Collaborate Disseminate
Researchers at AllSecure have revealed how North Korean hackers from the Lazarus Group used a fake LinkedIn job interview and deepfake technology to target their CEO. Continue reading Fake LinkedIn Interview Used by Lazarus Hackers to Target AllSecure CEO
Dutch intelligence warns Russian hackers are hijacking Signal and WhatsApp accounts using fake support bots and verification code scams targeting officials and journalists. Continue reading Dutch Intel Warns of Russian Hackers Hijacking Signal, WhatsApp Attacks
Security firm Pillar reveals the Chaos Agent in which Hackerbot-Claw, an AI agent, used natural language to compromise major GitHub projects and hijack developer tools. Continue reading AI Bot Hackerbot-Claw Targets Microsoft, DataDog and CNCF GitHub Repos
A new phishing campaign is targeting thousands in the US by posing as the Social Security Administration. Learn how scammers use fake 2025/2026 tax statements and Datto RMM software to hijack computers and steal data, as shared with Hackread.com Continue reading New Social Security Scam Emails Use Fake Tax Documents to Hijack PCs
Researchers at Acronis have discovered a malicious trojanized version of the Red Alert rocket warning app targeting Israeli Android users. Distributed via fake Home Front Command SMS messages, this spyware steals GPS data, SMS messages, and contact lis… Continue reading Hackers Spread Fake Red Alert Rocket Alert App to Spy on Israeli Users
A joint study by Google and GitGuardian reveals that over 2,600 valid TLS certificates, protecting Fortune 500 companies and government agencies, were compromised due to private key leaks on GitHub and DockerHub. Continue reading 900+ Certificates Used by Fortune 500, Governments Exposed by Key Leaks
Bitdefender research reveals Pakistani group APT36 is using AI-generated vibeware and trusted cloud services like Google Sheets to target Indian officials. Continue reading Pakistan-Linked APT36 Floods Indian Govt Networks With AI-Made ‘Vibeware’
Researchers at Zenity Labs uncover PleaseFix flaws in Perplexity’s Comet browser. See how zero-click calendar invites allow AI agents to steal 1Password credentials and personal files. Continue reading PleaseFix Flaw Lets Hackers Access 1Password Vault via Comet AI Browser
A new phishing campaign is using stolen certificates from TrustConnect Software PTY LTD to sign malware. By impersonating updates for Zoom and Microsoft Teams, hackers install RMM tools to gain persistent, privileged access to networks Continue reading Fake Zoom, Teams Meeting Invites Use Compromised Certificates to Drop Malware
The University of Hawaii Cancer Centre has confirmed a massive ransomware attack affecting 1.24 million people. Sensitive data, including Social Security numbers and historical voter records dating back to 1993, was compromised. Continue reading Ransomware Breach at University of Hawaii Cancer Center Affects 1.2M People