7525 matches found
Demonoid goes offline with owner missing in action for last two months
By Waqas It has been many days since a popular, semi-private BitTorrent tracker Demonoid has remained offline. The employees working for this website are also clueless about what’s happening and claim that the owner of Demonoid, Deimos, is also missing. None of them have had any contact with him...
Medical records & patient-doctor recordings of thousands of people exposed
By Carolina Another day, another trove of medical records leaked online, thanks to a misconfigured AWS S3 bucket. Medical records are considered to be sensitive documents and when a malicious third party has access to them it is a bad news as these records can be used for fraud, blackmailing and...
Cloud data management firm exposes database with over 440M emails & IP addresses
By Waqas Data management software companies are mandatorily believed to be having perfectly capable of managing their own data. However, it turns out that some companies, the most popular ones too, struggle to do so. The well-known cloud data management firm Veeam has been in the news lately for...
A highly targeted malware campaign is spying on 13 iPhones in India
By Waqas A dangerous targeted mobile malware campaign has been identified by security researchers, which is believed to have been active since August 2015. Researchers claim that the malware is discovered to be spying on 13 specific iPhones in India, which hints at the fact that this is a highly...
Facebook collected users’ call and SMS logs with “their permission”
By Waqas Facebook is in hot waters for the last couple of This is a post from HackRead.com Read the original post: Facebook collected users' call and SMS logs with "their permission"...
Fileless WannaMine Cryptojacking Malware Using NSA Exploit
By Waqas Forget WannaCry and welcome WannaMine, a fileless cryptojacking malware using This is a post from HackRead.com Read the original post: Fileless WannaMine Cryptojacking Malware Using NSA Exploit...
Fake Bitcoin Wallet Apps Found on Google Play Store
By Uzair Amir After non-stop malware attacks, Android users have a couple of new This is a post from HackRead.com Read the original post: Fake Bitcoin Wallet Apps Found on Google Play Store...
Uber Paid Hackers $100k to Hide Massive Theft of 75M Accounts
By Waqas It’s surprising to some and shocking to many. Despite a This is a post from HackRead.com Read the original post: Uber Paid Hackers $100k to Hide Massive Theft of 75M Accounts...
Student Arrested For Using Keylogger and Changing Grades 90 Times
By Uzair Amir An ex-wrestler and student of the University of Iowa is This is a post from HackRead.com Read the original post: Student Arrested For Using Keylogger and Changing Grades 90 Times...
jQuery Blog Gets Hacked – Hackers Compromise CoinHive’s DNS
By Waqas In two different incidents, security of high profile platforms was This is a post from HackRead.com Read the original post: jQuery Blog Gets Hacked Hackers Compromise CoinHives DNS...
Fake Cryptocurrency Apps on Play Store Stealing User Data
By Waqas The US-based cryptocurrency exchange service Poloniex, which happens to be This is a post from HackRead.com Read the original post: Fake Cryptocurrency Apps on Play Store Stealing User Data...
Hackers can hack your kid’s smartwatch and track their location
By Carolina With smartwatches designed especially for kids being available now, parents This is a post from HackRead.com Read the original post: Hackers can hack your kids smartwatch and track their location...
Indian Biometric System Data leaked; over 130 M people could be affected
By Jahanzaib Hassan The personal identifiable information of people in the wrong hands could cause a major havoc, and this could happen pretty soon in India. According to the reports, the government sites supposed to protect the user data are instead, leaking it! Names, addresses, date of birth,...
Millions of Microsoft Entra Accounts Targeted in OAuth Client ID Spoofing Campaigns
Proofpoint details how attackers spoof OAuth client IDs to probe Microsoft Entra accounts, test credentials and bypass common sign-in detections at cloud scale...
OpenMatter Network Introduces Verifiable Trust Layer for Secure Collaboration and AI Agents
Melbourne, Florida, 30th June 2026, CyberNewswire...
8 Top SAST Tools for Polyglot Monorepos and Platform Engineering in 2026
Compare 8 top SAST tools for polyglot monorepos, covering incremental scans, ownership, custom rules and platform engineering at scale 2026...
Aembit Extends IAM for Agentic AI to Microsoft Copilot Studio
Las Vegas, USA / Nevada, 16th June 2026, CyberNewswire...
Over 50 Android Apps Found Spreading MagicAd Trojan via Official Stores
Over 50 Android apps on official stores spread MagicAd trojan, using system tricks to force background ads even after infected apps are closed...
ShinyHunters Leak 40GB of University of Nottingham Student Data
ShinyHunters hackers leak 40GB of University of Nottingham personal and financial data, allegedly impacting 450,000 students and staff records...
Microsoft June 2026 Patch Tuesday Fixes 206 Flaws and 3 Zero-Days
Microsoft’s June 2026 patch Tuesday resolves 206 vulnerabilities, including 3 critical zero-days and severe 9.8 CVSS kernel, network and HTTP.sys flaws...
FBI Warns of Kali365 Phishing Service Targeting Microsoft 365 Account
FBI warns of Kali365, a PaaS scam kit that lets cybercriminals bypass MFA and hijack Microsoft 365 accounts without passwords...
10 Top OSINT Tools Every Investigator Should Know in 2026
Modern OSINT platforms rely more on AI and automation, while older social tracking methods keep losing access due to privacy and API restrictions...
9-Year-Old Dirty Frag Vulnerability Enables Root Access on Linux Systems
The Dirty Frag vulnerability affects Linux systems and allows root access escalation, while public PoC exploit code increases attack risks...
7 Key Features That Make Secure Browsers Safer
Secure Browsers boost safety with tracking blocks, fingerprint protection, session control, and real-time threat defense against modern web attacks...
SpyCloud’s 2026 Identity Exposure Report Reveals Explosion of Non-Human Identity Theft
Austin, TX, USA, 19th March 2026, CyberNewswire...
ShinyHunters Hackers Threaten 400 Firms Over Stolen Salesforce Data
ShinyHunters claims to have stolen data from 400 firms via Salesforce portals and is threatening to leak the information unless ransom demands are paid...
17% of 3rd-Party Add-Ons for OpenClaw Used in Crypto Theft and macOS Malware
Bitdefender Labs reveals that 17% of OpenClaw AI skills analyzed in February 2026 are malicious. With over 160,000…...
Discord Controlled NodeCordRAT Steals Chrome Data via NPM Packages
Zscaler ThreatLabz identifies three malicious NPM packages mimicking Bitcoin libraries. The NodeCordRAT virus uses Discord commands to exfiltrate MetaMask data and Chrome passwords...
Fake ChatGPT and DeepSeek Extensions Spied on Over 1 Million Chrome Users
Security researchers have identified two malicious Chrome extensions recording AI chats. Learn how to identify and remove these tools to protect your privacy...
Spiderman Phishing Kit Targets European Banks with Real-Time Credential Theft
Varonis threat analysts warn about Spiderman, a dangerous new kit that automates attacks against European banks and crypto customers, stealing a victim’s full identity profile...
Auth Bypass Flaw in Service Finder WordPress Plugin Under Active Exploit
An Authentication Bypass CVE-2025-5947 in Service Finder Bookings plugin allows any unauthenticated attacker to log in as an administrator. Over 13,800 exploit attempts detected. Update to v6.1 immediately...
LegalPwn Attack Tricks GenAI Tools Into Misclassifying Malware as Safe Code
A new security flaw, LegalPwn, exploits a weakness in generative AI tools like GitHub Copilot and ChatGPT, where malicious code is disguised as legal disclaimers. Learn why human oversight is now more critical than ever for AI security...
Report Warns of Sophisticated DDoS Campaigns Crippling Global Banks
A new FS-ISAC and Akamai report warns that sophisticated DDoS attacks are severely impacting the global financial sector, leading to multi-day outages. Learn about these evolving threats and how institutions can strengthen defences...
How to Monetize Unity Apps: Best Practices
Unity is one of the most popular game engines for mobile and cross-platform app development. It powers millions…...
200+ Fake Retail Sites Used in New Wave of Subscription Scams
Bitdefender uncovers a massive surge in sophisticated subscription scams disguised as online shops and evolving mystery boxes. Learn…...
Online Child Exploitation Network 764 Busted; 2 US Leaders Arrested
US and Greek arrests expose 764 network’s global child abuse ring. Leaders face life for orchestrating violent exploitation…...
Gcore Super Transit Brings Advanced DDoS Protection and Acceleration for Superior Enterprise Security and Speed
Luxembourg, Luxembourg, 9th April 2025, CyberNewsWire...
Israeli Spyware Graphite Targeted WhatsApp with 0-Click Exploit
Citizen Lab's investigation reveals sophisticated spyware attacks exploiting WhatsApp vulnerabilities, implicating Paragon Solutions. Learn how their research exposed these threats and the implications for digital privacy...
New Backdoor Auto-color Linux Targets Systems in US and Asia
Auto-color: New Linux backdoor malware targeting the US and Asia. Learn about its advanced evasion, persistence, and detection…...
Meet GhostGPT: The Malicious AI Chatbot Fueling Cybercrime and Scams
Abnormal Security uncovers GhostGPT, an uncensored AI chatbot built for cybercrime. Learn how it boosts cybercriminals' abilities, makes…...
Fake PoC Exploit Targets Cybersecurity Researchers with Malware
A fake proof-of-concept PoC exploit designed to lure cybersecurity researchers into downloading malicious software. This deceptive tactic leverages a recently patched critical vulnerability in Microsoft's Windows LDAP service CVE-2024-49113, which can cause denial-of-service attacks...
Operation Lunar Peek: More Than 2,000 Palo Alto Network Firewalls Hacked
The Shadowserver Foundation reports over 2,000 Palo Alto Networks firewalls have been hacked via two zero-day vulnerabilities: CVE-2024-0012…...
Hackers Use Excel Files to Deliver Remcos RAT Variant on Windows
This article explains the inner workings of the Remcos RAT, a dangerous malware that uses advanced techniques to…...
New LummaC2 Malware Variant Uses PowerShell, Obfuscation to Steal Data
Ontinue has discovered a new LummaC2 malware variant with increased activity, using PowerShell for initial infection and employing…...
Ticketmaster Breach: ShinyHunters Leak 440K Taylor Swift Eras Tour Ticket Data
The ShinyHunters hacker group claims the Ticketmaster breach is far bigger than previously anticipated, stealing 193 million barcodes,…...
AI Transcript, Fake School Website: Student’s US Scholarship Scam Exposed on Reddit
You reap what you sow!...
P2Pinfect Botnet Now Targets Servers with Ransomware, Cryptominer
The P2Pinfect botnet, once dormant, is now attacking servers with ransomware and cryptomining malware. Patch your systems to avoid data encryption and financial loss...
FireTail Unveils Free Access for All to Cutting-Edge API Security Platform
McLean, United States of America, 26th June 2024, CyberNewsWire...
Internet Computer Protocol Launches Walletless Verified Credentials for Public Trust
Internet Computer Protocol ICP introduces Verified Credentials VCs, a walletless solution enhancing data sharing privacy. Unveiled at DICE 2024, VCs help combat bots and fake accounts on social media, ensuring secure and efficient verification...