FBI Disrupts Russian Router Hacking Campaign
The US Department of Justice (DoJ) and the FBI have officially disrupted a major cyberespionage campaign run by Russian military intelligence. As per the DoJ’s…
Category: HackRead
New ClickFix Attack Uses Node.js Malware via Tor to Steal Crypto
We’ve all done it- clicked a box to prove we’re not a robot without thinking twice. But according to the latest research from Netskope Threat…
GrafanaGhost Vulnerability Allows Data Theft via AI Injection
Article updated with a statement from Grafana Labs. Cybersecurity researchers at the firm Noma Security have identified a serious vulnerability named GrafanaGhost. This flaw affects…
Hackers Pose as Non-Profit Developers to Deploy Monero Mining Malware
Since at least late 2023, a group of hackers known as REF1695 has been running a quiet but highly profitable cryptomining operation by hiding malware…
AI Agents and Non-Human Identities Creating Critical Security Gaps, Report
Businesses are rushing to adopt automation, but they are leaving a significant security gap in their infrastructure as new data suggests this technological race is…
Why Security Researchers and Red Teams Are Turning to Workflow Automation
There’s a quiet change happening in security operations that doesn’t make headlines the way a fresh zero-day does – but its impact on how defenders…
Missile Alert Phishing Exploits Iran-US-Israel Conflict for Microsoft Logins
The way wars are fought today has changed, and our smartphones have become part of the battle. Hackers always want to cash in on political…
Cloudflare Targets WordPress With New AI-Powered EmDash CMS
Technology and website security giant Cloudflare has launched EmDash CMS, a new content management system designed to challenge the dominance of WordPress. While WordPress currently…
North Korean Hackers Pose as Trading Firm to Steal $285M from Drift
Drift Protocol reveals that a North Korean state-linked group spent six months posing as a trading firm to execute a $285 million hack. Read about…
LinkedIn Tracks 6,000+ Browser Extensions on Users’ PCs
A major controversy has broken out involving LinkedIn, the popular professional networking site. According to an investigation named BrowserGate, the Microsoft-owned platform is allegedly using…
UNC1069 Targets Node.js Maintainers via Fake LinkedIn, Slack Profiles
A coordinated group of hackers is currently targeting Open Source Maintainers, particularly those managing Node.js and npm, following a high-profile attack on the popular Axios…
AI Firm Mercor Confirms Breach as Hackers Claim 4TB of Stolen Data
Following a compromise of the open-source tool LiteLLM, AI firm Mercor reports a security incident. Learn how hacking groups TeamPCP and Lapsus$ allegedly accessed sensitive…