Category: TheHackerNews

Swapping Crypto Addresses
10
Apr
2025

Malicious npm Package Targets Atomic Wallet, Exodus Users by Swapping Crypto Addresses

Apr 10, 2025Ravie LakshmananMalware / Cryptocurrency Threat actors are continuing to upload malicious packages to the npm registry so as…

Breach Western Military
10
Apr
2025

Gamaredon Uses Infected Removable Drives to Breach Western Military Mission in Ukraine

Apr 10, 2025Ravie LakshmananCyber Espionage / Malware The Russia-linked threat actor known as Gamaredon (aka Shuckworm) has been attributed to…

Identities Behind AI Agents
10
Apr
2025

A Deep Dive Into AI & NHI

Apr 10, 2025The Hacker NewsAI Security / Enterprise Security AI agents have rapidly evolved from experimental technology to essential business…

CTM360 Uncovers a Play Masquerading Party
10
Apr
2025

CTM360 Uncovers a Play Masquerading Party

Overview of the PlayPraetor Masquerading Party Variants CTM360 has now identified a much larger extent of the ongoing Play Praetor…

Europol Arrests Five SmokeLoader Clients
10
Apr
2025

Europol Arrests Five SmokeLoader Clients Linked by Seized Database Evidence

Law enforcement authorities have announced that they tracked down the customers of the SmokeLoader malware and detained at least five…

OpenAI-Generated Spam
10
Apr
2025

AkiraBot Targets 420,000 Sites with OpenAI-Generated Spam, Bypassing CAPTCHA Protections

Apr 10, 2025Ravie LakshmananWebsite Security / Cybercrime Cybersecurity researchers have disclosed details of an artificial intelligence (AI) powered platform called…

Lovable AI VibeScamming
09
Apr
2025

Lovable AI Found Most Vulnerable to VibeScamming — Enabling Anyone to Build Live Scam Pages

Lovable, a generative artificial intelligence (AI) powered platform that allows for creating full-stack web applications using text-based prompts, has been…

TCESB Malware
09
Apr
2025

New TCESB Malware Found in Active Attacks Exploiting ESET Security Scanner

Apr 09, 2025Ravie LakshmananWindows Security / Vulnerability A Chinese-affiliated threat actor known for its cyber-attacks in Asia has been observed…

Non-Human Identities
09
Apr
2025

Explosive Growth of Non-Human Identities Creating Massive Security Blind Spots

Apr 09, 2025The Hacker NewsSecrets Management / DevOps GitGuardian’s State of Secrets Sprawl report for 2025 reveals the alarming scale…

Hard-Coded MachineKey Vulnerability
09
Apr
2025

CISA Warns of CentreStack’s Hard-Coded MachineKey Vulnerability Enabling RCE Attacks

Apr 09, 2025Ravie LakshmananApplication Security / Vulnerability The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a critical…

Windows CLFS Zero-Day Vulnerability to Deploy Ransomware
09
Apr
2025

PipeMagic Trojan Exploits Windows Zero-Day Vulnerability to Deploy Ransomware

Apr 09, 2025Ravie LakshmananVulnerability / Ransomware Microsoft has revealed that a now-patched security flaw impacting the Windows Common Log File…

Windows CLFS Vulnerability
09
Apr
2025

Microsoft Patches 126 Flaws Including Actively Exploited Windows CLFS Vulnerability

Apr 09, 2025Ravie LakshmananEndpoint Security / Vulnerability Microsoft has released security fixes to address a massive set of 126 flaws…