Hackread.com

The Twitter account of the most reliable cybersecurity news platform brings exclusive dark web, tech, hacking news, and much more. Contact: [email protected].

[Hackread.com @HackRead]

Qilin and INC ransomware operators are exploiting a Palo Alto VPN flaw in ongoing attacks, bypassing authentication, including MFA, to access company networks.

Listen/Read: https://t.co/uzWseN8AKE

#Ransomware #Cybersecurity #PaloAlto #VPN #Vulnerability #INC #Qilin

[Hackread.com @HackRead]

⚠️📢 PHP2Shell flaws can let attackers run code on web servers without logging in. Emergency fixes are out. Updating WordPress alone won’t fix the server’s PHP installation.

Listen/Read: https://t.co/wrCHIizSGs

#PHP #Cybersecurity #PHP2Shell #Vulnerability #WordPress

[Hackread.com @HackRead]

⚠️📢 Newly exposed records show INC and #TheGentlemen ransomware affiliates are using Claude and Kimi to plan attacks. Researchers recovered 8,257 AI messages, stolen credentials and 46 encryptor builds from the servers.

Read: https://t.co/balHrVdYzW

#Ransomware #Cybersecurity

[Hackread.com @HackRead]

China-based BRONZE SANDCASTLE hackers used legitimate Windows apps to run encrypted backdoors, then searched networks and copied an Active Directory database containing password hashes.

Listen/Read: https://t.co/bkgLWNOx2O

#Cybersecurity #Malware #BRONZESANDCASTLE #Windows

[Hackread.com @HackRead]

A cyber incident at BAE Systems Inc. has halted US bankruptcy notices, taken federal court services offline and forced courts to change notice procedures and deadlines.

Read: https://t.co/jk4U1LdXBx

#Cybersecurity #BAESystems #Bankruptcy

[Hackread.com @HackRead]

Scammers are abusing Adobe #Frame.io alerts to share malicious PDFs that redirect recipients to fake Microsoft 365 login pages. The campaign is dubbed #PhantomPreview.

Listen/Read: https://t.co/ga6c9Y0EWJ

#Phishing #Microsoft365 #Cybersecurity

[Hackread.com @HackRead]

⚠️📢A Chinese couple has been arrested in #Japan over a phishing and credit card fraud scheme involving 480K phishing emails traced to a computer hidden behind a hotel refrigerator and connected to its Wi-Fi.

More: https://t.co/rxnraHrD1j

#Cybersecurity #Phishing #Cybercrime

[Hackread.com @HackRead]

Federal investigators suspect a US ransomware negotiator helped ShinyHunters operate its victim-extortion site. The unnamed executive is separate from Edward Dubrovsky.

Listen/Read: https://t.co/hCvfswbXdD

#Cybersecurity #ShinyHunters #Ransomware #Extortion #Cybercrime

[Hackread.com @HackRead]

⚠️📢🪝That routine meeting invite in your inbox may lead somewhere other than Microsoft Teams.

A phishing campaign has sent hundreds of thousands of fake calendar invitations designed to steal #Microsoft credentials.

More: https://t.co/3KXqsWqNNM

#Cybersecurity #Microsoft365

[Hackread.com @HackRead]

⚠️📢 An OpenAI model accessed a crypto wallet without permission and spent Sepolia test ETH to deploy smart contracts after authorized funding methods failed.

Listen/Read: https://t.co/YE5H5mrl6s

#OpenAI #AI #Crypto #Cybersecurity #HackingNews

[Hackread.com @HackRead]

Claude Code Desktop’s preview pane could let malicious HTML steal SSH keys, cloud credentials, GitHub and npm tokens. Anthropic fixed it after an initial patch was bypassed.

Listen/Read: https://t.co/0PwCdprx8y

#Cybersecurity #ClaudeCode #Vulnerability #AI

[Hackread.com @HackRead]

⚠️📢 Burger King Japan confirms a data breach exposed 11.18 million app member records, including emails, phone numbers, dates of birth and more.

Listen/Read: https://t.co/RbsPqUH7wa

#DataBreach #Cybersecurity #BurgerKing #Japan

[Hackread.com @HackRead]

⚠️📢 Targeted ads delivered Candiru mercenary spyware to #AlJazeera devices with no clicks required. Citizen Lab found the ads also reached NATO networks, but did not confirm infection.

Listen/Read: https://t.co/REUnuaCZXS

#Cybersecurity #Candiru #Spyware #NATO #CitizenLab

[Hackread.com @HackRead]

A misconfigured database linked to Vibetech exposed 13.7 million records from previous breaches, including AT&T, Casio data, the FBI employee directory, plaintext passwords, and bank details.

Listen/Read: https://t.co/Du6oseBhUf

#DataBreach #Cybersecurity #Vibetech #Privacy

[Hackread.com @HackRead]

Could AI malware spread between devices on its own? Anthropic tested model replication on Android emulators and ran another model across $55 TV boxes, showing how AI worms might work.

Listen/Read: https://t.co/9Z4pHm4qkJ

#AI #Cybersecurity #Anthropic #Malware #IoT #Android

[Hackread.com @HackRead]

⚠️📢 Microsoft and Health-ISAC seized domains linked to YAM Store, CoGUI and Iron Man, services blamed for over 1 billion malicious messages targeting 75,000+ organizations.

Listen/Read: https://t.co/JK1cYSowJK

#Microsoft #Phishing #Cybercrime #Scam #Fraud

[Hackread.com @HackRead]

Check Point Research reports two LiteLLM flaws that could let low-privilege authenticated users take over admin accounts, access internal files, execute code and steal AI provider API keys.

Listen/Read: https://t.co/ZMyKKKjUKn

#LiteLLM #Cybersecurity #AI #APIKeys #Vulnerability

[Hackread.com @HackRead]

Microsoft fixed 1,413 security flaws in its October Patch Tuesday update, including an actively exploited Windows Shell zero-day that can bypass Mark of the Web protections.

Listen/Read: https://t.co/dCV9TYqTxS

#Microsoft #PatchTuesday #Cybersecurity #Windows #Vulnerability

[Hackread.com @HackRead]

Amazon Fire TV Cube rooted using a four-year-old ARM Mali GPU vulnerability, allowing users to bypass software restrictions and run alternative operating systems.

Listen/Read: https://t.co/2R1YuXcUNC

#Amazon #AmazonFireTV #FireTVCube #ArmMali #Cybersecurity

[Hackread.com @HackRead]

⚠️📢 Hackers manipulated refrigeration-control systems to heat supermarket fridges to 50°C in #France, forcing stores to dump spoiled food stocks. Separate IT outages also hit retailers in the Netherlands and Belgium.

Read: https://t.co/KbgUpjreoE

#Cybersecurity #Cyberattack