Curl ending bug bounty program after flood of AI slop reports
The developer of the popular curl command-line utility and library announced that the project will end its HackerOne security bug bounty program at the end…
Latest Cybersecurity News — Page 1118
View all →
Hackers Hijacking Snap Domains to Posion Linux Software Packages for Desktops and Servers
Security vulnerabilities in the Canonical Snap Store have reached a critical level as attackers continue to distribute malicious software through the popular Linux package repository.…
JA3 Fingerprinting Tool Exposes Attackers’ Infrastructure
JA3 fingerprinting, long dismissed as outdated technology, is experiencing a resurgence as security teams discover its practical value in identifying and tracking malicious infrastructure with…
Google to Pay $8.25M Settlement Over Child Data Tracking in Play Store – Hackread – Cybersecurity News, Data Breaches, AI, and More
Is your child’s data safe? Google settles for $8.25M over claims it tracked kids under 13 without parental consent. See if your family is eligible…
JPMorgan CEO urges slowdown of AI roll-out to ‘save society’
JPMorgan CEO Jamie Dimon warns that the rapid roll-out of artificial intelligence (AI) throughout society will cause “civil unrest” unless governments and companies work together…
Proxyware Malware Disguised as Notepad++ Tool Leverages Windows Explorer Process to Hijack Systems
A sophisticated malware campaign targeting unsuspecting users has emerged, disguising malicious proxyware as legitimate Notepad++ installations. This attack, orchestrated by the threat actor Larva-25012, exploits…
Hackers Exploit Snap Domains to Inject Malicious Code into Linux Software Packages
Snaps are compressed, cryptographically signed, revertable software packages for Linux desktops, servers, and embedded devices. A sophisticated campaign targeting Canonical’s Snap Store has escalated dramatically,…
Researchers find Jordan government used Cellebrite phone-cracking tech against activists
Jordanian authorities used Cellebrite phone-cracking technology to access the devices of domestic activists and human rights defenders and then extract information from them, according to…
Attackers Reverse‑Engineer Patch to Exploit SmarterMail Admin Bypass in the Wild
A critical authentication bypass vulnerability in SmarterTools SmarterMail is actively being exploited in the wild by attackers, according to security researchers at watchTowr Labs. The…
ICE Agents Are ‘Doxing’ Themselves
Last week, a website called ICE List went viral after its creators said that they had received what they described as a leak of personal…
Multi-Stage Scheme Steals Data, Triggers UPI Payments
A sophisticated multi-stage phishing campaign is actively targeting PNB MetLife Insurance customers through fake payment gateway pages. The attack chain extracts customer details, forces fraudulent…
Hackers Are Using LinkedIn DMs and PDF Tools to Deploy Trojans – Hackread – Cybersecurity News, Data Breaches, AI, and More
ReliaQuest Threat Research has identified a new phishing campaign on LinkedIn that tricks professionals into downloading malicious files. Using DLL side-loading, attackers hide viruses inside…