Invoicely Database Leak Exposes 180,000 Sensitive Records
A large volume of private business and personal records was left exposed online after a database belonging to, or linked with, the invoicing and billing…
Category: HackRead
Auth Bypass Flaw in Service Finder WordPress Plugin Under Active Exploit
Website owners using the Service Finder WordPress theme and its bundled Bookings plugin must update their software immediately, as a serious security flaw is currently…
Stealit Malware Using Node.js to Hide in Fake Game and VPN Installers
Cybersecurity researchers at Fortinet’s FortiGuard Labs have issued a warning about an active MaaS (malware-as-a-service) operation distributing a dangerous data-stealing malware called Stealit. This malicious…
Nanoprecise partners with AccuKnox to strengthen its Zero Trust Cloud Security and Compliance Posture
Menlo Park, USA, October 10th, 2025, CyberNewsWire AccuKnox, a leader in Zero Trust Cloud Native Application Protection Platforms (CNAPP), is proud to announce that Nanoprecise…
SonicWall Says Hackers Breached All of Its Firewall Backups
In September 2025, SonicWall reported a data breach of its cloud backup service, stating that fewer than 5% of its customers were affected. At the…
Fake TikTok and WhatsApp Apps Infect Android Devices with ClayRat Spyware
Cybersecurity researchers at Zimperium’s zLabs have identified a new and fast-spreading Android spyware known as ClayRat. This spyware is actively targeting Android users, primarily those…
Discord Says Hackers Stole 70,000 ID Photos, Dismisses Extortion Claims
The popular voice and text platform Discord has confirmed a data breach incident affecting a significant number of its users who had submitted government identification…
SquareX Shows AI Browsers Fall Prey to OAuth Attacks, Malware Downloads and Malicious Link Distribution
Palo Alto, California, October 9th, 2025, CyberNewsWire As AI Browsers rapidly gain adoption across enterprises, SquareX has released critical security research exposing major vulnerabilities that…
Your Shipment Notification Is Now a Malware Dropper
New research from cybersecurity experts at Forcepoint X-Labs reveals that businesses are facing a sharp rise in email attacks where criminals are hiding malicious software…
New Chaos-C++ Ransomware Targets Windows by Wiping Data, Stealing Crypto
Cybersecurity researchers at Fortinet’s FortiGuard Labs have found that the already destructive Chaos ransomware has taken a worrying turn, becoming faster and far more aggressive…
Lightship Security and the OpenSSL Corporation Submit OpenSSL 3.5.4 for FIPS 140-3 Validation
Newark, United States, October 9th, 2025, CyberNewsWire Lightship Security, an Applus+ Laboratories company and accredited cryptographic security test laboratory, and the OpenSSL Corporation, the co-maintainer…
Fake Teams Installers Dropping Oyster Backdoor (aka Broomstick)
A major new threat is targeting everyday computer users by hiding a dangerous program inside what looks like a genuine Microsoft Teams installer. This malicious…