Hackread.com

That “AI bot” visiting your site could be hunting for secrets as a threat actor is impersonating roughly 32 popular AI bots to scan websites for exposed credentials and sensitive configuration files. Listen/Read: #Cybersecurity #AIAgents #Claude #ChatGPT

That court notice in your inbox could be fake. Scammers are using a convincing US court lookalike domain to lure recipients into downloading #LodaRAT, malware accessing passwords and remote access. Listen/Read: #Cybersecurity #Phishing #Malware

Attackers are exploiting PHP2Shell flaws that let them run code on vulnerable web servers without logging in. CISA has given federal civilian agencies until October 29 to act. Listen/Read: #Cybersecurity #PHP2Shell #Vulnerability #CISA #PHP

Microsoft’s emergency .NET updates fix a Brotli memory flaw and a Linux privilege escalation. They also correct two incomplete patches issued earlier this month. Listen/Read: #Cybersecurity #Microsoft #Brotli #Vulnerbaility #Linux

⚠️📢 A Teams message from “IT support” could be an attacker asking for remote access to your PC, as researchers have reviewed 400+ recent incidents involving external chats used to gain a foothold. Listen/Read: #Cybersecurity #MicrosoftTeams #Phishing

After hackers spoiled food at French supermarkets, researchers found 12,976 refrigeration services exposed online in 99 countries, warning that compromised controls could put food and medicines at risk. Listen/Read: #Cybersecurity #IoT #Vulnerability

RT @HackRead: Even an air-gapped PC, isolated from external networks, can leak secrets as the new #SPECTER technique uses USB power changes to transmit data after malware gains administrator access. Listen/Read: #Cybersecurity #AirGapped #USB

Eight CA private keys were so weak they could be recovered in under a second. Following the incident, eMudhra has announced it will leave the global SSL/TLS certificate business. Listen/Read: #Cybersecurity #eMudhra #India #SSL #TLS

⚠️📢🤖 A magnetic tag hidden under a label can fool a robot’s sense of touch. Researchers’ video demos show PhantomTac making robots drop, crush or topple objects without software access. Listen/Read: #Cybersecurity #Robotics #PhantomTac #Technology

⚠️📢 After #OperationEndgame disrupted StealC, its seller has now returned with Stadia RAT, adding hidden desktop control and remote command execution to its credential-stealing capabilities. Listen/Read: #Malware #Cybersecurity #StadiaRAT #StealC

GoDaddy revoked 404,607 SSL/TLS certificates after finding certificate-policy errors, with affected sites including some Gibraltar government websites. Listen/Read: #GoDaddy #Cybersecurity #Hosting #SSL #Certificate

⚠️📢 A fake legal notice can lead to remote control of your PC as researchers traced a new campaign delivering #OverlordRAT through phishing emails impersonating Brazilian notary offices. Listen/Read: #Malware #Cybersecurity #Windows #Brazil #Phishin

Patching an app won’t fix a vulnerable server behind it. NowSecure found 426 Android and iOS apps contacting servers reporting PHP versions affected by PHP2Shell. Listen/Read: #Cybersecurity #PHP2Shell #PHP #Vulnerability

Police in 21 African countries arrested 1,462 suspects and recovered over $105 million in #OperationSerengetiIII, targeting scam rings, phishing and illegal crypto mining. Listen/Read: #Cybercrime #INTERPOL #Cybercrime #Phishing #Fraud #Africa

Qilin and INC ransomware operators are exploiting a Palo Alto VPN flaw in ongoing attacks, bypassing authentication, including MFA, to access company networks. Listen/Read: #Ransomware #Cybersecurity #PaloAlto #VPN #Vulnerability #INC #Qilin

⚠️📢 PHP2Shell flaws can let attackers run code on web servers without logging in. Emergency fixes are out. Updating WordPress alone won’t fix the server’s PHP installation. Listen/Read: #PHP #Cybersecurity #PHP2Shell #Vulnerability #WordPress

⚠️📢 Newly exposed records show INC and #TheGentlemen ransomware affiliates are using Claude and Kimi to plan attacks. Researchers recovered 8,257 AI messages, stolen credentials and 46 encryptor builds from the servers. Read: #Ransomware #Cybersecurity

China-based BRONZE SANDCASTLE hackers used legitimate Windows apps to run encrypted backdoors, then searched networks and copied an Active Directory database containing password hashes. Listen/Read: #Cybersecurity #Malware #BRONZESANDCASTLE #Windows

A cyber incident at BAE Systems Inc. has halted US bankruptcy notices, taken federal court services offline and forced courts to change notice procedures and deadlines. Read: #Cybersecurity #BAESystems #Bankruptcy