@HackRead

The Twitter account of the most reliable cybersecurity news platform brings exclusive dark web, tech, hacking news, and much more. Contact: [email protected].

 United Kingdom
hackread.com
Joined November 2011
  • Tweets34.6K
  • Following106
  • Followers114K
4.2KMedia
Microsoft’s emergency .NET updates fix a Brotli memory flaw and a Linux privilege escalation. They also correct two incomplete patches issued earlier this month. Listen/Read: hackread.com/microsoft-issue… #Cybersecurity #Microsoft #Brotli #Vulnerbaility #Linux

Microsoft Issues Emergency .NET Fixes for Brotli Flaw and Linux Privilege Escalation

Microsoft releases emergency .NET updates to fix a Brotli memory flaw and Linux privilege escalation, while correcting two incomplete October security patches.

hackread.com
1
1
375
⚠️📢 A Teams message from “IT support” could be an attacker asking for remote access to your PC, as researchers have reviewed 400+ recent incidents involving external chats used to gain a foothold. Listen/Read: hackread.com/hackers-abuse-m… #Cybersecurity #MicrosoftTeams #Phishing

Hackers Abuse Microsoft Teams External Chats to Access Corporate PCs

Hackers impersonate IT support in Microsoft Teams external chats, tricking employees into granting remote access and installing malware on corporate computers.

hackread.com
5
499
After hackers spoiled food at French supermarkets, researchers found 12,976 refrigeration services exposed online in 99 countries, warning that compromised controls could put food and medicines at risk. Listen/Read: hackread.com/refrigeration-c… #Cybersecurity #IoT #Vulnerability

12,976 Refrigeration Controls Found Exposed Online in 99 Countries

Forescout found 12,976 exposed refrigeration services in 99 countries, warning that attackers could alter temperatures and spoil food, medicines and supplies.

hackread.com
1
7
1,275
Hackread.com retweeted
Hackread.com@HackReadOct 24
Even an air-gapped PC, isolated from external networks, can leak secrets as the new #SPECTER technique uses USB power changes to transmit data after malware gains administrator access. Listen/Read: hackread.com/specter-usb-pow… #Cybersecurity #AirGapped #USB

SPECTER Attack Uses USB Power Signals to Leak Data From Air-Gapped PCs

Researchers demonstrated SPECTER, a technique that leaks data from compromised air-gapped PCs through USB power controls, phone charging changes and peripherals.

hackread.com
1
2
4
1,505
Eight CA private keys were so weak they could be recovered in under a second. Following the incident, eMudhra has announced it will leave the global SSL/TLS certificate business. Listen/Read: hackread.com/emudhra-exit-ss… #Cybersecurity #eMudhra #India #SSL #TLS

eMudhra to Exit SSL/TLS Market After 8 CA Keys Found Easily Guessable

eMudhra will leave the global SSL/TLS certificate market after eight intermediate CA private keys were found easily guessable, prompting browser distrust actions.

hackread.com
1
4
1,037
⚠️📢🤖 A magnetic tag hidden under a label can fool a robot’s sense of touch. Researchers’ video demos show PhantomTac making robots drop, crush or topple objects without software access. Listen/Read: hackread.com/phantomtac-atta… #Cybersecurity #Robotics #PhantomTac #Technology

PhantomTac Attack Tricks Robots Into Dropping or Crushing Objects

Researchers demonstrated PhantomTac, an attack using hidden magnetic tags to trick robotic touch sensors and make robots drop objects or damage them with force.

hackread.com
4
934
⚠️📢 After #OperationEndgame disrupted StealC, its seller has now returned with Stadia RAT, adding hidden desktop control and remote command execution to its credential-stealing capabilities. Listen/Read: hackread.com/stealc-malware-… #Malware #Cybersecurity #StadiaRAT #StealC

StealC Malware Returns as Stadia RAT After Operation Endgame Takedown

StealC's seller has returned with Stadia RAT, combining credential theft, hidden desktop control, and remote command execution using code reused from StealC v3.5.

hackread.com
5
1,262
Even an air-gapped PC, isolated from external networks, can leak secrets as the new #SPECTER technique uses USB power changes to transmit data after malware gains administrator access. Listen/Read: hackread.com/specter-usb-pow… #Cybersecurity #AirGapped #USB

SPECTER Attack Uses USB Power Signals to Leak Data From Air-Gapped PCs

Researchers demonstrated SPECTER, a technique that leaks data from compromised air-gapped PCs through USB power controls, phone charging changes and peripherals.

hackread.com
1
2
4
1,505
GoDaddy revoked 404,607 SSL/TLS certificates after finding certificate-policy errors, with affected sites including some Gibraltar government websites. Listen/Read: hackread.com/godaddy-revokes… #GoDaddy #Cybersecurity #Hosting #SSL #Certificate

GoDaddy Revokes 404,607 SSL Certificates After Policy Errors

GoDaddy revoked 404,607 SSL/TLS certificates after finding certificate-policy errors, with affected sites including some Gibraltar government websites.

hackread.com
1
4
1,393
⚠️📢 A fake legal notice can lead to remote control of your PC as researchers traced a new campaign delivering #OverlordRAT through phishing emails impersonating Brazilian notary offices. Listen/Read: hackread.com/overlord-rat-fa… #Malware #Cybersecurity #Windows #Brazil #Phishin

Overlord RAT Uses Fake Legal Notices to Infect Windows PCs in New Campaign

WatchGuard details Overlord RAT attacks using fake Brazilian legal notices, plus Lampion malware and a separate remote access campaign targeting users in Portugal.

hackread.com
7
1,323
Patching an app won’t fix a vulnerable server behind it. NowSecure found 426 Android and iOS apps contacting servers reporting PHP versions affected by PHP2Shell. Listen/Read: hackread.com/426-android-ios… #Cybersecurity #PHP2Shell #PHP #Vulnerability

426 Android and iOS Apps Linked to PHP2Shell Backend Risks

426 mobile apps connecting to servers advertising PHP versions potentially affected by PHP2Shell vulnerabilities, raising concerns about backend security.

hackread.com
7
1,252
Police in 21 African countries arrested 1,462 suspects and recovered over $105 million in #OperationSerengetiIII, targeting scam rings, phishing and illegal crypto mining. Listen/Read: hackread.com/operation-seren… #Cybercrime #INTERPOL #Cybercrime #Phishing #Fraud #Africa

Operation Serengeti III Nets 1,462 Arrests and $105M in Cybercrime Crackdown

INTERPOL’s Operation Serengeti III targeted cybercrime in 21 African countries, recovering over $105 million and identifying 65,929 victims of criminal networks.

hackread.com
1
5
1,066
Qilin and INC ransomware operators are exploiting a Palo Alto VPN flaw in ongoing attacks, bypassing authentication, including MFA, to access company networks. Listen/Read: hackread.com/qilin-inc-explo… #Ransomware #Cybersecurity #PaloAlto #VPN #Vulnerability #INC #Qilin

Qilin and INC Exploit Palo Alto VPN Flaw in Ransomware Attacks

Qilin and INC ransomware operators exploit a PAN-OS vulnerability (CVE-2026-0257) to gain VPN access, then steal domain credentials from VMware virtual disks.

hackread.com
2
8
1,467
⚠️📢 PHP2Shell flaws can let attackers run code on web servers without logging in. Emergency fixes are out. Updating WordPress alone won’t fix the server’s PHP installation. Listen/Read: hackread.com/php-releases-em… #PHP #Cybersecurity #PHP2Shell #Vulnerability #WordPress

PHP Releases Emergency Fixes for Critical PHP2Shell Vulnerabilities

PHP releases emergency PHP2Shell fixes for two critical flaws allowing unauthenticated code execution. Website owners and hosting providers must update.

hackread.com
9
1,317
⚠️📢 Newly exposed records show INC and #TheGentlemen ransomware affiliates are using Claude and Kimi to plan attacks. Researchers recovered 8,257 AI messages, stolen credentials and 46 encryptor builds from the servers. Read: hackread.com/inc-the-gentlem… #Ransomware #Cybersecurity

INC and The Gentlemen Ransomware Affiliates Expose 8,257 AI Messages

SOCRadar found seven exposed servers linked to INC and The Gentlemen ransomware affiliates, holding AI chats, stolen credentials and 46 encryptor builds.

hackread.com
1
1
9
1,563
China-based BRONZE SANDCASTLE hackers used legitimate Windows apps to run encrypted backdoors, then searched networks and copied an Active Directory database containing password hashes. Listen/Read: hackread.com/china-bronze-sa… #Cybersecurity #Malware #BRONZESANDCASTLE #Windows

China-Based BRONZE SANDCASTLE Hackers Abuse Sandboxie to Load Backdoors

BRONZE SANDCASTLE abuses legitimate Windows apps to load encrypted backdoors, collect system information and steal Active Directory data.

hackread.com
6
1,051
A cyber incident at BAE Systems Inc. has halted US bankruptcy notices, taken federal court services offline and forced courts to change notice procedures and deadlines. Read: hackread.com/bae-systems-cyb… #Cybersecurity #BAESystems #Bankruptcy

BAE Systems Cyber Incident Disrupts US Bankruptcy Notices

A cyber incident affecting BAE Systems halted US bankruptcy notices, forcing federal courts to change service procedures and adjust some deadlines.

hackread.com
1
4
8
1,203
Scammers are abusing Adobe #Frame.io alerts to share malicious PDFs that redirect recipients to fake Microsoft 365 login pages. The campaign is dubbed #PhantomPreview. Listen/Read: hackread.com/scammers-frame-… #Phishing #Microsoft365 #Cybersecurity

Scammers Abuse Frame.io Notifications to Steal Microsoft 365 Credentials

Ocean Security found a phishing campaign, dubbed Phantom Preview, that abused legitimate Frame.io notifications and hidden PDF links to deliver fake Microsoft 365 login pages.

hackread.com
1
6
1,153
⚠️📢A Chinese couple has been arrested in #Japan over a phishing and credit card fraud scheme involving 480K phishing emails traced to a computer hidden behind a hotel refrigerator and connected to its Wi-Fi. More: hackread.com/phishing-emails… #Cybersecurity #Phishing #Cybercrime

480,000 Phishing Emails Traced to Computer Hidden Behind Hotel Fridge

Japanese police arrested a Chinese couple accused of hiding a computer in a Kobe hotel to send phishing emails and using stolen credit card details for purchases.

hackread.com
1
10
1,361
Federal investigators suspect a US ransomware negotiator helped ShinyHunters operate its victim-extortion site. The unnamed executive is separate from Edward Dubrovsky. Listen/Read: hackread.com/us-ransomware-n… #Cybersecurity #ShinyHunters #Ransomware #Extortion #Cybercrime

US Ransomware Negotiator Suspected of Helping ShinyHunters Extort Victims

Federal investigators suspect a US ransomware negotiator helped ShinyHunters operate an extortion site used to pressure nearly 100 organisations.

hackread.com
1
12
1,685
Load more