OctLurk and SilkLurk Windows Backdoors Target Governments in 6 Countries

Kaspersky links OctLurk and SilkLurk to cyberespionage attacks stealing passwords, emails and files from government systems in six countries since January 2025.

hackread.com

“I’m Allowed”: Hackers Use Simple Claims to Bypass AI Guardrails

Cisco Talos found hackers using simple authorization claims to bypass AI guardrails, build DDoS attack tools, steal credentials and access live camera services.

hackread.com

Brazil Health Surveillance Database Exposed 79GB of Sensitive Records

Brazil's SISVISA health surveillance system left 102,215 files totaling 79GB open online, including tax IDs and identity documents, without password protection.

hackread.com

Shai-Hulud npm Worm Returns, Poisoning Over 1,280 npm Packages

Shai-Hulud npm worm spreads through Keyv and hundreds of packages with 2 billion monthly downloads, stealing npm, GitHub, cloud and CI credentials in real time.

hackread.com

Thermo Fisher Patches Forensic DNA File Tampering Flaw in Its Software

Thermo Fisher patched CVE-2026-17583 in five supported DNA analysis products by adding digital signatures that help laboratories detect modified forensic files.

hackread.com

COLDCARD Seed Generation Flaw Linked to Nearly $89 Million Bitcoin Theft

Galaxy Research linked a suspected Bitcoin theft of 1,367.05 BTC to weak COLDCARD seeds. Coinkite says updates cannot repair seeds already generated on devices.

hackread.com

H96 Android TV Boxes Used for Ad Fraud and Residential Proxies

Bitsight found Fuyao software on H96 Android TV boxes, letting operators fake ad clicks and route proxy traffic through their owners' home internet connections.

hackread.com

Hackers Exploit N-able N-central Flaw After Initial Fix Falls Short

N-able says attackers bypassed N-central authentication, reached managed client devices and installed Cloudflare tunnels that survived server access revocation.

hackread.com

Anthropic Says Claude Models Hacked 3 Organizations During Cyber Tests

Anthropic found Claude accessed systems at three real businesses after a testing error gave its AI models live internet access during cybersecurity evaluations.

hackread.com

Wordfence Finds Critical Backdoor in ARVE WordPress Plugin

A backdoored ARVE WordPress Plugin release could grant attackers administrator access with one token, but WordPress.org blocked automatic distribution to WordPress sites.

hackread.com

Microsoft Fixes CosmosEscape Flaw That Could Allow Any Cosmos DB Takeover

Wiz found CosmosEscape in Azure's Gremlin API, exposing a master key that could access any Cosmos DB account. Microsoft fixed it, with no customer impact found.

hackread.com

LeakNet Claims 11TB of Data Stolen in NYC Health + Hospitals Breach

LeakNet claims it stole 11TB of NYC Health + Hospitals data containing sensitive medical, financial and biometric records linked to more than 12 million people.

hackread.com

CVSS 10.0 RufRoot Flaw Allowed Attackers to Hijack Ruflo Without Logging In

Ruflo fixed a CVSS 10.0 flaw that exposed its MCP bridge without any authentication, putting AI provider keys, stored chats and persistent agent memory at risk.

hackread.com

22-Year-Old IPMI Flaw Exposes 24,000 Servers to Offline Password Cracking

Researchers found 24,650 public BMC interfaces leaking IPMI password hashes, exposing servers to offline password cracking through a decades-old protocol flaw.

hackread.com

ShinyHunters Claims Ernst & Young (EY) Data Breach, Threatens July 31 Leak

Follow us on all social media platforms at @HackRead ;)

hackread.com

Fake IT Calls on Microsoft Teams Lead to GoGRPC Backdoor Infection

Follow us on all major social media platforms @Hackread

hackread.com

Microsoft Fixes Certighost Flaw That Allowed Domain Controller Impersonation

Follow us on all major social media platforms @Hackread

hackread.com

Hackers Compromise Hotel Wi-Fi Gateways to Hijack Microsoft 365 Accounts

Compromised hotel Wi-Fi gateways redirect business travelers to fake Microsoft 365 login pages allowing attackers to steal credentials and authorization tokens.

hackread.com

Google Indexed Claude AI Shared Chats Before Results Were Removed

Google Search indexed public Claude AI chat links, letting people find shared conversations through the site query before those listings disappeared soon after.

hackread.com

Russian Hackers Used a Zimbra Zero-Day to Steal Emails Without Link Clicks

Follow us on all social media platforms at @HackRead - Thanks!

hackread.com

New Dolphin X Malware Uses AI Profiler to Rank High-Value Victims

Follow us on all major social media platforms @Hackread

hackread.com

New TrickBot Variant Spotted Using DNS to Control Infected Windows PCs

Follow us on all major social media platforms @Hackread

hackread.com

OpenAI Models Escaped Test Environment and Breached Hugging Face

Follow us on all major social media platforms @Hackread

hackread.com

New Ubuntu Desktop Vulnerability Turns Local Access Into Root Control

Follow us on all major social media platforms @Hackread

hackread.com

Fake FBI Agents Use IC3 Complaint Scams to Target Fraud Victims

Fake FBI agents are using deepfake videos, spoofed IC3 websites and false recovery claims to steal money and personal information from people who were scammed before.

hackread.com

Hugging Face Says Autonomous AI Agent Breached Its Production Infrastructure

An AI-led cyberattack breached limited Hugging Face datasets and service credentials, while public models, Spaces and published packages showed no signs of tampering.

hackread.com

LG Monitors Spotted Installing Adware-Like App on Windows PCs

Connecting certain LG monitors prompts Windows Update to install an LG app without consent, while the software runs at startup and displays McAfee trial adverts.

hackread.com

FBI Arrests Florida Man in $220,000 Steam Crypto Theft Case

FBI agents arrested a Florida man accused of spreading Steam game malware that stole $220,000 in crypto, including $32,000 from a terminally ill cancer patient.

hackread.com

“TTF Trap” Phishing Emails Use Fake Font Files to Deliver Windows Malware

Fortinet says TTF Trap phishing emails hide Lua loaders in fake font files, deploying Remcos, XWorm, Agent Tesla and Snake Keylogger on company Windows systems.

hackread.com