15 Malicious JetBrains Plugins Caught Stealing DeepSeek, OpenAI API Keys

Hackers are using 15 malicious JetBrains plugins posing as AI coding assistants to steal DeepSeek, OpenAI, and other developer API keys...

Feds Seize AudiA6 and Dark2Web in $389M Crypto Laundering Case

Feds seized AudiA6 and Dark2Web in a major crypto laundering case, arresting two suspects linked to over $389M in alleged illicit transactions...

Hackers Use Fake Claude Code Guide and AI PDFs to Spread AsyncRAT Malware

Hackers are using fake Claude Code guide and AI PDFs to spread AsyncRAT malware via Windows attack using PowerShell and Defender exclusions...

Instagram Recovery Tool Bug Exposed 20,225 Accounts to Password Reset Abuse

Meta says an Instagram recovery tool bug allowed attackers to abuse password resets, affecting 20,225 accounts and exposing users without 2FA to account takeover risk...

Alcasec, “Robin Hood of Spanish Hackers,” Jailed for 31 Months Over Data Theft

Alcasec, the "Robin Hood of Spanish Hackers," is jailed for 31 months after admitting to stealing and selling Spanish citizens' banking data...

Zero-Click pretalx XSS Flaw Lets Hackers Hijack Conference Organizer Accounts

pretalx XSS flaw lets attackers hijack conference organizer accounts, steal sessions, auto-accept talks, and demote admins. Patched in v2026.1.0...

Pride Month Phishing Targets Employees via Trusted Email Services

Attackers are using Pride Month themed phishing emails to target employees worldwide, abusing trusted email platforms like SendGrid to harvest credentials...

Ivanti EPMM Hit by Two Actively Exploited 0day Vulnerabilities

Ivanti EPMM users urgently need to patch against actively exploited 0day vulnerabilities CVE-2025-4427, CVE-2025-4428 that enable pre-authenticated remote…...

Zero Trust in the Age of Digital Transformation: The New Cybersecurity Paradigm

With the digital transformation movement sweeping the world and cyber threats evolving simultaneously to pose greater and greater…...

Crypto Heist Suspect “Wiz” Arrested After $243 Million Theft

Veer Chetal, known online as "Wiz" and one of the key suspects in the massive $243 million cryptocurrency heist, has been apprehended by U.S. Marshals...

Malicious Node on ComfyUI Steals Data from Crypto, Browser Users

Cryptocurrency users beware: A malicious ComfyUI node steals sensitive data like passwords, crypto wallet addresses, etc. Stay safe…...

Essential Features of Cybersecurity Management Software for MSPs

By Uzair Amir Protect your clients businesses from cyber threats with Cybersecurity Management Software. Explore the unified control panel, real-time threat… This is a post from HackRead.com Read the original post: Essential Features of Cybersecurity Management Software for MSPs...

Data Leak Exposes 500GB of Indian Police, Military Biometric Data

By Waqas The records belonged to two separate India-based firms, ThoughtGreen Technologies and Timing Technologies. Both provide application development, RFID technology, and biometric verification services. This is a post from HackRead.com Read the original post: Data Leak Exposes 500GB of India...

Critical Cybersecurity Loopholes Found in Paris 2024 Olympics Infrastructure

By Deeba Ahmed Paris 2024 Olympics face cybersecurity threats. Outpost24 analysis reveals open ports, SSL misconfigurations, and more. Can the organizers secure the Games in time? Read for critical insights and potential consequences. This is a post from HackRead.com Read the original post:...

Software Support: 7 Essential Reasons You Can’t Overlook

By Owais Sultan Explore the significance of software support in the fast-paced digital world. Discover how continuous maintenance, bug fixing, feature enhancement, and integration management optimize operations. With expert assistance, enhance security, ensure project continuity, and improve...

5 Ways to Maximize the Impact of IaC Scans

By Uzair Amir Infrastructure-as-code IaC continues to gain traction and is even hailed for having changed software development towards greater efficiency… This is a post from HackRead.com Read the original post: 5 Ways to Maximize the Impact of IaC Scans...

Hackers Leak Alleged Partial Facebook Marketplace Database

By Waqas The alleged data breach took place on October 2023. However, the database was only made public earlier today, on Sunday, February 11, 2024. This is a post from HackRead.com Read the original post: Hackers Leak Alleged Partial Facebook Marketplace Database...

Cloudflare Hacked After State Actor Leverages Okta Breach

By Deeba Ahmed CloudFlare Servers Were Hacked on Thanksgiving Day Using Auth Tokens Stolen in Okta Breach. This is a post from HackRead.com Read the original post: Cloudflare Hacked After State Actor Leverages Okta Breach...

Hackers Leak Thousands of Idaho National Lab Employees’ PII Data

By Waqas SiegedSec is the group responsible for the data breach at the Idaho National Laboratory INL. This is a post from HackRead.com Read the original post: Hackers Leak Thousands of Idaho National Lab Employees PII Data...

Okta Breach Linked to Employee’s Google Account, Affects 134 Customers

By Waqas Some of the most prominent victims of the data breach include Cloudflare, 1Password, and BeyondTrust. This is a post from HackRead.com Read the original post: Okta Breach Linked to Employees Google Account, Affects 134 Customers...

Social Login Flaws in Popular Websites Risked Billions of User Accounts

By Deeba Ahmed The critical API security flaws in the social sign-in and OAuth Open Authentication implementations affected high-profile companies like… This is a post from HackRead.com Read the original post: Social Login Flaws in Popular Websites Risked Billions of User Accounts...

Embracing Minimalism: The “Less is More” Approach in UI/UX Design

By Owais Sultan In user interface UI and user experience UX design, the principle of "less is more" has emerged as… This is a post from HackRead.com Read the original post: Embracing Minimalism: The "Less is More" Approach in UI/UX Design...

Lyca Mobile Suffers Cyber Attack, Investigating Ransomware Possibility

By Waqas Lyca Mobile confirms a cyber attack impacting all markets except the US, Australia, Ukraine, and Tunisia. This is a post from HackRead.com Read the original post: Lyca Mobile Suffers Cyber Attack, Investigating Ransomware Possibility...

FortiGuard Labs Uncovers Series of Malicious NPM Packages Stealing Data

By Waqas There are over 17 million developers worldwide who use NPM packages, making it a lucrative target for cybercriminals. This is a post from HackRead.com Read the original post: FortiGuard Labs Uncovers Series of Malicious NPM Packages Stealing Data...

Popular Thesaurus Website Used in Sneaky Cryptojacking Scheme

By Waqas KEY FINDINGS Cybersecurity researchers at Group-IB unearthed a covert cryptojacking campaign concealed within a popular online thesaurus boasting… This is a post from HackRead.com Read the original post: Popular Thesaurus Website Used in Sneaky Cryptojacking Scheme...

Reply URL Flaw Allowed Unauthorized MS Power Platform API Access

By Habiba Rashid Critical Vulnerability in Microsoft Power Platform Discovered and Reported by Secureworks Researchers. This is a post from HackRead.com Read the original post: Reply URL Flaw Allowed Unauthorized MS Power Platform API Access...

Original BreachForums Breached, PII Data of 210K Users Sold Online

By Habiba Rashid Have I Been Pwned, a central repository for tracking online data breaches, has confirmed the legitimacy of the stolen BreachForums data. This is a post from HackRead.com Read the original post: Original BreachForums Breached, PII Data of 210K Users Sold Online...

Fake TeamViewer Installer Used to Deliver njRAT Malware

By Habiba Rashid A fake and malicious version of TeamViewer is being pushed as legitimate, which in reality infects devices with njRAT Malware aka Bladabindi. This is a post from HackRead.com Read the original post: Fake TeamViewer Installer Used to Deliver njRAT Malware...

Ukraine Busts Gang for Massive $4.3 Million Phishing Scams

By Habiba Rashid The Ukrainian Cyber Police carried out 30 searches and managed to seize computer equipment, mobile phones, SIM cards, and other equipment. This is a post from HackRead.com Read the original post: Ukraine Busts Gang for Massive $4.3 Million Phishing Scams...

Prompt engineering and jailbreaking: Europol warns of ChatGPT exploitation

By Habiba Rashid The concern arises from the growing number of cybercriminals attempting to exploit the AI-based chatbot for developing malware and other malicious tools. This is a post from HackRead.com Read the original post: Prompt engineering and jailbreaking: Europol warns of ChatGPT...

Reddit Hacked After Employee Bites on Phishing Scam

By Deeba Ahmed According to Reddit, the breach took place after one of its employees fell for a phishing scam email sent through a malicious fake website. This is a post from HackRead.com Read the original post: Reddit Hacked After Employee Bites on Phishing Scam...

Yandex Source Code Online Leaked, Company Denies Hack

By Waqas The threat actor has dumped a whopping 44.7 GB worth of Yandex data, including its source code repository, on a popular hacker forum. This is a post from HackRead.com Read the original post: Yandex Source Code Online Leaked, Company Denies Hack...

Advancing Medical Technology Requires More Medical Device Regulation

By Waqas While countries like Japan, China, the United States, and the United Kingdom have acknowledged the importance of medical device regulation, worldwide recognition is still a long way to go. This is a post from HackRead.com Read the original post: Advancing Medical Technology Requires More...

Russian Hackers Eager to Bypass OpenAI’s Restrictions to Abuse ChatGPT

By Waqas One of the threat actors inquired about the ideal way to use a stolen payment card to purchase an upgraded user on OpenAI. This is a post from HackRead.com Read the original post: Russian Hackers Eager to Bypass OpenAIs Restrictions to Abuse ChatGPT...

Russian Killnet Hackers Claim Data Theft of FBI Agents

By Habiba Rashid On Telegram, Killnet hackers have leaked a text file showing the login credentials of 10,000 individuals whom they claim are FBI agents. This is a post from HackRead.com Read the original post: Russian Killnet Hackers Claim Data Theft of FBI Agents...

Fake Windows Crypto Apps Spreading AppleJeus Malware

By Deeba Ahmed The infamous North Korean state-backed Lazarus hacking group is using AppleJeus malware to steal crypto funds from Windows users. This is a post from HackRead.com Read the original post: Fake Windows Crypto Apps Spreading AppleJeus Malware...

Critical Amazon Ring Vulnerability Could Expose Camera Recordings

By Deeba Ahmed The vulnerability was discovered by Atlanta-based app security firm Checkmarx while assessing the Ring doorbell app for Android.… This is a post from HackRead.com Read the original post: Critical Amazon Ring Vulnerability Could Expose Camera Recordings...

Pro-Russia Killnet Group Hit Top Lithuanian websites with Massive DDoS Attacks

By Deeba Ahmed The attack seems to be a retaliatory effort from Killnet following the diplomatic tensions between the two countries.… This is a post from HackRead.com Read the original post: Pro-Russia Killnet Group Hit Top Lithuanian websites with Massive DDoS Attacks...

Hackers Selling US Colleges VPN Credentials on Russian Forums- FBI

By Waqas The network credentials and VPN access information were mainly acquired through ransomware, spear-phishing, and other cyberattacks. According to… This is a post from HackRead.com Read the original post: Hackers Selling US Colleges VPN Credentials on Russian Forums- FBI...

New Underactor tool reveals pixelated text to expose sensitive data

By Waqas The Underactor tool can uncover redacted text from any document and reveal sensitive data to anyone including of… This is a post from HackRead.com Read the original post: New Underactor tool reveals pixelated text to expose sensitive data...

LockBit ransomware gang claims PayBito crypto exchange as new victim

By Waqas LockBit ransomware operators claim that they stole the PayBito database that contains 100,000 customers information including email addresses… This is a post from HackRead.com Read the original post: LockBit ransomware gang claims PayBito crypto exchange as new victim...

Attackers bypass Microsoft security patch to drop Formbook malware

By Waqas The patch was issued to prevent the execution of code that downloaded the Microsoft Cabinet archive containing a malicious executable. This is a post from HackRead.com Read the original post: Attackers bypass Microsoft security patch to drop Formbook malware...

Grim Finance hacked – $30 million worth of tokens stolen

By Waqas According to Grim Finance, it was an "advanced attack" in which hackers exploited a flaw in the vault contract. This is a post from HackRead.com Read the original post: Grim Finance hacked - $30 million worth of tokens stolen...

Free and Best OSINT Tools 2021

By Owais Sultan OSINT refers to information collected from online sources however it requires tools to do so, and here are the 10 best OSINT Tools for 2020. This is a post from HackRead.com Read the original post: Free and Best OSINT Tools 2021...

Psst! tool by 1Password lets users share passwords using a link

By Waqas 1Password password manager has introduced a new tool called Password Secure Sharing Tool or Psst! that lets users share their passwords or "anything in their 1Password vault" by simply using a link. This is a post from HackRead.com Read the original post: Psst! tool by 1Password lets use...

The Fight against Financial Cyber Crime

By Owais Sultan The financial services industry is a lucrative target and is disproportionately affected by the rise of cyber crime. Let's discuss its prevention measures. This is a post from HackRead.com Read the original post: The Fight against Financial Cyber Crime...

The Telegraph newspaper exposed 10TB of subscriber data

By Deeba Ahmed The data was exposed due to an unprotected Elasticsearch cluster and remained open to public access without any security authentication. This is a post from HackRead.com Read the original post: The Telegraph newspaper exposed 10TB of subscriber data...

TA544 threat actors hit Italian firms with Ursnif banking trojan

By Waqas A new malware campaign from a group called TA544 is targeting organizations in Italy with Ursnif banking trojan - Here's how it works. This is a post from HackRead.com Read the original post: TA544 threat actors hit Italian firms with Ursnif banking trojan...

5 Personal Cyber Security Tips

By Waqas In the scenario, where cyber attacks are evolving, from business to an unsuspecting internet user; learning about cyber security is a must. Let's dig into it. This is a post from HackRead.com Read the original post: 5 Personal Cyber Security Tips...

Hackers hit Russian ministry, rocket center using MSHTML vulnerability

By Waqas Microsoft Office zero-day also dubbed MSHTML attack exploited to target Russian government including Interior ministry and State Rocket Center. This is a post from HackRead.com Read the original post: Hackers hit Russian ministry, rocket center using MSHTML vulnerability...