7583 matches found
Popular Android/iOS apps & Extensions collecting highly personal user data
By Waqas In May this year, HackRead reported how an Israeli company Unimania was caught collecting personal, Facebook and browsing data of users through Android apps and Chrome extensions. Now, researchers have discovered another "spyware" campaign aiming at stealing personal data of users but th...
Anti-theft software LoJack hijacked by Russian Fancy Bear group
By Waqas Security researchers at Netscout's Arbor Networks’ Security Engineering & Response This is a post from HackRead.com Read the original post: Anti-theft software LoJack hijacked by Russian Fancy Bear group...
Medicine pumps & Pacemaker threat as Dr’s simulate hacked overdose
By Waqas Doctors Demonstrate Dangers of Hacked Medicine Pumps By Simulating Emergency This is a post from HackRead.com Read the original post: Medicine pumps & Pacemaker threat as Dr’s simulate hacked overdose...
Localblox exposes personal data of millions of Facebook & LinkedIn users
By Waqas Facebook has been at the receiving end of backlash and This is a post from HackRead.com Read the original post: Localblox exposes personal data of millions of Facebook & LinkedIn users...
Five year old vulnerability used for Monero mining on Linux servers
By Waqas A security vulnerability that is nearly 5 years old has This is a post from HackRead.com Read the original post: Five year old vulnerability used for Monero mining on Linux servers...
Fortnite accounts are being hacked to make fraudulent purchases
By Uzair Amir If you are a Fortnite player and hold a registered account This is a post from HackRead.com Read the original post: Fortnite accounts are being hacked to make fraudulent purchases...
Cyber Attack Disrupts Winter Olympics Website During Opening Ceremony
By Waqas The Winter Olympics Games Organizing Committee is investigating a cyber This is a post from HackRead.com Read the original post: Cyber Attack Disrupts Winter Olympics Website During Opening Ceremony...
Apple’ iBoot Baseband Code for Various iPhone Models Leaked on GitHub
By Uzair Amir Apple has been going through a rough phase lately and This is a post from HackRead.com Read the original post: Apple’ iBoot Baseband Code for Various iPhone Models Leaked on GitHub...
Fake Bitcoin Wallet Apps Found on Google Play Store
By Uzair Amir After non-stop malware attacks, Android users have a couple of new This is a post from HackRead.com Read the original post: Fake Bitcoin Wallet Apps Found on Google Play Store...
Blockchain Wallet CoinPouch Hacked; Verge Coins Stolen
By Waqas Another day, another cryptocurrency wallet hacked This time; it This is a post from HackRead.com Read the original post: Blockchain Wallet CoinPouch Hacked; Verge Coins Stolen...
Researchers hack vacuum cleaner; turn it into perfect spying device
By Waqas According to the findings of Check Point researchers, there is This is a post from HackRead.com Read the original post: Researchers hack vacuum cleaner; turn it into perfect spying device...
Hackers can hack your kid’s smartwatch and track their location
By Carolina With smartwatches designed especially for kids being available now, parents This is a post from HackRead.com Read the original post: Hackers can hack your kids smartwatch and track their location...
Apple co-founder Steve Wozniak Launches ‘Woz U’ Online Tech Education Platform
By Waqas Steve Wozniak nicknamed The Woz known as a coding genius and This is a post from HackRead.com Read the original post: Apple co-founder Steve Wozniak Launches Woz U Online Tech Education Platform...
Watch: Researcher hacking, unlocking a smart gun with $15 magnets
By Waqas A $1500 smart gun developed with the main objective of This is a post from HackRead.com Read the original post: Watch: Researcher hacking, unlocking a smart gun with $15 magnets...
Pro-ISIS group hacks Ohio Governor’ site with anti-Trump message
By Waqas Team System DZ, a pro-ISIS Daesh hacking group from Algeria is back in the news. This time the group has targeted the government of United States and defaced several Ohio State websites including the official website of Governor John Kasich. The hackers left a deface page along with a...
Ransom Fail: Hackers Leak Thousands of Naked Photos of Plastic Surgery Patients
By Jahanzaib Hassan The Kaunas Lithuania-based Grozio Chirurgija clinics were recently hacked by a group called Tsar Team who leaked thousands of private photos of plastic surgery patients including naked photos of celebrities. What did the photos include? According to authorities, around 25,000...
Indian Biometric System Data leaked; over 130 M people could be affected
By Jahanzaib Hassan The personal identifiable information of people in the wrong hands could cause a major havoc, and this could happen pretty soon in India. According to the reports, the government sites supposed to protect the user data are instead, leaking it! Names, addresses, date of birth,...
Alexey Tulia at Tech Race Summit: how AI agents are changing engineering leadership
Alexey Tulia, Executive Leader at Coinspaid Dev, discussed the changing role of engineers and CTOs during the AI…...
Black Hat USA 2026: One GitHub Issue Could Compromise Major AI Coding Workflows
At Black Hat USA 2026, Novee found GitHub workflow flaws in Claude Code, Gemini CLI and Codex that enabled RCE, credential theft and agent control in pipelines...
5 Best AI Detection & Response Platforms for 2026
Compare AI detection & response platforms for 2026, including Dash, Lakera, Operant AI, HiddenLayer and Prisma AIRS, for runtime threat protection and response...
Woodgnat Hackers Use Mistic RAT to Broker Access for Ransomware Gangs
Woodgnat Hackers use Backdoor.Mistic, a stealthy RAT, to let brokers compromise networks and sell entry points to ransomware groups, putting firms at risk...
Hackers Hide New Argamal Malware Inside Working Hentai Games
Kaspersky found Argamal malware hidden in hentai game installers, giving hackers remote access through working games shared on adult sites and torrents...
ShinyHunters Target Universities in Oracle PeopleSoft Zero-Day Attack
Google says ShinyHunters exploited Oracle PeopleSoft zero-day to steal data from 100+ organisations, with universities making up most victims...
Pwn2Own Berlin 2026 Hits Capacity as Rejected Hackers Release 0-Days
Pwn2Own Berlin 2026 reportedly reached full capacity for the first time, prompting rejected researchers to publicly disclose zero-day exploits targeting Firefox, NVIDIA, and AI platforms...
ClaudeBleed Vulnerability Lets Hackers Hijack Claude Chrome Extension to Steal Data
The ClaudeBleed vulnerability allows hackers to bypass Claude for Chrome guardrails to exfiltrate private Google Drive and Gmail data...
Google Chrome Accused of Silently Installing 4GB AI Model on User Devices
Cybersecurity researcher Alexander Hanff claims that Google Chrome automatically installs a 4GB Gemini Nano AI model without user notification or consent...
Google Fixes CVSS 10 Gemini CLI Vulnerability Enabling GitHub Issue-Based RCE
Google patches a CVSS 10 Gemini CLI vulnerability that allowed hackers to use prompt injection and privilege escalation for a full supply chain compromise...
Private Chats, Photos of Celebs Exposed in Suspected Stalkerware Leak
Private chats and photos of celebrities and influencers were exposed after a suspected stalkerware setup left a database open, revealing sensitive messages and files...
Cursor AI Agent Wipes PocketOS Database and Backups in 9 Seconds
PocketOS founder says Cursor AI agent deleted its production database in 9 seconds after misusing a root API token, exposing major Railway security flaws...
Fake CAPTCHA Scam Abuses Verification Clicks to Send Costly International Texts
Research from Infoblox reveals a massive Click2SMS fraud scheme using fake CAPTCHAs and back button hijacking to trick victims into sending costly international texts...
Harvester APT Expands Spying Operations with New GoGra Linux Malware
New GoGra Linux malware linked to Harvester APT targets systems in South Asia, using fake PDFs and Microsoft APIs for covert command and control...
Mustang Panda Hits India and S. Korea with Updated LOTUSLITE Backdoor
Acronis reveals Mustang Panda is using an updated version of LOTUSLITE backdoor to target Indian banks and Korean diplomats. Learn how this DLL sideloading attack works...
Threat Intel Scraping Without Burning Your Cover or Your Stack
Threat Intel Scraping sounds simple until it isn’t, here’s how cybersecurity teams avoid blocks, bad data, and unnecessary risk...
OpenAI Launches GPT-5.4-Cyber to Boost Defensive Cybersecurity
OpenAI unveils GPT-5.4-Cyber, a cybersecurity-focused model built to help defenders analyze malware and fix software bugs. The company is also expanding its Trusted Access for Cyber TAC program to thousands of verified experts...
LinkedIn Phishing Scam Uses Fake Notifications to Hijack Accounts
A LinkedIn phishing scam uses fake notifications and lookalike domains to steal credentials, hijack accounts, and access sensitive professional data...
New CanisterWorm Targets Kubernetes Clusters, Deploys “Kamikaze” Wiper
CanisterWorm spreads via npm supply chain attack, hijacks developer accounts, targets Kubernetes clusters, and deploys destructive Kamikaze wiper payload...
Hacker Group LAPSUS$ Claims Alleged AstraZeneca Data Breach
LAPSUS$ claims it breached AstraZeneca, offering alleged source code, credentials, cloud configs, and employee data for sale in leaked samples...
Hackers Use Cloudflare Human Check to Hide Microsoft 365 Phishing Pages
Scammers are hijacking popular security tools like Cloudflare to hide fake Microsoft 365 login pages. Learn how this new invisible phishing campaign bypasses antivirus software and how you can stay safe...
900+ Certificates Used by Fortune 500, Governments Exposed by Key Leaks
A joint study by Google and GitGuardian reveals that over 2,600 valid TLS certificates, protecting Fortune 500 companies and government agencies, were compromised due to private key leaks on GitHub and DockerHub...
Op Bizarre Bazaar: New LLMjacking Campaign Targets Unprotected Models
Pillar Security Research has discovered Operation Bizarre Bazaar, a massive cyberattack campaign led by a hacker known as Hecker. Between December 2025 and January 2026, over 35,000 sessions were recorded targeting AI systems to steal compute power and resell access via silver.inc...
Survey: Rapid AI Adoption Causes Major Cyber Risk Visibility Gaps
As software supply chains become longer and more interconnected, enterprises have become well aware of the need to…...
The Cybersecurity Side of AI Crypto Bots: What Users Need to Know
Many crypto investors remain sceptical about using AI in their trading. They are aware that the technology exists,…...
North Korean Hackers Deploy EtherRAT Malware in React2Shell Exploits
Sysdig discovered North Korea-linked EtherRAT, a stealthy new backdoor using Ethereum smart contracts for C2 after exploiting the critical React2Shell vulnerability CVE-2025-55182...
New JS#SMUGGLER Campaign Drops NetSupport RAT Through Infected Sites
Securonix Threat Research details the complex JSSMUGGLER campaign, a three-step web attack using obfuscated JavaScript and hidden HTA files to install the NetSupport RAT on user Windows desktops, granting hackers full remote control and persistent access...
Space Bears Ransomware Claims Comcast Data Theft Through Quasar Breach
Space Bears ransowmare claims it obtained Comcast files through a breach at Quasar Inc, with threats to publish the data and separate leaks promised from Quasar itself...
PromptPwnd Vulnerability Exposes AI driven build systems to Data Theft
Aikido Security exposes a new AI prompt injection flaw in GitHub/GitLab pipelines, letting attackers steal secrets. Major companies affected...
CISA Warns of Active Attacks on Cisco ASA and Firepower Flaws
CISA issues an urgent directive for all organizations to patch Cisco ASA and Firepower devices against CVE-2025-20362 and CVE-2025-20333, exploited in the ArcaneDoor campaign. Verify the correct version now!...
New Mic-E-Mouse Attack Shows Computer Mice Can Capture Conversations
Security researchers at UC Irvine reveal the 'Mic-E-Mouse' attack, showing how high-DPI optical sensors in modern mice can detect desk vibrations and reconstruct user speech with high accuracy. Learn how this side-channel vulnerability affects your privacy...
Everest Ransomware Claims Mailchimp as New Victim in Relatively Small Breach
Everest ransomware claims Mailchimp breach, leaks 943,000 lines of data. While limited in size, it adds to a spike in global ransomware activity this July...