Hackread.com (@HackRead) | teapawt

Tweets
All Posts
Sort by
Most recent Popular
Tweets & Replies
Reposts
Media
Search

Hackread.com@HackRead8h

EMBRACE affects AI coding tools Cursor, GitHub Copilot, Codex, VS Code and Claude Desktop, enabling code execution, file theft and browser address-bar spoofing. Codex and VS Code remained unpatched at publication Listen/Read: hackread.com/embrace-flaws-a… #Cybersecurity #AI

EMBRACE Flaws in 5 AI Coding Tools Enable Code Execution and File Theft

EMBRACE Flaws in 5 AI Coding Tools Enable Code Execution and File Theft

EMBRACE affects AI coding tools Cursor, GitHub Copilot, Codex, VS Code and Claude Desktop, enabling code execution, file theft and browser address-bar spoofing.

3

5

939

Hackread.com@HackRead12h

Ukrainian hacker Artem Stryzhak has been sentenced to 70 months in prison for his role in Nefilim and Hive ransomware attacks, including attacks on healthcare providers during COVID-19. Listen/Read: hackread.com/ukrainian-nefil… #Ransomware #Cybersecurity #Ukraine #Cybercrime

Ukrainian Nefilim and Hive Affiliate Artem Stryzhak Jailed for 70 Months

Ukrainian Nefilim and Hive Affiliate Artem Stryzhak Jailed for 70 Months

Artem Stryzhak gets 70 months for Nefilim and Hive ransomware attacks targeting hospitals, government agencies, law firms and businesses in the US and overseas.

1

7

1,027

Hackread.com@HackReadOct 28

A hacker published 115 GB of data from US-based Summit Public Schools, exposing sensitive student and staff records, including birth dates, home addresses and a lot more. Listen/Read Our In-depth Analysis: hackread.com/summit-public-s… #DataBreach #Cybersecurity #SummitSchools

Summit Public Schools Breach Exposes 115 GB of Student and Staff Data

Summit Public Schools Breach Exposes 115 GB of Student and Staff Data

A hacker has leaked 115 GB of Summit Public Schools data containing billions of lines, student and staff personal records and approximately 21,000 email addresses.

6

1,156

Hackread.com@HackReadOct 28

That “AI bot” visiting your site could be hunting for secrets as a threat actor is impersonating roughly 32 popular AI bots to scan websites for exposed credentials and sensitive configuration files. Listen/Read: hackread.com/hackers-imperso… #Cybersecurity #AIAgents #Claude #ChatGPT

Hackers Impersonate 32 AI Bots to Hunt for Exposed Credentials

Hackers Impersonate 32 AI Bots to Hunt for Exposed Credentials

A scanner impersonates 32 AI bots, including OpenAI and Claude crawlers, to search websites for exposed credentials, private keys and cloud configuration files.

2

10

1,109

Hackread.com@HackReadOct 28

That court notice in your inbox could be fake. Scammers are using a convincing US court lookalike domain to lure recipients into downloading #LodaRAT, malware accessing passwords and remote access. Listen/Read: hackread.com/fake-us-court-n… #Cybersecurity #Phishing #Malware

Fake US Court Notices Target 100,000+ Businesses With LodaRAT

Fake US Court Notices Target 100,000+ Businesses With LodaRAT

Fake US court notices target over 100,000 businesses, luring recipients to download LodaRAT malware that steals passwords, records activity and controls PCs.

8

1,089

Hackread.com@HackReadOct 27

Attackers are exploiting PHP2Shell flaws that let them run code on vulnerable web servers without logging in. CISA has given federal civilian agencies until October 29 to act. Listen/Read: hackread.com/cisa-confirm-ph… #Cybersecurity #PHP2Shell #Vulnerability #CISA #PHP

CISA Confirms PHP2Shell Exploitation, Orders Federal Agencies to Patch

CISA Confirms PHP2Shell Exploitation, Orders Federal Agencies to Patch

The flaws are collectively called PHP2Shell and assigned a CVSS score of 9.2 each. CVE-2026-109618 involves memory corruption linked to out-of-memory

1

13

1,631

Hackread.com@HackReadOct 27

Microsoft’s emergency .NET updates fix a Brotli memory flaw and a Linux privilege escalation. They also correct two incomplete patches issued earlier this month. Listen/Read: hackread.com/microsoft-issue… #Cybersecurity #Microsoft #Brotli #Vulnerbaility #Linux

Microsoft Issues Emergency .NET Fixes for Brotli Flaw and Linux Privilege Escalation

Microsoft Issues Emergency .NET Fixes for Brotli Flaw and Linux Privilege Escalation

Microsoft releases emergency .NET updates to fix a Brotli memory flaw and Linux privilege escalation, while correcting two incomplete October security patches.

1

8

1,435

Hackread.com@HackReadOct 27

⚠️📢 A Teams message from “IT support” could be an attacker asking for remote access to your PC, as researchers have reviewed 400+ recent incidents involving external chats used to gain a foothold. Listen/Read: hackread.com/hackers-abuse-m… #Cybersecurity #MicrosoftTeams #Phishing

Hackers Abuse Microsoft Teams External Chats to Access Corporate PCs

Hackers Abuse Microsoft Teams External Chats to Access Corporate PCs

Hackers impersonate IT support in Microsoft Teams external chats, tricking employees into granting remote access and installing malware on corporate computers.

6

1,082

Hackread.com@HackReadOct 26

After hackers spoiled food at French supermarkets, researchers found 12,976 refrigeration services exposed online in 99 countries, warning that compromised controls could put food and medicines at risk. Listen/Read: hackread.com/refrigeration-c… #Cybersecurity #IoT #Vulnerability

12,976 Refrigeration Controls Found Exposed Online in 99 Countries

12,976 Refrigeration Controls Found Exposed Online in 99 Countries

Forescout found 12,976 exposed refrigeration services in 99 countries, warning that attackers could alter temperatures and spoil food, medicines and supplies.

1

7

1,441

Hackread.com retweeted

Hackread.com@HackReadOct 24

Even an air-gapped PC, isolated from external networks, can leak secrets as the new #SPECTER technique uses USB power changes to transmit data after malware gains administrator access. Listen/Read: hackread.com/specter-usb-pow… #Cybersecurity #AirGapped #USB

SPECTER Attack Uses USB Power Signals to Leak Data From Air-Gapped PCs

SPECTER Attack Uses USB Power Signals to Leak Data From Air-Gapped PCs

Researchers demonstrated SPECTER, a technique that leaks data from compromised air-gapped PCs through USB power controls, phone charging changes and peripherals.

1

4

1,573

Hackread.com@HackReadOct 26

Eight CA private keys were so weak they could be recovered in under a second. Following the incident, eMudhra has announced it will leave the global SSL/TLS certificate business. Listen/Read: hackread.com/emudhra-exit-ss… #Cybersecurity #eMudhra #India #SSL #TLS

eMudhra to Exit SSL/TLS Market After 8 CA Keys Found Easily Guessable

eMudhra to Exit SSL/TLS Market After 8 CA Keys Found Easily Guessable

eMudhra will leave the global SSL/TLS certificate market after eight intermediate CA private keys were found easily guessable, prompting browser distrust actions.

1

4

1,144

Hackread.com@HackReadOct 26

⚠️📢🤖 A magnetic tag hidden under a label can fool a robot’s sense of touch. Researchers’ video demos show PhantomTac making robots drop, crush or topple objects without software access. Listen/Read: hackread.com/phantomtac-atta… #Cybersecurity #Robotics #PhantomTac #Technology

PhantomTac Attack Tricks Robots Into Dropping or Crushing Objects

PhantomTac Attack Tricks Robots Into Dropping or Crushing Objects

Researchers demonstrated PhantomTac, an attack using hidden magnetic tags to trick robotic touch sensors and make robots drop objects or damage them with force.

4

1,017

Hackread.com@HackReadOct 26

⚠️📢 After #OperationEndgame disrupted StealC, its seller has now returned with Stadia RAT, adding hidden desktop control and remote command execution to its credential-stealing capabilities. Listen/Read: hackread.com/stealc-malware-… #Malware #Cybersecurity #StadiaRAT #StealC

StealC Malware Returns as Stadia RAT After Operation Endgame Takedown

StealC Malware Returns as Stadia RAT After Operation Endgame Takedown

StealC's seller has returned with Stadia RAT, combining credential theft, hidden desktop control, and remote command execution using code reused from StealC v3.5.

5

1,326

Hackread.com@HackReadOct 24

Even an air-gapped PC, isolated from external networks, can leak secrets as the new #SPECTER technique uses USB power changes to transmit data after malware gains administrator access. Listen/Read: hackread.com/specter-usb-pow… #Cybersecurity #AirGapped #USB

SPECTER Attack Uses USB Power Signals to Leak Data From Air-Gapped PCs

SPECTER Attack Uses USB Power Signals to Leak Data From Air-Gapped PCs

Researchers demonstrated SPECTER, a technique that leaks data from compromised air-gapped PCs through USB power controls, phone charging changes and peripherals.

1

4

1,573

Hackread.com@HackReadOct 23

GoDaddy revoked 404,607 SSL/TLS certificates after finding certificate-policy errors, with affected sites including some Gibraltar government websites. Listen/Read: hackread.com/godaddy-revokes… #GoDaddy #Cybersecurity #Hosting #SSL #Certificate

GoDaddy Revokes 404,607 SSL Certificates After Policy Errors

GoDaddy Revokes 404,607 SSL Certificates After Policy Errors

GoDaddy revoked 404,607 SSL/TLS certificates after finding certificate-policy errors, with affected sites including some Gibraltar government websites.

4

1,430

Hackread.com@HackReadOct 23

⚠️📢 A fake legal notice can lead to remote control of your PC as researchers traced a new campaign delivering #OverlordRAT through phishing emails impersonating Brazilian notary offices. Listen/Read: hackread.com/overlord-rat-fa… #Malware #Cybersecurity #Windows #Brazil #Phishin

Overlord RAT Uses Fake Legal Notices to Infect Windows PCs in New Campaign

Overlord RAT Uses Fake Legal Notices to Infect Windows PCs in New Campaign

WatchGuard details Overlord RAT attacks using fake Brazilian legal notices, plus Lampion malware and a separate remote access campaign targeting users in Portugal.

7

1,364

Hackread.com@HackReadOct 23

Patching an app won’t fix a vulnerable server behind it. NowSecure found 426 Android and iOS apps contacting servers reporting PHP versions affected by PHP2Shell. Listen/Read: hackread.com/426-android-ios… #Cybersecurity #PHP2Shell #PHP #Vulnerability

426 Android and iOS Apps Linked to PHP2Shell Backend Risks

426 Android and iOS Apps Linked to PHP2Shell Backend Risks

426 mobile apps connecting to servers advertising PHP versions potentially affected by PHP2Shell vulnerabilities, raising concerns about backend security.

7

1,279

Hackread.com@HackReadOct 22

Police in 21 African countries arrested 1,462 suspects and recovered over $105 million in #OperationSerengetiIII, targeting scam rings, phishing and illegal crypto mining. Listen/Read: hackread.com/operation-seren… #Cybercrime #INTERPOL #Cybercrime #Phishing #Fraud #Africa

Operation Serengeti III Nets 1,462 Arrests and $105M in Cybercrime Crackdown

Operation Serengeti III Nets 1,462 Arrests and $105M in Cybercrime Crackdown

INTERPOL’s Operation Serengeti III targeted cybercrime in 21 African countries, recovering over $105 million and identifying 65,929 victims of criminal networks.

5

1,089

Hackread.com@HackReadOct 22

Qilin and INC ransomware operators are exploiting a Palo Alto VPN flaw in ongoing attacks, bypassing authentication, including MFA, to access company networks. Listen/Read: hackread.com/qilin-inc-explo… #Ransomware #Cybersecurity #PaloAlto #VPN #Vulnerability #INC #Qilin

Qilin and INC Exploit Palo Alto VPN Flaw in Ransomware Attacks

Qilin and INC Exploit Palo Alto VPN Flaw in Ransomware Attacks

Qilin and INC ransomware operators exploit a PAN-OS vulnerability (CVE-2026-0257) to gain VPN access, then steal domain credentials from VMware virtual disks.

8

1,506

Hackread.com@HackReadOct 21

⚠️📢 PHP2Shell flaws can let attackers run code on web servers without logging in. Emergency fixes are out. Updating WordPress alone won’t fix the server’s PHP installation. Listen/Read: hackread.com/php-releases-em… #PHP #Cybersecurity #PHP2Shell #Vulnerability #WordPress

PHP Releases Emergency Fixes for Critical PHP2Shell Vulnerabilities

PHP Releases Emergency Fixes for Critical PHP2Shell Vulnerabilities

PHP releases emergency PHP2Shell fixes for two critical flaws allowing unauthenticated code execution. Website owners and hosting providers must update.

9

1,340