Hackread.com

🚨 LAPSUS$ claims it breached #AstraZeneca, alleging theft of 3GB of data, including source code, credentials, cloud configs, and employee info now being sold online. Claims remain unverified. Read: hackread.com/hacker-group-l… #DataBreach #CyberSecurity #LAPSUS #CyberCrime

🚨 Fake Zoom meeting invites are tricking users into joining realistic “calls” that push malware onto Windows PCs. The entire meeting is simulated to make victims install a bogus update. Read: hackread.com/fake-zoom-meet… #CyberSecurity #Malware #Phishing #Zoom #Windows

A malicious Windsurf IDE extension is stealing credentials while hiding payloads inside Solana blockchain transactions. Developers remain a prime target for high-value access. Read more: hackread.com/windsurf-ide-e… #CyberSecurity #Malware #Developers #Blockchain #Solana

New research shows 3 flaws dubbed #ClaudyDay in Claude AI could be chained to steal user data using fake Google Ads, hidden prompts, and built-in features. Read: hackread.com/claudy-day-fla… #CyberSecurity #AI #ClaudeAI #Malware #Privacy

Watch out as new .NET AOT malware hides its code as a black box, making detection far harder while delivering Rhadamanthys infostealer and crypto miner. Read: hackread.com/net-aot-malwar… #CyberSecurity #Rhadamanthys #InfoStealer #CryptoMiner

Watch out as a new ClickFix scam tricks Windows users into running hidden commands that map hacker-controlled drives and load malware through trusted apps. Read: hackread.com/clickfix-scam-… #CyberSecurity #ClickFix #Windows #Malware #Scam

Watch out, as Microsoft has uncovered a Storm-2561 campaign using SEO poisoning to push fake Fortinet and Ivanti VPN sites that deliver #Hyrax infostealer malware. Read: hackread.com/storm-2561-fak… #CyberSecurity #Malware #Infostealer #VPN #Fortinet #Ivanti

Watch out as hackers are abusing fake Claude AI tools in a #ClickFix campaign to spread MacSync infostealer malware via #GoogleAds. Read: hackread.com/clickfix-attac… #CyberSecurity #Infostealer #AI #Claude #MacOS

The upgraded version of #Vidar infostealer is being spread via Reddit and GitHub, hidden in fake game cheats for popular titles like Fortnite and Counter-Strike, targeting young gamers. Read: hackread.com/vidar-2-0-info… #CyberSecurity #Gaming #Infostealer #Fortnite #CounterStrike

Researchers warn of a data leak risk in AWS Bedrock’s AgentCore Code Interpreter. Attackers could abuse DNS queries to extract sensitive cloud data from AI environments if not properly configured. Read: hackread.com/data-leak-risk… #CyberSecurity #AWS #BedRockAI #Vulnerability

The FBI is investigating several #Steam games that carried malware designed to steal browser data and drain crypto wallets from gamers. Authorities are now seeking victims who downloaded the titles. Read more: hackread.com/fbi-investigat… #Cybersecurity #Malware #Gaming #CyberCrime

A new phishing scam uses #LiveChat to impersonate Amazon and PayPal support agents, tricking victims into sharing credit card details, personal data, and MFA codes in real time. Read: hackread.com/phishing-scam-… #Cybersecurity #Phishing #Amazon #PayPal #Scam

A flaw in the UK’s Companies House #WebFiling system allowed logged-in users to view directors’ private details and even submit filings on behalf of other companies. Demo: hackread.com/companies-hous… #Cybersecurity #Vulnerability #CompaniesHouse

🚨 Adobe to pay $150M after US regulators said the company hid early termination fees and made subscriptions hard to cancel. The settlement includes $75M in penalties and $75M in customer services. Read: hackread.com/adobe-hidden-f… #Adobe #Subscriptions #Scam #Fraud

New XWorm 7.1 and Remcos RAT campaigns are abusing trusted #Windows utilities and memory-based execution to evade detection. The campaign also exploits a #WinRAR vulnerability to gain initial access. Read: hackread.com/xworm-7-1-remc… #CyberSecurity #Malware #XWorm #RemcosRAT

ICYMI: #ShinyHunters hacking group claims it stole up to 1 petabyte of data from Telus Digital, a subsidiary of Canadian telecom giant Telus, including support recordings, code, and employee records. Read: hackread.com/shinyhunters-1… #CyberSecurity #TelusDigital #Canada #DataBreach

INTERPOL’s #OperationSynergiaIII has disrupted cybercrime infrastructure, taking down 45,000 malicious IP addresses and leading to 94 arrests in 72 countries targeting phishing and malware. Read: hackread.com/interpol-opera… #Cybersecurity #CyberCrime #INTERPOL #Phishing

A 7-year-old Linux flaw dubbed #CrackArmor exposes 12.6 million systems using AppArmor. Researchers found that it can enable root access, container escape, and security bypass. Patch immediately. Read: hackread.com/crackarmor-vul… #Linux #CyberSecurity #AppArmor #Vulnerability

Over 200,000 #WordPress sites are exposed due to an SQL injection flaw in the Ally plugin (CVE-2026-2413), allowing attackers to extract database data. Patch released, but many sites remain vulnerable. Read: hackread.com/sql-injection-… #CyberSecurity #SQLInjection #Vulnerability

US agencies face a CISA deadline to secure networks after a critical Cisco SD-WAN flaw (CVE-2026-20127) exposed federal systems to long-term intrusion and admin access. Read: hackread.com/us-agencies-ci… #CyberSecurity #Cisco #SDWAN #CISA #Vulnerability