New Cybercrime Tool ErrTraffic Let Attackers Automate ClickFix Attacks
A dangerous cybercrime tool known as ErrTraffic has appeared in underground forums, making it easier for attackers to trick users into running harmful software on…
Author: Cybernoz
Singapore CSA warns of maximun severity SmarterMail RCE flaw
Singapore CSA warns of maximun severity SmarterMail RCE flaw Pierluigi Paganini December 31, 2025 Singapore’s CSA warns of CVE-2025-52691, a critical SmarterMail flaw enabling unauthenticated…
RondoDox botnet exploits React2Shell flaw to breach Next.js servers
The RondoDox botnet has been observed exploiting the critical React2Shell flaw (CVE-2025-55182) to infect vulnerable Next.js servers with malware and cryptominers. First documented by Fortinet in July…
DarkSpectre Hackers Infected 8.8 Million Chrome, Edge, and Firefox Users with Malware
Researchers have uncovered DarkSpectre, a well-funded Chinese threat actor responsible for infecting over 8.8 million users across Chrome, Edge, and Firefox browsers through a series…
Researchers Spot Modified Shai-Hulud Worm Testing Payload on npm Registry
Dec 31, 2026Ravie LakshmananCybersecurity / Malware Cybersecurity researchers have disclosed details of what appears to be a new strain of Shai Hulud on the npm…
Critical IBM API Connect Vulnerability Let Attackers Bypass Logins
A critical security alert regarding a severe vulnerability in the IBM API Connect platform that could allow remote attackers to bypass authentication mechanisms. Discovered during…
IBM Warns of Critical API Connect Bug Allowing Remote Authentication Bypass
Dec 31, 2026Ravie LakshmananAPI Security / Vulnerability IBM has disclosed details of a critical security flaw in API Connect that could allow attackers to gain…
Threat Actors Manipulating LLMs for Automated Vulnerability Exploitation
Large Language Models (LLMs) have revolutionized software development, democratizing coding capabilities for non-programmers. However, this accessibility has introduced a severe security crisis. Advanced AI tools,…
2 US Cybersecurity Experts Guilty of Extortion Scheme for ALPHV Ransomware – Hackread – Cybersecurity News, Data Breaches, AI, and More
Two Americans who built their careers protecting companies from online threats have admitted to doing the exact opposite. Ryan Goldberg, 40, of Georgia, and Kevin…
APT36 Malware Campaign Targeting Windows LNK Files to Attack Indian Government Entities
APT36, also known as Transparent Tribe, has launched a new malware campaign that targets Indian government and strategic entities by abusing Windows LNK shortcut files.…
30,000 Korean Air Employee Records Stolen as Cl0p Leaks Data Online – Hackread – Cybersecurity News, Data Breaches, AI, and More
In a worrying turn of events for the aviation industry, Korean Air has confirmed that the personal details of roughly 30,000 current and former employees…
AI-Powered Pentesting Tool With Claude, GPT, and Gemini models to Detect vulnerabilities
NeuroSploitv2 is an AI-powered penetration testing framework that automates critical aspects of offensive security operations through advanced language models. The framework, available on GitHub, integrates…