Chinese Groups Stole 115 Million US Cards in 16-Month Smishing Campaign
A SecAlliance report reveals Chinese smishing syndicates compromised 115M US payment cards by bypassing MFA to exploit Apple Pay and Google Wallet.
Hack Read
Hacker Accesses Millions of IMDataCenter Records from Exposed AWS Bucket
Florida firm IMDataCenter exposed 38GB of sensitive data including names, emails and ownership info. At least one hacker accessed and downloaded the files.
The Role of Security Policies in Shaping Organisational Culture and Risk Awareness
Organisational culture, as we know it, isn’t built overnight. It takes shape over time through decisions, habits and…
KLM Confirms Customer Data Breach Linked to Third-Party System
KLM confirms a data breach exposing customer info via a third-party system, affecting names, contact details and Flying Blue membership data.
Akira Ransomware Hits SonicWall VPNs, Deploys Drivers to Bypass Security
GuidePoint Security uncovers a new Akira ransomware tactic targeting SonicWall VPNs. The group's use of drivers to disable defenses is a significant threat to businesses.
SpyCloud Enhances Investigations Solution with AI-Powered Insights – Revolutionizing Insider Threat and Cybercrime Analysis
Austin, TX, USA, 6th August 2025, CyberNewsWire
How Top SOCs Defend Against Emerging Threats with Live Attack Data
Disclosure: This article was provided by ANY.RUN. The information and analysis presented are based on their research and findings.
Navigating Cybersecurity Risks in Crypto-Backed Lending
As crypto-backed lending gathers momentum among institutions and everyday users, cybersecurity shadows every new transaction. Billions in digital…
Over 100 Dell Laptop Models Plagued by Vulnerabilities Impacting Millions
A new Cisco Talos report reveals critical flaws in Dell Latitude and Precision laptops. Find out how hackers can exploit the ControlVault chip to steal sensitive data.
Pandora Cyber Attack Exposes Customer Data Via Third-Party Vendor
Pandora cyber attack exposes customer data via third-party breach. No passwords or payment info leaked, but phishing risks remain.
Discord CDN Link Abused to Deliver RAT Disguised as OneDrive File
Hackers are installing multiple RMMs like Atera and Splashtop in a new malware attack. This article details the abuse of Discord CDN link andn fake OneDrive phishing campaign discovered by Sublime Security.
Hackers Abuse Microsoft 365 Direct Send to Deliver Internal Phishing Emails
A new Proofpoint report reveals how attackers are using Microsoft 365’s Direct Send and unsecured SMTP relays to…
New JSCEAL Malware Targets Millions via Fake Crypto App Ads
JSCEAL malware targets millions using fake crypto app ads to steal wallets and data. Users urged to stay alert and avoid downloading from untrusted sources.
Local Government Cybersecurity: Why Municipal Systems Need Extra Protection
Cybersecurity threats to local governments are part of life in the digital environment in which people live today.…
LegalPwn Attack Tricks GenAI Tools Into Misclassifying Malware as Safe Code
A new security flaw, LegalPwn, exploits a weakness in generative AI tools like GitHub Copilot and ChatGPT, where malicious code is disguised as legal disclaimers. Learn why human oversight is now more critical than ever for AI security.
Bitdefender Warns Users to Update Dahua Cameras Over Critical Flaws
Security researchers at Bitdefender have found two critical vulnerabilities (CVE-2025-31700, CVE-2025-31701) in popular Dahua security cameras, including the Hero C1 model.
Early Bird Registration Now Open for The Inaugural OpenSSL Conference 2025
Newark, United States, 4th August 2025, CyberNewsWire
New Attack Uses Windows Shortcut Files to Install REMCOS Backdoor
Security firm Point Wild has exposed a new malware campaign using malicious LNK files to install the REMCOS backdoor. This report details how attackers disguise files to gain full system control.
US Government Begins $200M Payouts to Backpage Trafficking Victims
The US DOJ has announced the largest-ever compensation process for human trafficking victims of Backpage. Learn about the $200M fund, who is eligible, and the steps to file a petition before the February 2, 2026, deadline. This comes years after the site's seizure, as previously reported by Hackread.com.
Why Cybersecurity Should Be a Board-Level Priority in Every Company – Perspective from Serhii Mikhalap
Cybersecurity is no longer a technical afterthought, thanks to today’s interconnected world. It’s a boardroom imperative. As online…
