7530 matches found
GitHub Scanner for React2Shell (CVE-2025-55182) Turns Out to Be Malware
A GitHub repository posing as a vulnerability scanner for CVE-2025-55182, also referred to as “React2Shell,” was exposed as…...
Everest Ransomware Says It Breached Brazilian Energy Giant Petrobras
Everest ransomware claims to have stolen over 180GB of seismic survey data from Petrobras, demanding contact through qTox with a countdown in place...
GlassWorm Malware Targets Developers Through OpenVSX Marketplace
GlassWorm, a self-propagating malware, infects VS Code extensions through the OpenVSX marketplace, stealing credentials and using blockchain for control...
Salesloft Drift Breach Traced to GitHub Compromise and Stolen OAuth Tokens
Salesloft Drift breach traced to GitHub compromise and stolen OAuth tokens, Mandiant confirms breach contained and Salesforce data targeted...
Fake AnyDesk Installer Spreads MetaStealer Through ClickFix Scam
A new and clever ClickFix scam is using a fake AnyDesk installer and Windows search to bypass security,…...
Google Reveals UNC6395’s OAuth Token Theft in Salesforce Breach
A new advisory from Google and Mandiant reveals a widespread data breach in Salesforce. Learn how UNC6395 bypassed…...
Police Bust Crypto Scammers, Nab Smishing SMS Blaster Operator
Thai police arrest SMS Blaster operator in smishing scam and bust crypto laundering gang moving $30M monthly through…...
Everest Ransomware Claims Mailchimp as New Victim in Relatively Small Breach
Everest ransomware claims Mailchimp breach, leaks 943,000 lines of data. While limited in size, it adds to a spike in global ransomware activity this July...
Norwegian Dam Valve Forced Open for Hours in Cyberattack
Unidentified hackers breached a Norwegian dam's control system in April, opening its valve for hours due to a weak password. Learn how simple vulnerabilities threaten critical infrastructure...
Scammers Insert Fake Support Numbers on Real Apple, Netflix, PayPal Pages
Cybercriminals are injecting fake support phone numbers onto official sites like Bank of America and Netflix. Learn how 'search parameter injection' scams work and protect yourself now...
AgentSmith Flaw in LangSmith’s Prompt Hub Exposed User API Keys, Data
A CVSS 8.8 AgentSmith flaw in LangSmith's Prompt Hub exposed AI agents to data theft and LLM manipulation. Learn how malicious AI agents could steal API keys and hijack LLM responses. Fix deployed...
Popular Chrome Extensions Found Leaking Data via Unencrypted Connections
Popular Chrome extensions exposed user data by sending it over unencrypted HTTP, raising privacy concerns. Symantec urges caution for users...
Zimbra CVE-2024-27443 XSS Flaw Hits 129K Servers, Sednit Suspected
A critical XSS vulnerability, CVE-2024-27443, in Zimbra Collaboration Suite's CalendarInvite feature is actively being exploited, potentially by the…...
Serviceaide Leak Exposes Records of 500,000 Catholic Health Patients
Serviceaide data leak exposes sensitive health info of 500K Catholic Health patients due to misconfigured database; risk of ID theft and fraud...
From TV5Monde to Govt: France Blames Russia’s APT28 for Cyberattacks
France accuses Russia's APT28 hacking group Fancy Bear of targeting French government entities in a cyber espionage campaign.…...
Planet Technology Industrial Switch Flaws Risk Full Takeover – Patch Now
Immersive security researchers discovered critical vulnerabilities in Planet Technology network management and switch products, allowing full device control.…...
AI Ethics, Cybersecurity and Finance: Navigating the Intersection
Artificial intelligence is transforming industries, but its adoption also raises ethical and cybersecurity concerns, especially in the regulated…...
Native Language Phishing Spreads ResolverRAT to Healthcare
Morphisec discovers a new malware threat ResolverRAT, that combines advanced methods for running code directly in computer memory,…...
Cozy Bear’s Wine Lure Drops WineLoader Malware on EU Diplomats
Midnight Blizzard APT29/Cozy Bear targets European embassies and Ministries of Foreign Affairs with sophisticated phishing emails disguised as…...
Researchers Find CVSS 10.0 Severity RCE Vulnerability in Erlang/OTP SSH
Security researchers report CVE-2025-32433, a CVSS 10.0 RCE vulnerability in Erlang/OTP SSH, allowing unauthenticated code execution on exposed…...
Cyver Core Reports 50% Reduction in Pentest Reporting Time with Generative AI
Amsterdam, Netherlands, 17th March 2025, CyberNewsWire...
New Microsoft 365 Phishing Scam Tricks Users Into Calling Fake Support
New Microsoft 365 phishing scam exploits fake support numbers to steal credentials. Learn how attackers bypass security and how to stay protected...
Chinese Cyber Espionage Group UNC3886 Backdoored Juniper Routers
UNC3886 hackers target Juniper routers with custom backdoor malware, exploiting outdated systems for stealthy access and espionage. Learn how to stay protected...
ASP.NET Vulnerability Lets Hackers Hijack Servers, Inject Malicious Code
Microsoft cybersecurity experts have identified a vulnerability flaw affecting ASP.NET applications, putting thousands of web servers at risk.…...
Lumma Stealer Found in Fake Crypto Tools and Game Mods on GitHub
McAfee Labs uncovers malicious GitHub repositories distributing Lumma Stealer malware disguised as game hacks and cracked software. Learn…...
Brave Desktop Browser Vulnerability Lets Malicious Sites Appear Trusted
A critical vulnerability in Brave Browser allows malicious websites to appear as trusted sources during file uploads/downloads. Learn…...
UnitedHealth Group’s Massive Data Breach Impacts 190 Million Americans
UnitedHealth Group has confirmed that a ransomware attack targeted its subsidiary, Change Healthcare, in February 2024, impacting 190…...
Fintech Bill Pay Platform “Willow Pays” Exposes Over 240,000 Records
Security researcher discovers a non-password-protected database containing over 240,000 records belonging to US-based FinTech bill payment platform Willow…...
New PhishWP Plugin on Russian Forum Turns Sites into Phishing Pages
SlashNext has discovered a malicious WordPress plugin, PhishWP, which creates convincing fake payment pages to steal your credit card information, 3DS codes, and personal data...
NPM Package Disguised as an Ethereum Tool Deploys Quasar RAT
Researchers discovered a malicious package on the npm package registry that resembles a library for Ethereum smart contract vulnerabilities but actually drops an open-source remote access trojan called Quasar RAT onto developer systems...
Why Ethereum Will Be a Key Platform for Businesses in the Future
Explore how Ethereum revolutionizes industries with smart contracts, DeFi, NFTs, gaming, DAOs, and sustainability, shaping the future of…...
Hackers Leak Partial Cisco Data from 4.5TB of Exposed Records
Yet another day, yet another data leak tied to Cisco!...
Hackers Target Job Seekers with AppLite Trojan Using Fake Job Emails
SUMMARY Zimperium's zLabs has shared its latest research with Hackread.com, ahead of its publishing on December 10. According…...
The Future of eCommerce: How Custom Apps Help You Get Ahead of the Competition
Discover the future of eCommerce with bespoke app development. Learn how tailored solutions enhance user experience, security, and performance while empowering businesses to meet unique needs and gain a competitive edge...
15 SpyLoan Apps Found on Play Store Targeting Millions
SUMMARY Cybercriminals are exploiting SpyLoan, or predatory loan apps, to target unsuspecting users globally. McAfee cybersecurity researchers report…...
Data Vigilante Leaks 772K Employee Records from Top Firms and 12.3M-Row Database
A massive data leak linked to the MOVEit vulnerability has exposed millions of employee records from major companies. Learn about the impact of this leak, the role of the "data vigilante" Nam3L3ss...
Halo Security Launches Slack Integration for Real-Time Alerts on New Assets and Vulnerabilities
MIAMI, Florida, 21st November 2024, CyberNewsWire...
Hackers Exploit Misconfigured Jupyter Servers for Illegal Sports Streaming
Aqua Nautilus’ research reveals hackers are leveraging vulnerable and misconfigured Jupyter Notebook servers to steal live sports streams.…...
Hackers Can Access Mazda Vehicle Controls Via System Vulnerabilities
Hackers can exploit critical vulnerabilities in Mazda’s infotainment system, including one that enables code execution via USB, compromising…...
Russian Court Jails Four REvil Ransomware Gang Members
Four members of the notorious REvil ransomware group have been sentenced to prison terms in Russia. This development…...
Mirai-Inspired Gorilla Botnet Hits 0.3 Million Targets Across 100 Countries
A new Gorilla Botnet has launched massive DDoS attacks, targeting over 100 countries, according to cybersecurity firm NSFOCUS.…...
Intel Broker Claims Cisco Breach, Selling Stolen Data from Major Firms
Intel Broker claims a major data breach at Cisco, allegedly stealing source codes, confidential documents, and credentials from…...
Storm-1575 Threat Actor Deploys New Login Panels for Phishing Infrastructure
The Storm-1575 group is known for frequently rebranding its phishing infrastructure. Recently, ANY.RUN analysts identified the deployment of…...
Top LMS Training Tips for Effective Learning
LMS training is vital for modern education and corporate learning, enabling efficient course delivery and progress tracking. To…...
Harnessing the Power of Cloud App Development and DevOps for Modern Businesses
Leverage Cloud App Development and DevOps to boost business agility, scalability, and security. Optimize operations, deploy faster, and…...
Police Broke Tor Anonymity to Arrest Dark Web Users in Major CSAM Bust
German authorities dismantled Boystown, a notorious Dark Web platform for CSAM, by deanonymizing Tor users in 2021. This…...
Chinese DragonRank Hackers Exploit Global Windows Servers in SEO Fraud
DragonRank, a Chinese-speaking hacking group, has compromised 30+ Windows servers globally. They exploit IIS vulnerabilities to manipulate SEO…...
Payment Gateway SLIM CD Data Breach: 1.7 Million Users Impacted
The payment gateway platform SLIM CD suffered a massive data breach between August 2023 and June 2024, compromising…...