New SessionShark Phishing Kit Bypasses MFA to Steal Office 365 Logins
SessionShark phishing kit bypasses Office 365 MFA by stealing session tokens. Experts warn of real-time attacks via fake login pages and Telegram alerts. SlashNext security…
Category: HackRead
Securing Fintech Operations Through Smarter Controls and Automation
With the rise of fintechs, accuracy alone isn’t enough, security and reliability are just as necessary. For fintech companies and digital-first organizations, standard internal controls…
Hackers Use Zoom Remote-Control to Steal Crypto
Hackers in the Elusive Comet campaign exploit Zoom’s remote-control feature to steal cryptocurrency, and over $100K lost in social engineering scam. A new cybercrime campaign…
How to Clear iPhone Storage
If your iPhone feels cramped and storage alerts show up like it’s on a schedule, it’s probably time for a cleanup. Below, we’ll go over…
Lattica Emerges from Stealth to Solve AI’s Biggest Privacy Challenge with FHE
Lattica, an FHE-based platform enabling secure and private use of AI in the cloud, has emerged from stealth. The company is backed by Konstantin Lomashuk’s…
AOA, DaVita and Bell Ambulance Breached
AOA, DaVita, and Bell Ambulance hit by ransomware in 2025. Over 245K affected as hackers steal patient data, demand ransoms, and disrupt healthcare services. This…
M&S Cyberattack Disrupts Contactless Payments and Click & Collect Services
Marks & Spencer (M&S) cyberattack disrupts contactless payments and Click & Collect; investigation launched as retailer apologises and claims to boost cybersecurity measures. British retailer…
Fake Alpine Quest Mapping App Spotted Spying on Russian Military
Fake Alpine Quest app laced with spyware was used to target Russian military Android devices, stealing location data, contacts, and sensitive files. A malicious version…
SSL.com Vulnerability Allowed Fraudulent SSL Certificates for Major Domains
An SSL.com vulnerability allowed attackers to issue valid SSL certificates for major domains by exploiting a bug in its email-based domain verification method. Internet security…
A Guide to Bluetooth Motorcycle Intercoms
There’s nothing like the freedom of the open road when you’re on a motorcycle. But staying connected while you ride can be tough. Whether it’s…
Russian Host Proton66 Tied to SuperBlack and WeaXor Ransomware
Threat actors are exploiting bulletproof hosting service Proton66 for malicious activities, including campaigns from SuperBlack ransomware operators, Android malware distribution via hacked WordPress, targeted attacks…
Microsoft Entra ID Lockouts After MACE App Flags Legit Users
Was your Microsoft Entra ID account locked? Find out about the recent widespread lockouts caused by the new MACE Credential Revocation app and a Microsoft…