Hacker Selling 340 Million OnlyFans User Records Built From Old Breaches

A hacker is selling a 340M OnlyFans user database allegedly built by matching old breach data and public profiles to real OnlyFans accounts...

Continuous Detection, Continuous Response: Mate Security Redefines the Modern SOC

New York, USA, 18th May 2026, CyberNewswire...

Critical F5 BIG-IP Flaw Upgraded to 9.8 RCE, Exploited in the Wild

F5 BIG-IP APM flaw CVE-2025-53521 escalates to critical 9.8 RCE, actively exploited. Patch now, check IoCs, and secure vulnerable systems immediately...

Kernel Observability for Data Movement

Kernel-level visibility reveals hidden data movement in breaches, exposing gaps in modern security tools and improving detection, compliance, and system behavior tracking...

Everest Ransomware Claims Breach at Nissan, Says 900GB of Data Stolen

Everest ransomware claims to have breached Nissan Motor Corporation, alleging the theft of 900GB of internal data, including documents and screenshots...

Lone Hacker Used Infostealers to Access Data at 50 Global Companies

A Hudson Rock report reveals how an Iranian hacker named Zestix breached 50 global companies, including Iberia Airlines and Pickett & Associates, by using stolen passwords and a lack of MFA...

UK’s ICO Fine LastPass £1.2 Million Over 2022 Security Breach

UK's ICO fines LastPass £1.2M for the 2022 data breach that exposed 1.6 million users’ data. Learn how a flaw in an employee's personal PC led to the massive security failure...

183 Million Synthient Stealer Credentials Added to Have I Been Pwned

Massive Synthient Stealer Log leak adds 183 million stolen usernames and passwords to Have I Been Pwned, exposing new victims worldwide...

Fake Minecraft Installer Spreads NjRat Spyware to Steal Data

Fake Minecraft clone Eaglercraft 1.12 Offline spreads NjRat spyware stealing passwords, spying via webcam and microphone, warns Point…...

BADBOX 2.0 Found Preinstalled on Android IoT Devices Worldwide

BADBOX variant BADBOX 2.0 found preinstalled on Android IoT devices in 222 countries, turning them into proxy nodes used in fraud and large-scale malicious activity...

Report Warns of Sophisticated DDoS Campaigns Crippling Global Banks

A new FS-ISAC and Akamai report warns that sophisticated DDoS attacks are severely impacting the global financial sector, leading to multi-day outages. Learn about these evolving threats and how institutions can strengthen defences...

KrebsOnSecurity Hit with 6.3 Tbps DDoS Attack via Aisuru Botnet

KrebsOnSecurity hit and survided a record-breaking 6.3 Tbps DDoS attack linked to the Aisuru IoT botnet, but it shows the vulnerable state of IoT devices...

Russia-Linked SpyPress Malware Exploits Webmails to Spy on Ukraine

ESET reports on RoundPress, a cyber espionage campaign by Russia's Fancy Bear Sednit targeting Ukraine-related organizations via webmail…...

Legacy Login in Microsoft Entra ID Exploited to Breach Cloud Accounts

A flaw in Microsoft Entra ID’s legacy login allowed attackers to bypass MFA, targeting admin accounts across finance,…...

SpyCloud Analysis Reveals 94% of Fortune 50 Companies Have Employee Data Exposed in Phishing Attacks

Austin, USA / Texas, 7th May 2025, CyberNewsWire...

Fake SSA Emails Trick Users into Installing ScreenConnect RAT

Cybercriminals are using fake Social Security Administration emails to distribute the ScreenConnect RAT Remote Access Trojan and compromise…...

Phishing Emails Impersonating Qantas Target Credit Card Info

Fake Qantas emails in a sophisticated phishing scam steal credit card and personal info from Australians, bypassing major…...

Next.js Middleware Flaw Lets Attackers Bypass Authorization

Researchers have uncovered a critical vulnerability CVE-2025-29927 in Next.js middleware, allowing authorization bypass. Learn about the exploit and fixes...

Hacker Advertises “Top Secret US Space Force (USSF) Military Technology Archive”

A hacker known as "TAINTU" is advertising a "Top Secret U.S. Space Force Military Technology Archive" for sale,…...

Hackers Posed as Google Support to Steal $243 Million in Crypto

Hackers stole $243M from a single victim by posing as Google and Gemini support, resetting 2FA to access…...

Microsoft Patch Tuesday: Microsoft Patches 142 Critical Vulnerabilities

Microsoft plugs critical security holes in July Patch Tuesday! 142 vulnerabilities patched, including actively exploited zero-days and remote…...

3 New State-Backed Gangs Target Govt Sectors with HEAT Attack Methods

Global cyber gangs are evolving rapidly, wielding advanced techniques and enjoying state sponsorship. Menlo Security’s latest report exposes…...

Hackers Leak 221,470 Users’ Data in “Tech in Asia” News Outlet Breach

A data breach at Tech in Asia has exposed the personal information of 221,470 users. Learn more about…...

One Phish, Two Phish, Red Phish, Blue Phish

One of the interesting things about working for a cybersecurity company is that you get to talk to…...

Findings Show MFA Bypass in Microsoft Azure Entra ID Using Seamless SSO

By Waqas Concerned about a potential MFA bypass in Microsoft Azure Entra ID? This article explores the research, explains the vulnerability in context, and offers actionable steps to secure your organization. This is a post from HackRead.com Read the original post: Findings Show MFA Bypass in...

New Xamalicious Backdoor Infects 25 Android Apps, Affects 327K Devices

By Waqas Despite Google's proactive removal of these apps, the threat persists through third-party markets, compromising over 327,000 devices globally. This is a post from HackRead.com Read the original post: New Xamalicious Backdoor Infects 25 Android Apps, Affects 327K Devices...

6 FinOps Principles and Best Practices

By Owais Sultan FinOps holds the idea that businesses can reach their desired peak performances without cloud wastages. Read here to… This is a post from HackRead.com Read the original post: 6 FinOps Principles and Best Practices...

Domain Squatting and Brand Hijacking: A Silent Threat to Digital Enterprises

By Waqas Domain squatting can lead you to malicious websites, and it might be too late to realize what actually happened. This is a post from HackRead.com Read the original post: Domain Squatting and Brand Hijacking: A Silent Threat to Digital Enterprises...

Hive Ransomware Resurfaces as Hunters International, Bitdefender Claim

By Waqas Hive Ransomware had its infrastructure seized by the FBI and Europol back in January 2023. This is a post from HackRead.com Read the original post: Hive Ransomware Resurfaces as Hunters International, Bitdefender Claim...

IBM X-Force Discovers Gootloader Malware Variant- GootBot

By Deeba Ahmed GootBot: New Gootloader Variant Evades Detection with Stealthy Lateral Movement. This is a post from HackRead.com Read the original post: IBM X-Force Discovers Gootloader Malware Variant- GootBot...

Blockforia: A Comprehensive Analysis of a Prominent Cryptocurrency Exchange

By Owais Sultan Blockforia functions as a cryptocurrency exchange firmly grounded within the regulatory purview of the European Union. This is a post from HackRead.com Read the original post: Blockforia: A Comprehensive Analysis of a Prominent Cryptocurrency Exchange...

FBI Warns of Extortionists Stealing Plastic Surgery Data for Ransom

By Waqas Cybercriminals are using phishing emails and text messages to steal sensitive data from plastic surgery clinics and offices, such as patient records and financial information. This is a post from HackRead.com Read the original post: FBI Warns of Extortionists Stealing Plastic Surgery Dat...

Elon Musk’s X (Twitter) to Charge $1 for Basic Features

By Waqas Prepare to pay for Twitter X. This is a post from HackRead.com Read the original post: Elon Musks X Twitter to Charge $1 for Basic Features...

Malware Concealed as Dependabot Contributions Strikes GitHub Projects

By Waqas Malicious code disguised as Dependabot contributions hits hundreds of GitHub repositories. This is a post from HackRead.com Read the original post: Malware Concealed as Dependabot Contributions Strikes GitHub Projects...

Fake YouTube Android Apps Used to Distribute CapraRAT

By Deeba Ahmed The group behind this attack is the infamous Pakistani threat actor known as Transparent Tribe. This is a post from HackRead.com Read the original post: Fake YouTube Android Apps Used to Distribute CapraRAT...

MidgeDropper Variant Targets Work-from-Home Employees on Windows PCs

By Deeba Ahmed If you are working from home, you need to be on the lookout for the new and complex variant of MidgeDropper malware. This is a post from HackRead.com Read the original post: MidgeDropper Variant Targets Work-from-Home Employees on Windows PCs...

ALPHV Ransomware Used Vishing to Scam MGM Resorts Employee

By Waqas Key Findings Las Vegas-based MGM Resorts International, a global entertainment and hospitality giant, has been hit by a… This is a post from HackRead.com Read the original post: ALPHV Ransomware Used Vishing to Scam MGM Resorts Employee...

Microsoft: Chinese APT Flax Typhoon uses legit tools for cyber espionage

By Deeba Ahmed Researchers believe that this time instead of cyber espionage, Chinese threat actors may have opted for more complex information ops. This is a post from HackRead.com Read the original post: Microsoft: Chinese APT Flax Typhoon uses legit tools for cyber espionage...

Cyberattacks Targeting Government Agencies on the Rise

By Waqas A concerning trend is emerging on the global stage: a rise in cyberattacks targeting government agencies. This is a post from HackRead.com Read the original post: Cyberattacks Targeting Government Agencies on the Rise...

Poland Arrests 2 Suspected Hackers for Train Disruption

By Waqas According to Polish RMF radio, one of the suspects is a police officer; however, this information has not… This is a post from HackRead.com Read the original post: Poland Arrests 2 Suspected Hackers for Train Disruption...

Beyond Cold Calls: Ringless Voicemail As A Personalized Customer Engagement Tool

By Owais Sultan Ringless voicemail RVM is a technology that allows businesses to deliver pre-recorded messages directly to a customer's voicemail inbox without their phone ringing. This is a post from HackRead.com Read the original post: Beyond Cold Calls: Ringless Voicemail As A Personalized...

Overcoming web scraping blocks: Best practices and considerations

By Owais Sultan At its core, web scraping involves automatically extracting data from websites, enabling individuals and organizations to obtain valuable… This is a post from HackRead.com Read the original post: Overcoming web scraping blocks: Best practices and considerations...

Russian Midnight Blizzard Hackers Hit MS Teams in Precision Attack

By Waqas The group of Russian hackers involved in this attack is Midnight Blizzard aka NOBELIUM. This is a post from HackRead.com Read the original post: Russian Midnight Blizzard Hackers Hit MS Teams in Precision Attack...

SpyNote Spyware Returns with SMS Phishing Against Banking Customers

By Habiba Rashid In its recent attack campaign, SpyNote Spyware is sending victims fake SMS messages urging them to install a new certified banking app. This is a post from HackRead.com Read the original post: SpyNote Spyware Returns with SMS Phishing Against Banking Customers...

Iranian Hackers Posed as Israelis in Targeted LinkedIn Phishing Attack

By Waqas The Israeli security agency Shin Bet claims to have thwarted a LinkedIn phishing scam carried out by Iranian hackers. This is a post from HackRead.com Read the original post: Iranian Hackers Posed as Israelis in Targeted LinkedIn Phishing Attack...

Roblox Data Breach: PII of Thousands of Developers Stolen

By Waqas It turns out that Roblox suffered a data breach in 2021, but the company only revealed its details this week. This is a post from HackRead.com Read the original post: Roblox Data Breach: PII of Thousands of Developers Stolen...

VirusTotal Data Leak Exposes User Info, Including Intel Agencies’ Data

By Habiba Rashid The news was initially reported by The Standard and German news magazine Der Spiegel, who claim the data leak is authentic. This is a post from HackRead.com Read the original post: VirusTotal Data Leak Exposes User Info, Including Intel Agencies Data...

Do Kwon, Founder of Terraform Labs, Arrested in Montenegro

By Habiba Rashid Reportedly, Do Kwon was caught using falsified documents at an airport in the capital city of Montenegro. This is a post from HackRead.com Read the original post: Do Kwon, Founder of Terraform Labs, Arrested in Montenegro...

Bitdefender Releases Free MortalKombat Ransomware Decryptor

By Waqas The free Mortal Kombat ransomware decryptor is now available for victims to recover their encrypted files without having to pay the ransom. This is a post from HackRead.com Read the original post: Bitdefender Releases Free MortalKombat Ransomware Decryptor...

ARMO integrates ChatGPT to secure Kubernetes

By Deeba Ahmed Kubernetes' creator ARMO announced the integration in a blog post on February 7th, 2023. This is a post from HackRead.com Read the original post: ARMO integrates ChatGPT to secure Kubernetes...