RondoDox Botnet spreads miners and malware
React2Shell under attack: RondoDox Botnet spreads miners and malware Pierluigi Paganini January 01, 2026 RondoDox botnet exploits the critical React2Shell flaw (CVE-2025-55182) to infect vulnerable…
Month: January 2026
WhatsApp Crypt Tool to Encrypt and Decrypt WhatsApp Backups
An open-source solution for handling encrypted WhatsApp backups. The wa-crypt-tools suite, hosted on GitHub, decrypts and encrypts .crypt12, .crypt14, and .crypt15 files from WhatsApp and…
RondoDox Botnet Exploits Critical React2Shell Flaw to Hijack IoT Devices and Web Servers
Jan 01, 2026Ravie LakshmananNetwork Security / Vulnerability Cybersecurity researchers have disclosed details of a persistent nine-month-long campaign that has targeted Internet of Things (IoT) devices…
Two U.S. CyberSecurity Pros Plead Guilty for Working as ALPHV/BlackCat Affiliates
A federal court in the Southern District of Florida has accepted guilty pleas from two cybersecurity professionals who used their expertise to conduct ransomware attacks…
Three spyware-linked executives removed from US sanctions list
US president Donald Trump’s administration has lifted sanctions on three executives tied to the spy software consortium Intellexa, according to a notice published to the…
NYC mayoral inauguration bans Flipper Zero, Raspberry Pi devices
New York City’s 2026 mayoral inauguration of Zohran Mamdani has published a list of banned items for the event, specifically prohibiting the Flipper Zero and…
Hacker Claims European Space Agency Breach, Selling 200GB of Data – Hackread – Cybersecurity News, Data Breaches, AI, and More
A hacker using the alias 888 is claiming responsibility for a major data breach affecting the European Space Agency (ESA), alleging theft of more than…
APT36 Targets Indian Government Systems Using Malicious Windows LNK Files
A sophisticated cyber-espionage operation attributed to APT36, also known as Transparent Tribe, has been identified targeting Indian governmental, academic, and strategic entities through weaponized Windows…
Critical Apache StreamPipes Flaw Allows Attackers to Take Over Admin Accounts
Apache StreamPipes has released an urgent security advisory addressing CVE-2025-47411, a critical privilege escalation vulnerability affecting versions 0.69.0 through 0.97.0. The flaw allows attackers with…
Two U.S. Cybersecurity Professionals Plead Guilty to Acting as ALPHV/BlackCat Affiliates
A federal district court in the Southern District of Florida accepted guilty pleas from two cybersecurity professionals who turned their expertise against the businesses they…