Category: HackRead

Lab Breach Tied to Planned Parenthood Compromises 1.6M Records
14
Apr
2025

Data Breach at Planned Parenthood Lab Partner Exposes Info of 1.6M

Data breach at Laboratory Services Cooperative (LSC) exposed the sensitive health and personal information of 1.6 million individuals linked to…

SaaS Security Essentials: Reducing Risks in Cloud Applications
11
Apr
2025

Reducing Risks in Cloud Applications

As organizations increasingly rely on SaaS applications to run their operations, securing them has become a necessity. Without strong protection,…

Russia’s Storm-2372 Hits Orgs with MFA Bypass via Device Code Phishing
11
Apr
2025

Russia’s Storm-2372 Hits Orgs with MFA Bypass via Device Code Phishing

Russian APT group Storm-2372 employs device code phishing to bypass Multi-Factor Authentication (MFA). Targets include government, technology, finance, defense, healthcare….

BentoML Vulnerability Allows Remote Code Execution on AI Servers
11
Apr
2025

BentoML Vulnerability Allows Remote Code Execution on AI Servers

TL;DR: A critical deserialization vulnerability (CVSS 9.8 – CVE-2025-27520) in BentoML (v1.3.8–1.4.2) lets attackers execute remote code without authentication. Discovered…

npm Malware Targets Atomic and Exodus Wallets to Hijack Crypto Transfers
11
Apr
2025

npm Malware Targets Atomic and Exodus Wallets to Hijack Crypto Transfers

TL;DR – ReversingLabs has identified a malicious npm package, “pdf-to-office,” that targets Atomic and Exodus crypto wallet users by silently…

Google Eyes User Browsing Data Search in New Patent Filing
10
Apr
2025

Google Eyes User Browsing Data Search in New Patent Filing

TL;DR – Google has filed a patent for a system that lets users search their personal digital history, including web…

Protecting Your Business on the Move: A Modern Security Guide
10
Apr
2025

Protecting Your Business on the Move: A Modern Cybersecurity Guide

Stay secure on the move. Protect your devices, data, and privacy with smart habits, reliable gear, updated software and proper…

Smokeloader Users Identified and Arrested in Operation Endgame
10
Apr
2025

Smokeloader Users Identified and Arrested in Operation Endgame

TL;DR: The hammer’s coming down not just on malware creators but the users funding them. If you paid to compromise…

Hacker Claims WooCommerce Data Breach, Selling 4m User Records
10
Apr
2025

Hacker Claims WooCommerce Data Breach, Selling 4m User Records

A hacker using the alias “Satanic” claims a WooCommerce data breach via a third party, selling data on over 4.4…

New AkiraBot Abuses OpenAI API, Spammed 400K Sites with Fake SEO
09
Apr
2025

New AkiraBot Abuses OpenAI API to Spam Website Contact Forms

Cybersecurity researchers have identified a new spam campaign driven by ‘AkiraBot,’ an AI-powered bot that targets small business websites with…

Hackers Claim Magento Breach via Third-Party, Leak CRM Data of 763K Users
09
Apr
2025

Hackers Claim Magento Breach via Third-Party, Leak CRM Data of 700K Users

A hacker using the alias “Satanic” claims Magento breach via third-party, leaks CRM data of more than 700,000 users, including…

Gcore Super Transit Brings Advanced DDoS Protection and Acceleration for Superior Enterprise Security and Speed
09
Apr
2025

Gcore Super Transit Brings Advanced DDoS Protection and Acceleration for Superior Enterprise Security and Speed

Luxembourg, Luxembourg, April 9th, 2025, CyberNewsWire Gcore, the global edge AI, cloud, network, and security solutions provider, has launched Super…