wolfSSL Vulnerability Hits IoT, Routers and Military Systems, Update Now!
A major vulnerability (CVE-2026-5194) has been found in the wolfSSL library, impacting 5 billion devices, including routers, IoT gadgets, and military systems. Learn how this…
Category: HackRead
Booking.com Confirms Data Breach as Hackers Access Customer Details
Booking.com has begun contacting customers after confirming that a third party accessed parts of its reservation data. The company is describing the incident as a…
Alleged German DDoS-for-Hire Kingpin Behind Fluxstress Caught in Thailand
Noah Christopher, a German national, was at his luxury flat in Thong Lor Soi 25 when he was arrested by Thai police last Friday. Christopher,…
The Rise of Ghost APIs
Key Takeaways Ghost APIs are deprecated endpoints that remain live and accessible; policy says dead, reality says otherwise. Unlike Shadow APIs (unknown to the org),…
OpenAI Rotates macOS Certificates Following Axios Supply Chain Breach
OpenAI has rotated the code-signing certificates for its Mac applications after a supply chain attack compromised a software library called Axios. The issue was detected…
BITTER APT Uses Signal, Google, and Zoom Lures to Spread ProSpy Spyware
An ongoing spying operation has been discovered, specifically targeting journalists and opposition politicians across the Middle East. Researchers from the digital rights group Access Now…
OpenSSF Flags Malware Campaign on Slack Posing as Linux Foundation Figures
Open Source Security Foundation (OpenSSF), a group of open source software security specialists, is warning about a new phishing scam where hackers are targeting software…
FBI Atlanta and Indonesian National Police Take Down W3LLSTORE Phishing Market
The FBI Atlanta Field Office and the Indonesian National Police have taken down a global phishing operation tied to more than $20 million in attempted…
Hacker Used Claude Code, GPT-4.1 to Exfiltrate Hundreds of Millions of Mexican Records
A single hacker recently managed to compromise nine different Mexican government agencies by exploiting two popular AI platforms. This finding comes from the research firm Gambit…
FBI Recovers Deleted Signal Messages Through iPhone Notifications
The FBI successfully recovered private Signal messages from a defendant’s iPhone even after the app was deleted. Learn how this security loophole works and the…
Google Chrome Update Disrupts Infostealer Cookie Theft
Google has launched a new security feature for Chrome on Windows to prevent session theft by hackers. This update, called Device Bound Session Credentials (DBSC),…
ShinyHunters Claims Rockstar Games Snowflake Breach via Anodot
Rockstar Games is back in the news, not over Grand Theft Auto VI delays, but because the ShinyHunters hacking group claims it accessed the company’s…