Microsoft warns of Azure vulnerability which exposed users to data theft

By Deeba Ahmed Currently, there is no evidence that this particular Azure vulnerability was exploited to gain unauthorized access to customer data. This is a post from HackRead.com Read the original post: Microsoft warns of Azure vulnerability which exposed users to data theft...

Hackers dump login credentials of Fortinet VPN users in plain-text

By Waqas Fortinet VPN users are urged to reset their passwords as the company has acknowledged the data to be legitimate. This is a post from HackRead.com Read the original post: Hackers dump login credentials of Fortinet VPN users in plain-text...

Malware droppers for hire targeting users on fake pirated software sites

By Deeba Ahmed Some fake piracy websites have been found distributing Crypto Bot and Raccoon Stealer malware in cracked software. This is a post from HackRead.com Read the original post: Malware droppers for hire targeting users on fake pirated software sites...

REvil ransomware gang is back after disappearing amid Kaseya attack

By Waqas The official website of the REvil ransomware gang aka Sodinokibi which is accessible through the Tor browser is back online after going offline since July 2021. This is a post from HackRead.com Read the original post: REvil ransomware gang is back after disappearing amid Kaseya attack...

Whitehat hacker shows how to detect hidden cameras in Airbnb, hotels

By Waqas A whitehat hacker has shared simple yet useful tips on his TikTok detailing how you can detect hidden cameras in an Airbnb or a hotel room. This is a post from HackRead.com Read the original post: Whitehat hacker shows how to detect hidden cameras in Airbnb, hotels...

What are the benefits of having ‘pandemic’ software in post-coronavirus pandemic business?

By Owais Sultan The coronavirus pandemic has brought about many new tools for businesses to use. However, it has also brought older tools back into the spotlight and tools that have blossomed with the help of extra funding. Lets discuss the options that have come into prominence during the COVID-...

ProtonMail logged, shared activist’s IP address with Swiss police

By Waqas ProtonMail is being criticized for sharing French activists IP address with Swiss authorities while claiming it does not save logs. End-to-end encrypted email service provider ProtonMail is currently facing criticism after the company shared the IP address of an anti-gentrification...

Malicious Office documents make up 43% of all malware downloads

By Waqas In the 3rd quarter of 2020, around 38% of all downloadable malware were found hidden in Office documents, a new report reveals. This is a post from HackRead.com Read the original post: Malicious Office documents make up 43% of all malware downloads...

REvil gang hits UK ITSPs with series of extortion-based DDoS attacks

By Waqas Reportedly, the REvil ransomware gang is using DDoS attacks to make huge ransom demands from victim companies VoIP Unlimited and Voipfone. This is a post from HackRead.com Read the original post: REvil gang hits UK ITSPs with series of extortion-based DDoS attacks...

Conti ransomware affiliates hit Exchange Servers with ProxyShell exploits

By Waqas Conti ransomware affiliates are exploiting 3 unpatched vulnerabilities that allow unauthenticated, remote code execution on MS Exchange Servers. This is a post from HackRead.com Read the original post: Conti ransomware affiliates hit Exchange Servers with ProxyShell exploits...

FBI warns of ransomware attacks against Food and Agriculture sectors

By Deeba Ahmed According to the agency, the impact of these ransomware attacks can be devastating for both small to big businesses. This is a post from HackRead.com Read the original post: FBI warns of ransomware attacks against Food and Agriculture sectors...

$120 charging cable O.MG remotely steals data from Apple devices

By Deeba Ahmed O.MG cable can log keystrokes from anything it is connected to, including Mac keyboards, iPhones, or iPads, and send the data to attackers. This is a post from HackRead.com Read the original post: $120 charging cable O.MG remotely steals data from Apple devices...

Official website of Banksy hacked for fake NFT scam

By Deeba Ahmed British Art Collector Buys Fake Banksy NFT for £244k, Scammer Returned Funds Later. Here's What Happened and How the Funds were Returned. This is a post from HackRead.com Read the original post: Official website of Banksy hacked for fake NFT scam...

Security risks to your mobile app and how to avoid them

By Owais Sultan what are the most significant security risks to your mobile app? We’ve explained them below to help you avoid making the same mistakes. This is a post from HackRead.com Read the original post: Security risks to your mobile app and how to avoid them...

Indonesian Govt’s COVID-19 test, trace app leak impacting 1.3m users

By Deeba Ahmed The data leak took place after the Elasticsearch server used by eHAC developers exposed the data due to misconfiguration. This is a post from HackRead.com Read the original post: Indonesian Govts COVID-19 test, trace app leak impacting 1.3m users...

Android game developer EskyFun exposed 1 million gamers to hackers

By Deeba Ahmed EskyFun used an unsecured Elasticsearch server for storing vast amounts of data collected from users which was later exposed online. This is a post from HackRead.com Read the original post: Android game developer EskyFun exposed 1 million gamers to hackers...

Bangkok Airways hit by Lockbit ransomware; leaks 103GB of data

By Waqas The Lockbit ransomware gang also claimed to have ''extra 200 GB'' worth of Bangkok Airways data. This is a post from HackRead.com Read the original post: Bangkok Airways hit by Lockbit ransomware; leaks 103GB of data...

Microsoft warns of credential phishing attack abusing open redirect links

By Waqas So far, the ongoing phishing attack has utilized more than 350 unique domains to target Microsoft Office 365 users. This is a post from HackRead.com Read the original post: Microsoft warns of credential phishing attack abusing open redirect links...

iCloud phishing scam – Man stole private photos of 620,000 women

By Waqas LA County resident booked in iCloud phishing scam pretended to be an Apple agent and stole 620,000 photos, 9,000 videos of 306 young women. This is a post from HackRead.com Read the original post: iCloud phishing scam - Man stole private photos of 620,000 women...

Why torrenting on Elon Musk’s Starlink is not a good idea?

By Waqas Starlink sends piracy warnings to users urging them to avoid downloading any illegal content by using their service. This is a post from HackRead.com Read the original post: Why torrenting on Elon Musks Starlink is not a good idea?...

T-Mobile hacker used brute force attack to steal customers’ data

By Saad Rajpoot A 21-year-old US citizen named John Binns has claimed responsibility for the T-Mobile data breach and labeled the carrier’s “security is awful.” This is a post from HackRead.com Read the original post: T-Mobile hacker used brute force attack to steal customers data...

Whitehat hackers accessed primary keys of Azure’s Cosmos DB customers

By Saad Rajpoot The vulnerability existed in Microsoft Azure’s flagship database service Cosmos DB for approximately two years. This is a post from HackRead.com Read the original post: Whitehat hackers accessed primary keys of Azures Cosmos DB customers...

FIN8 Resurfaces with New Sardonic Backdoor

By Deeba Ahmed In its latest attack, FIN8 is infiltrating companies to carry out surveillance and obtain privilege escalation to deploy a payload of malware called Sardonic. This is a post from HackRead.com Read the original post: FIN8 Resurfaces with New Sardonic Backdoor...

Top 6 SEO Conferences in the USA

By Owais Sultan Here are 4 more reasons why attending an SEO conference should be on your bucket list This is a post from HackRead.com Read the original post: Top 6 SEO Conferences in the USA...

New variant of PRISM Backdoor ‘WaterDrop’ targets Linux systems

By Deeba Ahmed According to researchers, the PRISM backdoor has been on their radar for more than 3.5 years. This is a post from HackRead.com Read the original post: New variant of PRISM Backdoor WaterDrop targets Linux systems...

Unpatched Microsoft Exchange servers hit with ProxyShell attack

By Waqas Researchers have identified 140+ webshells launched against 1,900 unpatched Microsoft Exchange servers. This is a post from HackRead.com Read the original post: Unpatched Microsoft Exchange servers hit with ProxyShell attack...

Vulnerability allowed hackers to tamper medication in infusion pump

By Deeba Ahmed Braun Patched Faulty IV Pump After McAfee Discovered Vulnerability Allowing Medication Tampering. This is a post from HackRead.com Read the original post: Vulnerability allowed hackers to tamper medication in infusion pump...

Watch as hackers disrupt Iran’s prison computers; leak live footage

By Waqas The group of hackers behind the cyberattack on the Iranian prison goes by the name of Edaalate Ali. Here's what footage was leaked online. This is a post from HackRead.com Read the original post: Watch as hackers disrupt Irans prison computers; leak live footage...

10 Netflix Hacks Enhance Your Binge-Watching Experience

By Owais Sultan Here are the best 10 Netflix Hacks that will enhance your binge-watching experience and keep you hooked to the screen! This is a post from HackRead.com Read the original post: 10 Netflix Hacks Enhance Your Binge-Watching Experience...

38 million records exposed in Microsoft Power apps misconfiguration

By Waqas These records were exposed due to weak default configuration in the ODdata API for MS Power Apps. Here's what data was leaked. This is a post from HackRead.com Read the original post: 38 million records exposed in Microsoft Power apps misconfiguration...

Konni RAT variant targeting Russia in ongoing attack campaign

By Waqas So far, Konni RAT has managed to evade detection as only 3 security solutions on VirusTotal were able to detect the malware. This is a post from HackRead.com Read the original post: Konni RAT variant targeting Russia in ongoing attack campaign...

Razer software bug lets anyone gain admin rights on Windows PC

By Deeba Ahmed A vulnerability in Razer Synapse software lets anyone possessing Razer peripherals obtain administration rights on a Windows PC. This is a post from HackRead.com Read the original post: Razer software bug lets anyone gain admin rights on Windows PC...

US military personnel defrauded into losing $822m through scams

By Waqas According to researchers, US military personnel lost over $822 million in different kinds of cybercrime and scams between 2017 and 30 June 2021. This is a post from HackRead.com Read the original post: US military personnel defrauded into losing $822m through scams...

The Five Best Widgets To Have On Your Website

By Owais Sultan Having a widget on a website is important for many reasons - Here are the top 5 widgets that one should consider having on their platform. This is a post from HackRead.com Read the original post: The Five Best Widgets To Have On Your Website...

Google shares details of unpatched Windows AppContainer vulnerability

By Deeba Ahmed Microsoft was informed about the vulnerability by Google but the company claimed it to be a “non-issue” and that it “will not fix it.” This is a post from HackRead.com Read the original post: Google shares details of unpatched Windows AppContainer vulnerability...

5 WordPress Security Solutions with Free SSL Certificates

By Waqas In this article, we are listing 5 popular WordPress security solution providers who also offer free SSL certificates. This is a post from HackRead.com Read the original post: 5 WordPress Security Solutions with Free SSL Certificates...

HolesWarm crypto malware hits unpatched Linux, Windows servers

By Waqas Researchers are calling the HolesWarm the "king of vulnerability exploitation" as the malware has already exploited 20 known Linux and Windows vulnerabilities in just a month. This is a post from HackRead.com Read the original post: HolesWarm crypto malware hits unpatched Linux, Windows...

AT&T breach? ShinyHunters selling AT&T database with 70 million SSN

By Waqas In a post published on an infamous hacker forum and marketplace Raid Forums, ShinyHunters is offering the database for starting price of $200k. This is a post from HackRead.com Read the original post: AT&T breach? ShinyHunters selling AT&T database with 70 million SSN...

Human rights watchdog ‘Karapatan’ hit by weeks long DDOS attacks

By Waqas The official website of Karapatan has been suffering a series of DDoS attacks since July 29th and are still ongoing as of yesterday, August 18th. This is a post from HackRead.com Read the original post: Human rights watchdog Karapatan hit by weeks long DDOS attacks...

Threat actors using CAPTCHA to evade phishing, malware detection

By Waqas According to researchers, cybercriminals are abusing legitimate challenge and response services like Google’s reCAPTCHA or deploying customized fake CAPTCHA-like validation. This is a post from HackRead.com Read the original post: Threat actors using CAPTCHA to evade phishing, malware...

How to automatically accept or disable browser cookies notice on any site

By Sudais Asif You can now use any of these 3 browser extensions to automatically accept or disable browser cookies notice on any website. This is a post from HackRead.com Read the original post: How to automatically accept or disable browser cookies notice on any site...

Millions of IoT devices, baby monitors open to audio, video snooping

By Deeba Ahmed The vulnerability would allow threat actors to compromise a targeted ThroughTek IoT device and watch the real-time video feed, listen to audio, and compromise credentials. This is a post from HackRead.com Read the original post: Millions of IoT devices, baby monitors open to audio,...

US Govt’s secret terrorist watchlist with 2M records exposed online

By Waqas The watchlist was exposed on a misconfigured server hosted on a Bahrain IP address instead of a US one. This is a post from HackRead.com Read the original post: US Govts secret terrorist watchlist with 2M records exposed online...

‘Optical Adversarial Attack’ uses low-cost projector to trick AI

By Sudais Asif In the latest, we have another piece of research that deals with strikingly similar details but incorporating the trickery of Artificial Intelligence AI. This is a post from HackRead.com Read the original post: Optical Adversarial Attack uses low-cost projector to trick AI...

Hacker pleads guilty to sim swapping, stealing cryptocurrency

By Deeba Ahmed A 21-year old hacker has admitted running a campaign over social media to hijack accounts of "high-value" account names and steal cryptocurrency. This is a post from HackRead.com Read the original post: Hacker pleads guilty to sim swapping, stealing cryptocurrency...

New Trickbot attack setup fake 1Password installer to extract data

By Waqas The fake 1Password installer is used to launch Cobalt Strike helping the attackers collect information about multiple systems in the network. This is a post from HackRead.com Read the original post: New Trickbot attack setup fake 1Password installer to extract data...

Hacker selling alleged stolen 100 million T-Mobile customer data for $200

By Waqas The hacker claims to have hacked T-Mobile's production, development, and staging servers around two weeks back, including its Oracle database server. This is a post from HackRead.com Read the original post: Hacker selling alleged stolen 100 million T-Mobile customer data for $200...

Network access to Pakistan’s top fed agency FBR sold on Russian forum

By Waqas FBR has acknowledged the data breach and called it out as cyber-terrorism on Pakistan's independence day. This is a post from HackRead.com Read the original post: Network access to Pakistans top fed agency FBR sold on Russian forum...

Dark web AlphaBay marketplace resurface after four years

By Waqas AlphaBay marketplace was originally seized in 2017 but now someone claiming to be DeSnake, the original AlphaBay co-founder has announced bringing the marketplace back to business. This is a post from HackRead.com Read the original post: Dark web AlphaBay marketplace resurface after four...

S3 bucket mess up exposed 182GB of senior US, Canada citizens data

By Waqas The misconfigured S3 bucket was owned by SeniorAdvisor, a consumer ratings, and reviews website. This is a post from HackRead.com Read the original post: S3 bucket mess up exposed 182GB of senior US, Canada citizens data...