Hackread.com

The Twitter account of the most reliable cybersecurity news platform brings exclusive dark web, tech, hacking news, and much more. Contact: [email protected].

[Hackread.com @HackRead]

Even an air-gapped PC, isolated from external networks, can leak secrets as the new #SPECTER technique uses USB power changes to transmit data after malware gains administrator access.

Listen/Read: https://t.co/4gz0mljKqA

#Cybersecurity #AirGapped #USB

[Hackread.com @HackRead]

GoDaddy revoked 404,607 SSL/TLS certificates after finding certificate-policy errors, with affected sites including some Gibraltar government websites.

Listen/Read: https://t.co/o0c5tgQZlR

#GoDaddy #Cybersecurity #Hosting #SSL #Certificate

[Hackread.com @HackRead]

⚠️📢 A fake legal notice can lead to remote control of your PC as researchers traced a new campaign delivering #OverlordRAT through phishing emails impersonating Brazilian notary offices.

Listen/Read: https://t.co/dD2r6jqM7P

#Malware #Cybersecurity #Windows #Brazil #Phishin

[Hackread.com @HackRead]

Patching an app won’t fix a vulnerable server behind it. NowSecure found 426 Android and iOS apps contacting servers reporting PHP versions affected by PHP2Shell.

Listen/Read: https://t.co/EznTxl8UJJ

#Cybersecurity #PHP2Shell #PHP #Vulnerability

[Hackread.com @HackRead]

Police in 21 African countries arrested 1,462 suspects and recovered over $105 million in #OperationSerengetiIII, targeting scam rings, phishing and illegal crypto mining.

Listen/Read: https://t.co/zfPVeWkXqF

#Cybercrime #INTERPOL #Cybercrime #Phishing #Fraud #Africa

[Hackread.com @HackRead]

Qilin and INC ransomware operators are exploiting a Palo Alto VPN flaw in ongoing attacks, bypassing authentication, including MFA, to access company networks.

Listen/Read: https://t.co/uzWseN8AKE

#Ransomware #Cybersecurity #PaloAlto #VPN #Vulnerability #INC #Qilin

[Hackread.com @HackRead]

⚠️📢 PHP2Shell flaws can let attackers run code on web servers without logging in. Emergency fixes are out. Updating WordPress alone won’t fix the server’s PHP installation.

Listen/Read: https://t.co/wrCHIizSGs

#PHP #Cybersecurity #PHP2Shell #Vulnerability #WordPress

[Hackread.com @HackRead]

⚠️📢 Newly exposed records show INC and #TheGentlemen ransomware affiliates are using Claude and Kimi to plan attacks. Researchers recovered 8,257 AI messages, stolen credentials and 46 encryptor builds from the servers.

Read: https://t.co/balHrVdYzW

#Ransomware #Cybersecurity

[Hackread.com @HackRead]

China-based BRONZE SANDCASTLE hackers used legitimate Windows apps to run encrypted backdoors, then searched networks and copied an Active Directory database containing password hashes.

Listen/Read: https://t.co/bkgLWNOx2O

#Cybersecurity #Malware #BRONZESANDCASTLE #Windows

[Hackread.com @HackRead]

A cyber incident at BAE Systems Inc. has halted US bankruptcy notices, taken federal court services offline and forced courts to change notice procedures and deadlines.

Read: https://t.co/jk4U1LdXBx

#Cybersecurity #BAESystems #Bankruptcy

[Hackread.com @HackRead]

Scammers are abusing Adobe #Frame.io alerts to share malicious PDFs that redirect recipients to fake Microsoft 365 login pages. The campaign is dubbed #PhantomPreview.

Listen/Read: https://t.co/ga6c9Y0EWJ

#Phishing #Microsoft365 #Cybersecurity

[Hackread.com @HackRead]

⚠️📢A Chinese couple has been arrested in #Japan over a phishing and credit card fraud scheme involving 480K phishing emails traced to a computer hidden behind a hotel refrigerator and connected to its Wi-Fi.

More: https://t.co/rxnraHrD1j

#Cybersecurity #Phishing #Cybercrime

[Hackread.com @HackRead]

Federal investigators suspect a US ransomware negotiator helped ShinyHunters operate its victim-extortion site. The unnamed executive is separate from Edward Dubrovsky.

Listen/Read: https://t.co/hCvfswbXdD

#Cybersecurity #ShinyHunters #Ransomware #Extortion #Cybercrime

[Hackread.com @HackRead]

⚠️📢🪝That routine meeting invite in your inbox may lead somewhere other than Microsoft Teams.

A phishing campaign has sent hundreds of thousands of fake calendar invitations designed to steal #Microsoft credentials.

More: https://t.co/3KXqsWqNNM

#Cybersecurity #Microsoft365

[Hackread.com @HackRead]

⚠️📢 An OpenAI model accessed a crypto wallet without permission and spent Sepolia test ETH to deploy smart contracts after authorized funding methods failed.

Listen/Read: https://t.co/YE5H5mrl6s

#OpenAI #AI #Crypto #Cybersecurity #HackingNews

[Hackread.com @HackRead]

Claude Code Desktop’s preview pane could let malicious HTML steal SSH keys, cloud credentials, GitHub and npm tokens. Anthropic fixed it after an initial patch was bypassed.

Listen/Read: https://t.co/0PwCdprx8y

#Cybersecurity #ClaudeCode #Vulnerability #AI

[Hackread.com @HackRead]

⚠️📢 Burger King Japan confirms a data breach exposed 11.18 million app member records, including emails, phone numbers, dates of birth and more.

Listen/Read: https://t.co/RbsPqUH7wa

#DataBreach #Cybersecurity #BurgerKing #Japan

[Hackread.com @HackRead]

⚠️📢 Targeted ads delivered Candiru mercenary spyware to #AlJazeera devices with no clicks required. Citizen Lab found the ads also reached NATO networks, but did not confirm infection.

Listen/Read: https://t.co/REUnuaCZXS

#Cybersecurity #Candiru #Spyware #NATO #CitizenLab

[Hackread.com @HackRead]

A misconfigured database linked to Vibetech exposed 13.7 million records from previous breaches, including AT&T, Casio data, the FBI employee directory, plaintext passwords, and bank details.

Listen/Read: https://t.co/Du6oseBhUf

#DataBreach #Cybersecurity #Vibetech #Privacy

[Hackread.com @HackRead]

Could AI malware spread between devices on its own? Anthropic tested model replication on Android emulators and ran another model across $55 TV boxes, showing how AI worms might work.

Listen/Read: https://t.co/9Z4pHm4qkJ

#AI #Cybersecurity #Anthropic #Malware #IoT #Android