Dark web hacker selling admin access to a Chinese railway company

By Waqas The IT security researchers at Sixgill's threat intelligence team have identified an "experienced threat actor" on the dark web selling access to the admin panel of a Chinese rail control system. This access would enable criminals to manipulate train control systems, affecting over one...

Russian exploit developer publicly disclosed VirtualBox zero-day vulnerability

By Waqas An independent IT security researcher and exploit developer from Russia has publicly revealed a zero-day vulnerability in all versions of VirtualBox VB 5.2.20 and prior. VB is commonly used open source virtualization software that has been developed by Oracle. According to the analysis o...

Russia hacked Winter Olympics & framed N.Korea in false-flag attack: US

By Carolina On February 9th, 2017, during the opening ceremony of the PyeongChang 2018 This is a post from HackRead.com Read the original post: Russia hacked Winter Olympics & framed N.Korea in false-flag attack: US...

Apple has removed all major VPN apps from Chinese App Store

By Carolina China is well known for its online censorship and surveillance This is a post from HackRead.com Read the original post: Apple has removed all major VPN apps from Chinese App Store...

PythonAnywhere Cloud Platform Abused for Hosting Ransomware

Razr ransomware is exploiting PythonAnywhere to distribute and encrypt files with AES-256. ANY.RUNs analysis reveals its behaviour, C2…...

How to perform a website security check- 6 tools to check website security

By Owais Sultan Running a small business or a large corporation? Your website needs security amid increasing cyberattacks. Here are some website security check tools. This is a post from HackRead.com Read the original post: How to perform a website security check- 6 tools to check website securit...

Mobile app building is simple and affordable – the Appy Pie way!

By Owais Sultan Steve Jobs had it right! There is an app for everything and businesses today, big and small, are realizing it. Mobile apps, in their limited time of existence, have made a massive impact on the industry and creating mobile apps is not limited to just the big leagues. This is a pos...

Teen hacked Apple twice hoping for a job

By Ryan De Souza He hacked his way into the tech giant’s mainframe by creating false credentials. Now that is what we call a very unorthodox approach, an out of the box invocation to realize what you are desperately after. An Australian teenager, an Apple fanboy, longing for a job in Apple evince...

World’s most dangerous laptop has been sold for $1.3 million

By Uzair Amir The laptop is a Samsung model now known as ‘Persistence of Chaos’ due to dangerous malware infection. A few days ago it was reported that a laptop 2008 Samsung 10.2-inch - NC10-14GB netbook infected with some of the more dangerous malware was up for sale and the highest bid received...

How to make Microsoft 70-412 exam preparation effective with Prepaway web resource

By Owais Sultan The Microsoft 70-412 certification exam validates that you have what it takes to configure advanced Windows Server 2012. This test is one of three exams that measure the skills of a candidate on matters to do with deployment, management, and maintenance of Windows Server 2012. The...

Malware since 2017: Auction giant Sotheby’s Home hit by Magecart attack

By Waqas Sotheby's, an American multinational corporation and Auction House has become another victim of Magecart attack after hackers gained access to Sotheby's home website and inserted a card-skimming code aiming at customers’ credit card and banking data. Although Sotheby's detected the...

Schneider Electric Shipped USB Drives Loaded with Malware

By Uzair Amir Schneider Electric has released a warning and advisory notice according to which the USB drives shipped with some of the company’s products may be infected with malware. “Schneider Electric is aware that USB removable media shipped with the Conext Combox and Conext Battery Monitor...

WannaCry ransomware fame North Korean hacker tracked down by the US

By Waqas It is no secret that the US government has always suspected and even accused North Korea was carrying out ransomware attacks using the destructive WannaCry ransomware and for hacking Sony Pictures. But it merely has remained a suspicion so far. However, now the US authorities have found...

Microsoft bug bounty program: $250k for reporting Meltdown & Spectre type flaws

By Waqas The bug bounty program will remain open until December 31st, 2018. This is a post from HackRead.com Read the original post: Microsoft bug bounty program: $250k for reporting Meltdown & Spectre type flaws...

Fitbit’ Fitness Tracker Devices Leak Personal Data: Researchers

By Waqas We do know that the inherent flaws in wearable devices This is a post from HackRead.com Read the original post: Fitbit’ Fitness Tracker Devices Leak Personal Data: Researchers...

BentoML Vulnerability Allows Remote Code Execution on AI Servers

TL;DR: A critical deserialization vulnerability CVSS 9.8 - CVE-2025-27520 in BentoML v1.3.8–1.4.2 lets attackers execute remote code without…...

Microsoft warns of Nobelium hackers using FoggyWeb backdoor

By Waqas Microsoft warns of the FoggyWeb backdoor used by Nobelium, the same hacking group behind SolarWinds supply-chain attacks. This is a post from HackRead.com Read the original post: Microsoft warns of Nobelium hackers using FoggyWeb backdoor...

Nespresso smart cards can be exploited for unlimited coffee

By Habiba Rashid Let us imagine that your Nespresso smart card had no limit to how much coffee you can buy with it. A little too convenient, isn’t it? This is a post from HackRead.com Read the original post: Nespresso smart cards can be exploited for unlimited coffee...

British judge says Julian Assange will not be extradited to the US

By Deeba Ahmed The US' fight to get Wikileaks founder Julian Assange extradited so that he could stand a trial in a US court doesn't seem to conclude anytime soon. This is a post from HackRead.com Read the original post: British judge says Julian Assange will not be extradited to the US...

Dark web hosting firm quits after hackers delete its database

By Sudais Asif A dark web hosting firm has quit its operation after being hit by one successful cyber attack after another. This is a post from HackRead.com Read the original post: Dark web hosting firm quits after hackers delete its database...

FBI unlocks iPhone 11 Pro Max using Graykey raising privacy concerns

By Sudais Asif In the past, Apple has repeatedly refused to unlock the iPhone for the FBI pleasing its fan base however the FBI does not need Apple anymore... This is a post from HackRead.com Read the original post: FBI unlocks iPhone 11 Pro Max using Graykey raising privacy concerns...

DNSpionage group’s Karkoff malware selectively pick victims

By Ryan De Souza Karkoff creates a timeline of the command execution which can be "extremely" useful when responding to this type of threat. The IT security researchers at Cisco's Talos threat research team have discovered a new malware that has been developed by the threat actors behind the...

Dark Web hacker selling 92M new accounts on Dream market

By Waqas The dark web hacker “Gnosticplayers” has quickly made a reputation for his high-profile data breaches and selling user data on the infamous Dream marketplace. A couple of days ago the hacker was selling 126 million accounts stolen from new data breaches and now, the same hacker is back...

Windows 10 version 1809 is incompatible with Morphisec anti-malware

By Carolina Another day, another Windows 10 update issue - This time it includes security software. Another day, another reason for Windows 10 to make headlines for all the wrong reasons. It is a fact that Windows 10 is currently used by over 400 million users globally but lately, its updates hav...

13 malware gaming apps on Play Store installed by half a million users

By Waqas Android is one of the most used mobile operating systems in the world and that makes it a lucrative target for malicious hackers. Recently, ESET's IT security researcher Lukas Stefanko identified the presence of a malware in 13 driving gaming apps on none other than Google Play Store...

Don’t ever use a VPN without paying attention to these five things

By John Mason Ryan Lin was just recently sentenced to 17 years in prison. He was sentenced for committing a range of crimes including cyberstalking, computer fraud and abuse, aggravated identity theft, and distribution of child pornography. These are all serious crimes that I in no way support or...

Teen arrested for DDoS attack on ProtonMail & making fake bomb threats

By Waqas ProtonMail, a Swiss-based end-to-end email encryption service, has announced the name of one of the attackers involved in the DDoS attack against the company earlier this year. Due to the attack, the email service of ProtonMail stopped responding for a minute several times despite having...

ClipboardWalletHijacker malware replaces address to steal cryptocurrency

By Waqas The IT security researchers at Qihoo 360 Total Security have discovered This is a post from HackRead.com Read the original post: ClipboardWalletHijacker malware replaces address to steal cryptocurrency...

“ProtonMail Contacts” world’s first encrypted contacts manager is here

By Waqas The world-renowned encrypted email service provider ProtonMail is back in the This is a post from HackRead.com Read the original post: ProtonMail Contacts worlds first encrypted contacts manager is here...

Hidden Backdoors in npm Packages Let Attackers Wipe Entire Systems

Malicious npm packages found with hidden endpoints that wipe systems on command. Devs warned to check dependencies for express-api-sync, system-health-sync-api...

DeepDotWeb admin pleads guilty to money laundering, kickbacks

By Habiba Rashid DeepDotWeb DDW was seized by the FBI in April 2019 and Tal Prihar, an Israeli citizen was arrested from Brazil. This is a post from HackRead.com Read the original post: DeepDotWeb admin pleads guilty to money laundering, kickbacks...

DDoS-for-hire service SuperiorStresser operator gets suspended sentence

By Deeba Ahmed SuperiorStresser DDoS-For-Hire service offered as low as £8 to carry out DDoS attacks... This is a post from HackRead.com Read the original post: DDoS-for-hire service SuperiorStresser operator gets suspended sentence...

How To Keep Your Router And WiFi Safe From Hackers

By Waqas Just yesterday it was reported that hackers have been using vulnerable and exposed routers to redirect users to malicious COVID-19 related app aiming at your personal data. Now... This is a post from HackRead.com Read the original post: How To Keep Your Router And WiFi Safe From Hackers...

70% of the entire US population is now on Facebook

By Waqas In 2016, shocking research about Facebook revealed that by 2098, the social media giant will be the biggest virtual graveyard but now... This is a post from HackRead.com Read the original post: 70% of the entire US population is now on Facebook...

With KENT CamEye Travelling in a Cab Just Got a Lot Safer!

By Uzair Amir KENT CamEye is a next-gen car camera that has features like a 720p dual camera with a FOV of 120-degree. This is a post from HackRead.com Read the original post: With KENT CamEye Travelling in a Cab Just Got a Lot Safer!...

Hackers found tracking web traffic of Chrome and Firefox browsers

By Sudais This, however, is not the first time when Chrome and Firefox browsers have been targeted in one attack altogether. Last year, Vega Stealer malware was caught stealing saved passwords and credit/debit card data from Chrome and Firefox users. This is a post from HackRead.com Read the...

Family locator app leaked real-time location data of 238,000 individuals

By Waqas We normally consider family locator app as a blessing because we are able to track our family members conveniently through them. But, what if your private data collected or shared on such an app gets misused by cybercriminals because the app fails to secure it properly? It would instantl...

Google fixes critical vulnerability in Chrome for Android after 3 years

By Waqas A three-year-old security vulnerability in Google Chrome for Android has finally been fixed by Google. It is quite surprising that the tech giant took so long to fix a flaw that was identified several years back. The flaw was originally identified at Nightwatch Cybersecurity by white hat...

A banking trojan that steals Gmail, Facebook, Twitter and Yahoo Password

By Waqas The IT security researchers at Bitdefender have discovered a banking malware This is a post from HackRead.com Read the original post: A banking trojan that steals Gmail, Facebook, Twitter and Yahoo Password...

Google issues patches for Chrome flaw for Windows, Mac and Linux

By Waqas Along with a patch for a zero-day bug in the Chrome browser, Google has addressed seven other flaws in its recent update. This is a post from HackRead.com Read the original post: Google issues patches for Chrome flaw for Windows, Mac and Linux...

Voice assistant devices can be manipulated with ultrasonic waves

By Sudais Asif A new type of attack called "SurfingAttack" can be used against voice assistant devices like Siri. This is a post from HackRead.com Read the original post: Voice assistant devices can be manipulated with ultrasonic waves...

Microsoft pwns domains used by hackers for large-scale cyber attacks

By Sudais Microsoft has shown its true powers against a group of hackers. Here's what happened... This is a post from HackRead.com Read the original post: Microsoft pwns domains used by hackers for large-scale cyber attacks...

Facebook allows users to opt out of facial recognition in photos

By Sudais Facebook is introducing privacy features with its new facial recognition program and stop using the one to tag users in photos. This is a post from HackRead.com Read the original post: Facebook allows users to opt out of facial recognition in photos...

Rietspoof malware distributes ransomware via messaging apps

By Waqas A malware strain dubbed as Rietspoof has been under the radar of researchers at Avast since last August. Reportedly, researchers suspect that the malware is on the rise and it is being distributed via Skype, Facebook Messenger, and other messaging apps. Researchers maintain that the...

Hacker takeovers Drake’s Fortnite account to yell racial slurs

By Carolina The official Fortnite account of the Canadian rapper Drake going by the handle of "Duddus647" was hacked in an attack on Thanksgiving weekend. The hacker used the account to join Fortnite live stream charity event run by Ninja, a pro streamer and shout racial slurs and obscenities. Th...

2,000 Colorado DOT computers infected with SamSam Ransomware

By Uzair Amir Another day, another ransomware scam - This time, it is This is a post from HackRead.com Read the original post: 2,000 Colorado DOT computers infected with SamSam Ransomware...

watchTowr Warns of Active Exploitation of SonicWall SMA 100 Devices

watchTowr reveals active exploitation of SonicWall SMA 100 vulnerabilities CVE-2024-38475 & CVE-2023-44221 potentially leading to full system takeover…...

Acer Laptop Vulnerability Allows Malware Infection During Secure Boot

By Deeba Ahmed ESET assigned the vulnerability a CVSS score of 8.1 and tracked it as CVE-2022-4020. This is a post from HackRead.com Read the original post: Acer Laptop Vulnerability Allows Malware Infection During Secure Boot...

Thousands of Windows PCs infected by Nodersok/Divergent fileless malware

By Sudais A new fileless malware is on the rise which converts computers into bots that can be controlled by hackers remotely. This is a post from HackRead.com Read the original post: Thousands of Windows PCs infected by Nodersok/Divergent fileless malware...

New ‘Off-Facebook Activity Tool’ lets users control data collected by websites

By Sudais Off-Facebook Activity lets users see a summary of the apps and websites that send Facebook information about their activity. This is a post from HackRead.com Read the original post: New ‘Off-Facebook Activity Tool’ lets users control data collected by websites...