Why GitHub Developers Are Targeted by Token Giveaway Scams
GitHub used to feel like one of the calmer parts of the internet. It was mostly about code, collaboration, version control, and the quiet satisfaction…
Category: HackRead
Storm Infostealer Sold as Service, Targets Browsers, Wallets and Accounts
New research from Varonis Threat Labs reveals Storm infostealer, a malicious subscription service that bypasses Google Chrome encryption. Learn how this tool uses server-side decryption…
ShinyHunters Hackers Claim Theft of 3M+ Cisco Records, Threaten Public Leak
The threat group known as ShinyHunters has issued what it calls a final warning to Cisco (Cisco Systems, Inc.), setting a deadline of April 3,…
Microsoft Warns of WhatsApp Attachments Spreading Backdoor on Windows PCs
Microsoft Defender Security Research Team is warning the public about a new social engineering scam that has been targeting users since late February 2026. The…
Yurei Ransomware Uses Common Tools, Adds Stranger Things References
A new extortion campaign involving the Yurei ransomware toolkit has been detected by the research firm Team Cymru. The group behind this campaign first appeared…
ImageMagick Zero-Day Enables RCE on Linux and WordPress Servers
A widespread security crisis has hit ImageMagick, the ubiquitous, highly popular software tool used by millions of websites to process and resize images. This discovery,…
Anthropic Leaks 512,000 Lines of Claude AI Code in Major Blunder
In what is being described as a massive strategic blow, the AI powerhouse Anthropic accidentally leaked the secret blueprints for its highly profitable coding tool,…
Apple Pushes Rare iOS 18 Patch for Devices at Risk from DarkSword Exploit
Apple is taking an unusual step to protect older iPhones, confirming it will push a security update to devices still running iOS 18 to block…
LinkedIn Phishing Scam Uses Fake Notifications to Hijack Accounts
A new phishing campaign uses fake LinkedIn notifications to hijack professional accounts. Research from Cofense PDC reveals how spoofed domains like inedin.digital are used to…
Ransomware Groups Exploit Legit IT Tools to Bypass Antivirus
New research from Seqrite explains the ‘dual-use dilemma,’ where ransomware attackers repurpose legitimate IT tools like IOBit Unlocker and Process Hacker. Learn how these trusted…
Critical F5 BIG-IP Flaw Upgraded to 9.8 RCE, Exploited in the Wild
Cybersecurity researchers at F5 have issued an urgent warning regarding a severe security flaw affecting their BIG-IP APM systems. Originally, the issue was dismissed as…
Hackers Poison Axios npm Package with 100 Million Weekly Downloads
Check your system for Axios npm Package versions 1.14.1 and 0.30.4 and remove them immediately to prevent data theft. Modern web development relies heavily on…