Vidar Infostealer Spreads via Fake CAPTCHAs, Hides in JPEG and TXT Files
New research from the Lat61 Threat Intelligence Team at Point Wild reveals that hackers are now hiding malicious code inside everyday files like JPEG images…
Category: HackRead
Microsoft Entra Agent ID Flaw Enabled Tenant Takeover via Privilege Escalation
Cybersecurity researchers at the identity protection firm Silverfort found a vulnerability in a Microsoft platform built to manage AI. The issue involved Microsoft Entra Agent…
Fake CAPTCHA Pages Exploit Clicks to Send Costly International Texts
Network security firm Infoblox has disclosed details on a long-running fraud operation that has been quietly draining bank accounts since at least June 2020. This…
New ClickFix attack Hides in Native Windows Tools to Reduce Detection Risk
A new ClickFix attack campaign uses fake CAPTCHA pages to trick users into running malicious commands. Learn how hackers use cmdkey and regsvr32 to maintain…
TeamPCP Hijacks Bitwarden CLI, Uses Dependabot to Deploy Shai-Hulud Malware
On April 20, 2026, at around 5:00 pm CET, the coding world was alerted after a widely used tool called @bitwarden/cli was found to be…
French Police Arrest HexDex Hacker Over Mass Data Theft and Leaks
French police have arrested a 20-year-old male suspected of alleged data exfiltration from dozens of websites and stealing private information. The man, known by his…
Harvester APT Expands Spying Operations with New GoGra Linux Malware
A nation-state-backed Advanced Persistent Threat (APT) group identified as Harvester has, reportedly, developed a new, malicious backdoor called GoGra to spy on Linux computers across…
Hackers Use Hidden Website Instructions in New Attacks on AI Assistants
Threat actors are now using a method called Indirect Prompt Injection (IPI) to trick Large Language Models (LLMs) by hiding secret commands on ordinary websites,…
Grinex crypto exchange shuts down, blames Western agencies for $13.7M breach
A Kyrgyzstan-based crypto exchange, Grinex, went offline last Thursday, 16 April, suspending all operations after becoming the victim of a security breach that left a…
Mustang Panda Hits India and S. Korea with Updated LOTUSLITE Backdoor
A group of China-linked hackers known as Mustang Panda has expanded its spying efforts to target the Indian financial sector and political circles in South…
Discord-Linked Group Accessed Anthropic’s Claude Mythos AI in Vendor Breach
Two weeks after Anthropic announced Claude Mythos Preview (aka Claude Mythos and Mythos AI) as part of its Project Glasswing initiative, the company is investigating…
K2view vs Broadcom For Test Data Management
If your organization develops software or runs quality assurance (QA) processes, a reliable test data management (TDM) solution is essential – without one, systems slow…