Users

Another day, another ticketing platform breached!...

Payment Gateway SLIM CD Data Breach: 1.7 Million Users Impacted

The payment gateway platform SLIM CD suffered a massive data breach between August 2023 and June 2024, compromising…...

Hackers Claim Ticketmaster Data Breach: 560M Users’ Info for Sale at $500K

By Waqas ShinyHunters hacking group has claimed to have breached Ticketmaster, stealing the personal data of 560 million users. The… This is a post from HackRead.com Read the original post: Hackers Claim Ticketmaster Data Breach: 560M Users Info for Sale at $500K...

After Denial, AT&T Confirms Data Breach Affecting 73 Million Users

By Waqas Another day, another massive data breach affecting critical infrastructure in the United States! This is a post from HackRead.com Read the original post: After Denial, AT&T Confirms Data Breach Affecting 73 Million Users...

Indian ISP Hathway Data Breach: Hacker Leaks 4 Million Users, KYC Data

By Waqas While Hathway hasn't commented yet, analysis of the leaked data by Hackread.com suggests the breach may be authentic and could have serious consequences for affected individuals. This is a post from HackRead.com Read the original post: Indian ISP Hathway Data Breach: Hacker Leaks 4 Milli...

GitHub’s Hardcore Plan to Roll Out Two-Factor Authentication (2FA)

GitHub has spent two years researching and slowly rolling out its multifactor authentication system. Soon it will be mandatory for all 100 million users—with no opt-out...

Step-by-Step Security Guide for WordPress

By Waqas The most prominent CMS today is WordPress which is being used by over 455 million across the globe. This is a post from HackRead.com Read the original post: Step-by-Step Security Guide for WordPress...

CVE-2022-36782

Pal Electronics Systems - Pal Gate Authorization Errors. The vulnerability is an authorization problem in PalGate device management android client app. Gates of bulidings and parking lots with a simple button in any smartphone. The API was found after a decompiling and static research using Jadx,...

Vulnerability in Bumble dating app risked data of 100 million users

By Sudais Asif It took Bumble 255 days to respond and fix some of the vulnerabilities reported by the researcher. This is a post from HackRead.com Read the original post: Vulnerability in Bumble dating app risked data of 100 million users...

Freepik and Flaticon suffer data breach; 8.3 million users affected

By Waqas For your information, Flaticon claims to be the largest database of free icons and is owned by Freepik company. This is a post from HackRead.com Read the original post: Freepik and Flaticon suffer data breach; 8.3 million users affected...

Capital One Fined $80 Million for 2019 Data Breach Affecting 106 Million Users

A United States regulator has fined the credit card provider Capital One Financial Corp with $80 million over last year's data breach that exposed the personal information of more than 100 million credit card applicants of Americans. The fine was imposed by the Office of the Comptroller of the...

Chrome extensions with 80 million+ users found engaging in ad fraud

By Sudais Asif Another day, another large scale ad fraud through Chrome extensions. This is a post from HackRead.com Read the original post: Chrome extensions with 80 million+ users found engaging in ad fraud...

Sony Announces PlayStation Bug Bounty Program

By Deeba Ahmed With 94 million active users, the PlayStation bug bounty program a necessity. This is a post from HackRead.com Read the original post: Sony Announces PlayStation Bug Bounty Program...