Reducing Risks in Cloud Applications
As organizations increasingly rely on SaaS applications to run their operations, securing them has become a necessity. Without strong protection, sensitive data, user access, and…
Category: HackRead
Russia’s Storm-2372 Hits Orgs with MFA Bypass via Device Code Phishing
Russian APT group Storm-2372 employs device code phishing to bypass Multi-Factor Authentication (MFA). Targets include government, technology, finance, defense, healthcare. Cybersecurity researchers at SOCRadar have…
BentoML Vulnerability Allows Remote Code Execution on AI Servers
TL;DR: A critical deserialization vulnerability (CVSS 9.8 – CVE-2025-27520) in BentoML (v1.3.8–1.4.2) lets attackers execute remote code without authentication. Discovered by Checkmarx Zero. Upgrade to…
npm Malware Targets Atomic and Exodus Wallets to Hijack Crypto Transfers
TL;DR – ReversingLabs has identified a malicious npm package, “pdf-to-office,” that targets Atomic and Exodus crypto wallet users by silently patching local software to hijack…
Google Eyes User Browsing Data Search in New Patent Filing
TL;DR – Google has filed a patent for a system that lets users search their personal digital history, including web activity and emails, using natural…
Protecting Your Business on the Move: A Modern Cybersecurity Guide
Stay secure on the move. Protect your devices, data, and privacy with smart habits, reliable gear, updated software and proper cybersecurity knowledge wherever you work.…
Smokeloader Users Identified and Arrested in Operation Endgame
TL;DR: The hammer’s coming down not just on malware creators but the users funding them. If you paid to compromise others, your info might’ve been…
Hacker Claims WooCommerce Data Breach, Selling 4m User Records
A hacker using the alias “Satanic” claims a WooCommerce data breach via a third party, selling data on over 4.4 million users/clients, including records tied…
New AkiraBot Abuses OpenAI API to Spam Website Contact Forms
Cybersecurity researchers have identified a new spam campaign driven by ‘AkiraBot,’ an AI-powered bot that targets small business websites with customized promotional messages. AkiraBot, a…
Hackers Claim Magento Breach via Third-Party, Leak CRM Data of 700K Users
A hacker using the alias “Satanic” claims Magento breach via third-party, leaks CRM data of more than 700,000 users, including emails, phone numbers, and company…
Gcore Super Transit Brings Advanced DDoS Protection and Acceleration for Superior Enterprise Security and Speed
Luxembourg, Luxembourg, April 9th, 2025, CyberNewsWire Gcore, the global edge AI, cloud, network, and security solutions provider, has launched Super Transit, a cutting-edge DDoS protection…
Geofenced Phishing Attacks Target LATAM
A new phishing campaign is targeting users across Latin America, and at the center of it is Grandoreiro, a banking trojan known for stealing sensitive…