Hackread.com

INTERPOL’s #OperationSynergiaIII has disrupted global cybercrime infrastructure, taking down 45,000 malicious IP addresses and leading to 94 arrests in 72 countries targeting phishing, malware, and fraud networks.

Read: https://hackread.com/interpol-operation-synergia-iii-malicious-ip-94-arrest/

#Cybersecurity #CyberCrime #INTERPOL #Phishing #Malware

A 7-year-old Linux flaw dubbed #CrackArmor exposes 12.6 million systems using AppArmor. Researchers found that it can enable root access, container escape, and security bypass. Patch immediately.

Read: https://hackread.com/crackarmor-vulnerability-apparmor-linux-systems/

#Linux #CyberSecurity #AppArmor #Vulnerability

Over 200,000 #WordPress sites are exposed due to an SQL injection flaw in the Ally plugin (CVE-2026-2413), allowing attackers to extract database data. Patch released, but many sites remain vulnerable.

Read: https://hackread.com/sql-injection-vulnerability-ally-wordpress-plugin/

#CyberSecurity #SQLInjection #Vulnerability

US agencies face a CISA deadline to secure networks after a critical Cisco SD-WAN flaw (CVE-2026-20127) exposed federal systems to long-term intrusion and admin access.

Read: https://hackread.com/us-agencies-cisa-deadline-critical-cisco-sd-wan-flaw/

#CyberSecurity #Cisco #SDWAN #CISA #Vulnerability

Just In: Authorities have dismantled the #SocksEscort proxy network built on infected routers and used by cybercriminals in global fraud schemes.

Read: https://hackread.com/feds-dismantle-socksescort-proxy-network-fraud/

#CyberSecurity #Proxy #Malware #Botnet #CyberCrime

Hackers are abusing Cloudflare’s “prove you’re human” check to hide fake Microsoft 365 login pages. The verification step blocks security scanners and helps phishing sites stay online longer.

Read: https://hackread.com/hackers-cloudflare-human-check-microsoft-365-phishing/

#CyberSecurity #Microsoft365 #Phishing #Cloudflare #Scam

#BellAmbulance, Inc., a private emergency medical services company in the US, confirms a data breach impacting 237,830 individuals after unauthorized network access by hackers.

Read: https://hackread.com/bell-ambulance-confirms-data-breach/

#DataBreach #CyberSecurity #Healthcare #CyberAttack

New PixRevolution Android malware hijacks Brazil’s PIX transfers in real time, showing fake loading screens while attackers replace payment details.

Read: https://hackread.com/pixrevolution-malware-steals-brazil-pix-transfers/

#CyberSecurity #Android #PixRevolution #Malware #Brazil

Iran-linked #Handala hackers claim cyber attacks on Stryker and Verifone. Stryker confirms a network disruption while Verifone says it found no evidence of a breach. Hackers say PoC for the alleged attack is coming soon.

Read: https://hackread.com/iran-handala-hackers-verifone-stryker-hacks/

#CyberSecurity #CyberAttack #DataBreach #Stryker #Verifone #Iran

Meet #BeatBanker, a new Android Trojan that spreads through fake Google Play Store pages, and uses a silent audio loop to stay active while stealing cryptocurrency and banking data.

Read: https://hackread.com/beatbanker-android-trojan-silent-audio-loop-crypto/

#CyberSecurity #Android #Malware #Crypto

A new malware campaign called #BlackSanta is targeting HR staff with fake CV download links. The attack uses steganography and vulnerable drivers to disable security tools and search infected systems for sensitive data.

Read: https://hackread.com/blacksanta-malware-hr-staff-fake-cv-downloads/

#CyberSecurity #Malware #HR #Scam

#Microsoft’s March 2026 Patch Tuesday fixes 79 security vulnerabilities, including two publicly disclosed zero-day flaws affecting Windows, SQL Server, and .NET. Update your systems now.

Read: https://hackread.com/microsoft-march-patch-tuesday-two-0-days-flaws/

#PatchTuesday #CyberSecurity #0Day #Windows

📢⚠️ Hackers claim they breached the AI calorie-tracking app Cal AI, leaking data of over 3 million users. These claims come just days after the company acquired #MyFitnessPal.

Details: https://hackread.com/cal-ai-myfitnesspal-data-breach-3m-users/

#CyberSecurity #DataBreach #CalAI #Privacy #CyberAttack

The #ShinyHunters hacking group has issued a warning to nearly 400 organizations, threatening to leak stolen #Salesforce portal data unless ransom demands are met.

Read https://hackread.com/shinyhunters-hackers-threat-stolen-salesforce-data/

#CyberSecurity #DataBreach #CyberAttack #DataLeak

China-linked hackers targeted #Qatar using fake war news to spread PlugX backdoors and launch cyber-espionage attacks on military and energy sectors.

https://hackread.com/china-hackers-qatar-backdoor-fake-war-news/

#CyberSecurity #China #PlugX #CyberAttack #Malware

Researchers say the experimental ROME AI agent attempted to start cryptocurrency mining during training without any instructions, triggering security alerts and raising questions about monitoring autonomous AI systems.

Read more: https://hackread.com/rome-ai-agent-cryptomining-without-instructions/

#AI #ArtificialIntelligence #AgenticAI #ROMEAI #CyberSecurity

📢⚠️Watch as North Korean Lazarus hackers tried to infect #AllSecure CEO Chris Papathanasiou through a fake LinkedIn job interview. The attackers used a coding test loaded with the notorious #BeaverTail malware. 🦫

Read: https://hackread.com/fake-linkedin-interview-lazarus-hackers-allsecure-ceo/

#CyberSecurity #Lazarus #NorthKorea #LinkedIn #Scam

📢⚠️ Dutch intelligence warns Russian hackers are hijacking Signal and WhatsApp accounts using fake support bots and verification code scams worldwide now!

Read: https://hackread.com/dutch-intel-russia-hackers-hijack-signal-whatsapp-attacks/

#CyberSecurity #CyberCrime #Russia #Signal #WhatsApp

A fake #CleanMyMac website is tricking Mac users into pasting a Terminal command that installs a new SHub Stealer. The #ClickFix attack steals Keychain credentials and backdoors crypto wallets like Exodus, Ledger, and Trezor.

Read: https://hackread.com/fake-cleanmymac-site-clickfix-shub-stealer-macos/

#macOS #CyberSecurity #Malware #Infostealer

Iran's MuddyWater hackers breached US organizations and an Israeli department of a software firm using phishing and a new backdoor dubbed #Dindoor - All this, despite the ongoing conflict.

Read: https://hackread.com/iran-muddywater-hackers-us-dindoor-backdoor/

#CyberSecurity #Iran #Israel #US #MuddyWater #Malware

📢⚠️🕵️ Watch out as hackers are using a new cloaking platform called #1Campaign to bypass Google Ads review systems and run malicious campaigns that redirect victims to phishing and crypto scam sites.

Details: https://hackread.com/hackers-1campaign-hide-malicious-ads-google-reviewers/

#CyberSecurity #GoogleAds #Malvertising #Phishing #CyberCrime

📢🤖 Researchers uncover #AeternumC2, a new botnet that uses the Polygon blockchain to send commands, making law enforcement takedowns far harder by removing central servers.

Full details: https://hackread.com/aeternum-c2-botnet-polygon-blockchain/

#CyberSecurity #Botnet #Blockchain #Polygon #DDoS

📢🪝Watch out as scammers are cloning Avast’s website to push fake €499 charges and steal credit card details using urgency tricks, live chat, and realistic payment checks.

#CyberSecurity #Phishing #Scam #Avast #Malware

Read: https://hackread.com/fake-avast-website-phishing-refund-scam/

📢📧🤖 New research shows how Entra ID OAuth consent can grant apps like ChatGPT access to emails, highlighting hidden security risks tied to permission approvals.

Read more: https://hackread.com/entra-id-oauth-consent-chatgpt-emails-access/

#CyberSecurity #OAuth #EntraID #ChatGPT #Infosec

📢🔓 New report reveals that just 1% of security flaws drive most real-world cyberattacks, with zero-days, ransomware gangs, and AI-generated exploit noise accelerating risk.

Read more: https://hackread.com/1-security-flaws-drive-cyberattacks-2025-report/

#CyberSecurity #Vulnerability #0Day #Ransomware #Infosec

📢⚖️🏛 US sanctions Russian exploit broker #OperationZero after an insider sold stolen US cyber tools, exposing a global exploit market targeting national security systems.

#CyberSecurity #Sanctions #CyberCrime #NationalSecurity

Read: https://hackread.com/us-sanctions-russian-exploit-broker-us-cyber-tools/

New: #ShinyHunters hacker group claims 21 million records stolen from Dutch telecom Odido NL and its sub brand Ben as company confirms cyberattack affecting customer data.

Read: https://hackread.com/shinyhunters-odido-nl-ben-nl-breach-confirm-cyberattack/

#CyberSecurity #DataBreach #Odido #Telecom #CyberAttack

📢⚠️📱New Android malware ‘Oblivion’ sold for $300/month uses fake Google Play update prompts to hijack phones, steal passwords and bank codes, and stay hidden from antivirus tools.

Read: https://hackread.com/android-malware-oblivion-fake-updates-hijack-phones/

#Android #CyberSecurity #Malware #Oblivion #Trojan

📢⚠️🔒 The North Korean state-backed Lazarus Group is now using the Medusa ransomware operation to carry out global extortion attacks, according to Symantec.

#NorthKorea #Lazarus #Medusa #Ransomware #CyberSecurity

Read: https://hackread.com/north-korean-lazarus-group-medusa-ransomware/

📢⚠️ 🤖 #Anthropic says Chinese AI firms, including DeepSeek, MoonshotAI, and MiniMax, created thousands of accounts and ran millions of queries to distill #Claude’s capabilities into their own models.

#AI #GenAI #DeepSeek #CyberSecurity #China

Read: https://hackread.com/anthropic-china-ai-firms-distilled-claude-train-models/

📢⚠️ 🤖 #Amazon Threat Intel says a low-skill hacker used commercial AI tools to breach hundreds of #FortiGate devices worldwide, showing how automation is lowering the barrier for large-scale cyberattacks.

Read more: https://hackread.com/amazon-hacker-ai-tools-breach-fortigate-devices/

#CyberSecurity #AI #CyberAttack #CyberCrime #Automation

📢 ⚖️ Romanian man extradited to the US has admitted hacking into an #Oregon state government network and selling access to other victims, contributing to at least $250K in losses.

Read: https://hackread.com/romanian-hacker-extradited-us-hacking-oregon-state/

#Cybercrime #Hacking #Romania #DataBreach #CyberSecurity

📢⚠️ New #ZeroDayRAT malware is being sold on Telegram, targeting Android and iOS devices with real-time monitoring, location tracking, surveillance and crypto theft tools.

Read: https://hackread.com/zerodayrat-malware-monitoring-android-ios-devices/

#Cybersecurity #Malware #Android #iOS #MaaS #Spyware

📢⚠️ Researchers uncover multiple zero-day PDF platform flaws enabling XSS and one-click attacks that can let hackers run malicious code simply by opening a file.

Read: https://hackread.com/zero-day-flaws-pdf-platforms-xss-one-click-attacks/

#CyberSecurity #ZeroDay #Vulnerability #PDF #Infosec #XSS

📢⚠️ #PayPal confirms a loan system error exposed sensitive user data for nearly six months. Passwords reset, and affected customers notified after personal and business details were left accessible.

#DataBreach #CyberSecurity #FintechSecurity #Privacy

Read: https://hackread.com/paypal-confirms-loan-system-error-data-exposure/

📢⚠️ Hackers are exploiting an old Excel vulnerability to spread XWorm 7.2 malware hidden in JPEG files disguised as invoices. The attack steals passwords and Wi-Fi keys and grants remote access to infected PCs.

Read: https://hackread.com/hackers-excel-exploit-xworm-7-2-jpeg-files-hijack-pcs/

#CyberSecurity #Malware #Phishing #XWorm #MicrosoftExcel

📢⚠️ Hackers hid a #PulsarRAT inside a PNG image and slipped it into NPM using a typosquatted package. The malware uses steganography, process hollowing, and AV evasion to gain full system control.

Read: https://hackread.com/hackers-pulsar-rat-png-images-npm-supply-chain-attack/

#CyberSecurity #Malware #SupplyChainAttack #NPM

📢⚠️ New ClickFix attack uses fake CAPTCHA pages to trick users into running PowerShell malware. The infostealer targets crypto wallets, 25+ browsers, gaming accounts, and VPN data.

Read: https://hackread.com/clickfix-attack-crypto-wallets-browsers-infostealer/

#CyberSecurity #Malware #Infostealer #ClickFix #Captcha

📢⚠️ #China-linked hackers are exploiting a critical Dell RecoverPoint flaw to deploy GrimBolt malware, targeting backup and recovery infrastructure.

Details: https://hackread.com/china-hackers-dell-recoverpoint-flaw-grimbolt-malware/

#CyberSecurity #Dell #Vulnerability #GrimBolt #Malware

📢⚠️ Infostealer malware now targeting AI identity and memory files, researchers find #OpenClaw data theft exposing a user’s digital blueprint.

Read: https://hackread.com/infostealer-steal-openclaw-ai-identity-memory-files/

#CyberSecurity #Malware #Infostealer #Malware #AI

Firebase misconfiguration exposes 300M AI chat messages from 25 million Chat & Ask AI users, showing how a simple backend mistake can put millions of private conversations at risk.

Read: https://hackread.com/firebase-misconfiguration-chat-ask-ai-users-expose/

#CyberSecurity #DataBreach #AI #Privacy #Firebase

📢⚠️ Hackers are hijacking PCs using fake Social Security emails that disable Windows protections and install #ScreenConnect as a remote access backdoor.

Read more: https://hackread.com/hackers-screenconnect-hijack-pcs-fake-social-security-emails/

#CyberSecurity #Malware #Windows #RAT #CyberAttack

📢⚠️ Hackers are abusing hijacked Google Ads and fake Claude AI guides in a new #ClickFix attack targeting Mac users. Victims are tricked into pasting malicious Terminal commands that install #MacSync infostealer malware.

Read more: https://hackread.com/google-ads-claude-ai-macsync-malware-clickfix/

#CyberSecurity #macOS #Malware #GoogleAds #ClaudeAI

📢⚠️ 287 #Chrome extensions disguised as useful tools were caught harvesting browsing histories from 37.4M users, sending sensitive data to trackers, brokers, and major firms.

Read: https://hackread.com/chrome-extensions-harvest-browsing-data-37m-users/

#CyberSecurity #Browser #Extensions #Privacy

📢⚠️ Cyberattack hits European Commission staff mobile management systems, officials confirm. CERT-EU contained the breach within nine hours, and no devices were compromised.

Read: https://hackread.com/cyber-attack-european-commission-staff-mobile-systems/

#Cybersecurity #CyberAttack #EuropeanCommission #DataBreach #EU