Qrator Labs Reports Mitigating Year’s Largest DDoS Attack to Date

Qrator Labs reports it mitigated a massive record 965 Gbps DDoS attack in April 2025, the largest incident…...

Medusa Ransomware Claims NASCAR Breach in Latest Attack

Medusa ransomware hits NASCAR, demands $4M ransom, leaks internal files. Group also claims Bridgebank, McFarland, and Pulse Urgent Care...

Oracle Denies Breach Amid Hacker’s Claim of Access to 6 Million Records

Oracle denies breach claims as hacker alleges access to 6 million cloud records. CloudSEK reports a potential zero-day exploit affecting 140,000 tenants...

Arid Viper’s AridSpy Trojan Hits Android Users in Palestine, Egypt

Android users in Egypt and Palestine beware! Arid Viper is distributing malicious third-party apps hiding the AridSpy trojan! Learn how this malware steals your data and how to protect yourself...

New LLMjacking Attack Lets Hackers Hijack AI Models for Profit

By Deeba Ahmed Researchers uncover a novel cyberattack scheme called "LLMjacking" exploiting stolen cloud credentials to hijack powerful AI models. This article explores the implications of attackers leveraging large language models LLMs for malicious purposes and offers security recommendations...

Unsecured Video Doorbells Sold on Major Platforms: Millions at Risk of Hacking

By Deeba Ahmed Major Retailers Selling Video Doorbells with Serious Security Flaws, Consumer Reports Warns. This is a post from HackRead.com Read the original post: Unsecured Video Doorbells Sold on Major Platforms: Millions at Risk of Hacking...

New CHAVECLOAK Banking Trojan Targets Brazilians via Malicious PDFs

By Deeba Ahmed The CHAVECLOAK banking Trojan employs PDFs, ZIP downloads, DLL sideloading, and deceptive pop-ups to target Brazil's unsuspecting banking users financial sector. This is a post from HackRead.com Read the original post: New CHAVECLOAK Banking Trojan Targets Brazilians via Malicious...

Cloudflare Hacked After State Actor Leverages Okta Breach

By Deeba Ahmed CloudFlare Servers Were Hacked on Thanksgiving Day Using Auth Tokens Stolen in Okta Breach. This is a post from HackRead.com Read the original post: Cloudflare Hacked After State Actor Leverages Okta Breach...

Anonymous Sudan’s DDoS Attacks Disrupt Network at Israeli BAZAN Group

By Waqas The DDoS attacks occurred on January 17, 2023, and NetBlocks, a global internet monitoring platform, has confirmed the network disruption. This is a post from HackRead.com Read the original post: Anonymous Sudans DDoS Attacks Disrupt Network at Israeli BAZAN Group...

Hackers Leak Thousands of Idaho National Lab Employees’ PII Data

By Waqas SiegedSec is the group responsible for the data breach at the Idaho National Laboratory INL. This is a post from HackRead.com Read the original post: Hackers Leak Thousands of Idaho National Lab Employees PII Data...

RansomedVC Ransomware Group Quitting and Selling its Entire Infrastructure

By Waqas The infamous RansomedVC Ransomware Group is calling it quits and selling its entire cyber infrastructure due to "personal reasons." This is a post from HackRead.com Read the original post: RansomedVC Ransomware Group Quitting and Selling its Entire Infrastructure...

Social Login Flaws in Popular Websites Risked Billions of User Accounts

By Deeba Ahmed The critical API security flaws in the social sign-in and OAuth Open Authentication implementations affected high-profile companies like… This is a post from HackRead.com Read the original post: Social Login Flaws in Popular Websites Risked Billions of User Accounts...

OpenSSF Launches Malicious Packages Repository

By Waqas The launch of the Malicious Packages repository comes at a time when cyberattacks, leveraging malicious open source packages, are on the rise. This is a post from HackRead.com Read the original post: OpenSSF Launches Malicious Packages Repository...

12 Best AI-powered Customer Communication Platforms for Contact Centers

By Owais Sultan AI-powered Customer Communication Platforms will revolutionize customer interactions, streamlining support, and providing personalized, efficient service, ultimately enhancing customer… This is a post from HackRead.com Read the original post: 12 Best AI-powered Customer...

Linux Vulnerability Exposes Millions of Systems to Attack

By Waqas Dubbed Looney Tunables; the vulnerability has existed since its introduction in April 2021, putting a significant number of systems at risk. This is a post from HackRead.com Read the original post: Linux Vulnerability Exposes Millions of Systems to Attack...

FortiGuard Labs Uncovers Series of Malicious NPM Packages Stealing Data

By Waqas There are over 17 million developers worldwide who use NPM packages, making it a lucrative target for cybercriminals. This is a post from HackRead.com Read the original post: FortiGuard Labs Uncovers Series of Malicious NPM Packages Stealing Data...

Popular Thesaurus Website Used in Sneaky Cryptojacking Scheme

By Waqas KEY FINDINGS Cybersecurity researchers at Group-IB unearthed a covert cryptojacking campaign concealed within a popular online thesaurus boasting… This is a post from HackRead.com Read the original post: Popular Thesaurus Website Used in Sneaky Cryptojacking Scheme...

GhostSec Claim Breaching Iranian Govt Surveillance Software Tool

By Habiba Rashid In a move that has caught global attention, the hacktivist group GhostSec announced a successful breach of the… This is a post from HackRead.com Read the original post: GhostSec Claim Breaching Iranian Govt Surveillance Software Tool...

VMCONNECT: Malicious PyPI Package Mimicking Common Python Tools

By Deeba Ahmed Threat researchers at ReversingLabs, a software supply chain security and malware analysis platform, have discovered a malicious new PyPI… This is a post from HackRead.com Read the original post: VMCONNECT: Malicious PyPI Package Mimicking Common Python Tools...

Popular PABX platform, 3CX Desktop App suffers supply chain attack

By Deeba Ahmed According to cybersecurity researchers, a nation-state actor, LABYRINTH CHOLLIMA, is suspected to be behind the multi-stage attack on 3CXDesktopApp. This is a post from HackRead.com Read the original post: Popular PABX platform, 3CX Desktop App suffers supply chain attack...

Phishing Attack Uses UAC Bypass to Drop Remcos RAT Malware

By Deeba Ahmed Currently, scammers are using DBatLoader malware loader to distribute Remcos RAT to businesses and institutions across Eastern Europe. This is a post from HackRead.com Read the original post: Phishing Attack Uses UAC Bypass to Drop Remcos RAT Malware...

Russian Malware Developer Behind NLBrute Extradited to US

By Habiba Rashid Dairy Pankov, a.k.a. dpxaker, was accused of developing brute force and malicious software, NLBrute. This is a post from HackRead.com Read the original post: Russian Malware Developer Behind NLBrute Extradited to US...

Adsense abused: 11,000 sites hacked in a backdoor attack

By Waqas All infected websites are using the WordPress CMS. This is a post from HackRead.com Read the original post: Adsense abused: 11,000 sites hacked in a backdoor attack...

Advancing Medical Technology Requires More Medical Device Regulation

By Waqas While countries like Japan, China, the United States, and the United Kingdom have acknowledged the importance of medical device regulation, worldwide recognition is still a long way to go. This is a post from HackRead.com Read the original post: Advancing Medical Technology Requires More...

EarSpy Attack Can Use Motion Sensors Data to Pry on Android Devices

By Deeba Ahmed An EarSpy attack is a proof of concept of a new type of attack on Android devices that exposes users to eavesdropping. This is a post from HackRead.com Read the original post: EarSpy Attack Can Use Motion Sensors Data to Pry on Android Devices...

Phishing Scams: How To Recognize A Scam Email, VOIP call, or Text

By Owais Sultan A phishing scam is not only about stealing your login credentials, but it can also install malware, including ransomware, which is why it is essential to learn how to tackle this growing threat. This is a post from HackRead.com Read the original post: Phishing Scams: How To...

We Need Smarter Smart Contracts To Prevent DeFi Hacks

By Waqas The smart contracts that govern DeFi are littered with exploitable code, and hackers understand that since hundreds of millions of crypto funds have been siphoned off due to this very issue. This is a post from HackRead.com Read the original post: We Need Smarter Smart Contracts To Preve...

Google Fended Off Largest Ever Layer 7 DDoS Attack

By Waqas According to Google, the geographic distribution of the DDoS attack suggests that it might have been launched through… This is a post from HackRead.com Read the original post: Google Fended Off Largest Ever Layer 7 DDoS Attack...

Pro-Russia Killnet Group Hit Top Lithuanian websites with Massive DDoS Attacks

By Deeba Ahmed The attack seems to be a retaliatory effort from Killnet following the diplomatic tensions between the two countries.… This is a post from HackRead.com Read the original post: Pro-Russia Killnet Group Hit Top Lithuanian websites with Massive DDoS Attacks...

Hyperconverged Infrastructure (HCI) is Changing Data Centers

By Owais Sultan Hyperconverged infrastructure is changing the way data centers work for the better. Learn about the benefits of hyperconverged… This is a post from HackRead.com Read the original post: Hyperconverged Infrastructure HCI is Changing Data Centers...

New WhatsApp OTP Scam Allows Scammers to Hijack Your Account

By Deeba Ahmed The new WhatsApp scam is currently targeting users in India. On May 23rd, 2022, the founder and CEO… This is a post from HackRead.com Read the original post: New WhatsApp OTP Scam Allows Scammers to Hijack Your Account...

142 Million MGM Resorts Records Leaked on Telegram for Free Download

By Waqas As seen by Hackread.com and researchers at VPNMentor, the leaked data includes sensitive PII information of MGM resort… This is a post from HackRead.com Read the original post: 142 Million MGM Resorts Records Leaked on Telegram for Free Download...

New Android banking malware Xenomorph found in Play Store apps

By Deeba Ahmed Xenomorph malware is currently under development yet it is being actively distributed on official Google Play Store. Dutch… This is a post from HackRead.com Read the original post: New Android banking malware Xenomorph found in Play Store apps...

New Underactor tool reveals pixelated text to expose sensitive data

By Waqas The Underactor tool can uncover redacted text from any document and reveal sensitive data to anyone including of… This is a post from HackRead.com Read the original post: New Underactor tool reveals pixelated text to expose sensitive data...

LockBit ransomware gang claims PayBito crypto exchange as new victim

By Waqas LockBit ransomware operators claim that they stole the PayBito database that contains 100,000 customers information including email addresses… This is a post from HackRead.com Read the original post: LockBit ransomware gang claims PayBito crypto exchange as new victim...

SaaS Security Guide: How to Protect Your SaaS Business

By Waqas SaaS companies access scads of customer data. If you fail with SaaS security, it will have a direct… This is a post from HackRead.com Read the original post: SaaS Security Guide: How to Protect Your SaaS Business...

Security giant exposed 3TB of sensitive airport & employees data

By Waqas The exposed data impacted airports in Colombia, Peru, and probably other countries “or even the rest of the… This is a post from HackRead.com Read the original post: Security giant exposed 3TB of sensitive airport & employees data...

3 ways to improve your website security

By Owais Sultan Every so often, you hear in the news that a companys website was down temporarily for several hours,… This is a post from HackRead.com Read the original post: 3 ways to improve your website security...

Grim Finance hacked – $30 million worth of tokens stolen

By Waqas According to Grim Finance, it was an "advanced attack" in which hackers exploited a flaw in the vault contract. This is a post from HackRead.com Read the original post: Grim Finance hacked - $30 million worth of tokens stolen...

Kali Linux 2021.4 released with Samba compatibility, Apple M1 support, 9 new tools

By Waqas The release of the new Kali Linux 2021.4 has been grabbing headlines for the array of new capabilities and tools embedded with it. This is a post from HackRead.com Read the original post: Kali Linux 2021.4 released with Samba compatibility, Apple M1 support, 9 new tools...

Free and Best OSINT Tools 2021

By Owais Sultan OSINT refers to information collected from online sources however it requires tools to do so, and here are the 10 best OSINT Tools for 2020. This is a post from HackRead.com Read the original post: Free and Best OSINT Tools 2021...

Ad-blocker Chrome extension AllBlock injected ads in Google searches

By Deeba Ahmed AllBlock was available on Google Chrome's Web Store where it is marketed as a potent Ad Blocker focusing on Facebook and YouTube to prevent pop-ups. This is a post from HackRead.com Read the original post: Ad-blocker Chrome extension AllBlock injected ads in Google searches...

OpenSea vulnerability allowed crypto stealing with malicious NFTs

By Waqas Researchers investigated the issue in OpenSea after an increase in complaints about receiving and opening free airdropped NFTs to steal user funds. This is a post from HackRead.com Read the original post: OpenSea vulnerability allowed crypto stealing with malicious NFTs...

The Telegraph newspaper exposed 10TB of subscriber data

By Deeba Ahmed The data was exposed due to an unprotected Elasticsearch cluster and remained open to public access without any security authentication. This is a post from HackRead.com Read the original post: The Telegraph newspaper exposed 10TB of subscriber data...

Canadian firm VoIP.ms hit by non-stop extortion-based DDoS attacks

By Waqas Although unconfirmed; the notorious REvil ransomware gang could be behind the DDoS attacks on VoIP.ms. Here's what we know so far. This is a post from HackRead.com Read the original post: Canadian firm VoIP.ms hit by non-stop extortion-based DDoS attacks...

What are endpoint security threats, and how can they enter your device?

By Waqas Endpoint security threats are usually targeted towards corporate organizations but can often use private individuals to get inside these companies. This is a post from HackRead.com Read the original post: What are endpoint security threats, and how can they enter your device?...

FIN8 Resurfaces with New Sardonic Backdoor

By Deeba Ahmed In its latest attack, FIN8 is infiltrating companies to carry out surveillance and obtain privilege escalation to deploy a payload of malware called Sardonic. This is a post from HackRead.com Read the original post: FIN8 Resurfaces with New Sardonic Backdoor...

New malware blocks victims from visiting The Pirate Bay, illegal sites

By Deeba Ahmed Dubbed Vigilante by researchers; the malware prevents the system from those sites that redistribute pirated software/data. This is a post from HackRead.com Read the original post: New malware blocks victims from visiting The Pirate Bay, illegal sites...

CISA suggests using ad blockers to fend off ‘malvertising’ – Securing your browser

By Owais Sultan The leading national agencies like CISA recommended ad blockers as a basic cybersecurity tool for everyone. This is a post from HackRead.com Read the original post: CISA suggests using ad blockers to fend off malvertising - Securing your browser...

Novel Confucius Android spyware hits military, nuclear entities in Pakistan

By Waqas Another day, another Android spyware - This time, there are two spyware targeting sensitive infrastructure in Pakistan on behalf of India. This is a post from HackRead.com Read the original post: Novel Confucius Android spyware hits military, nuclear entities in Pakistan...