Qilin and INC ransomware operators are exploiting a Palo Alto VPN flaw in ongoing attacks, bypassing authentication, including MFA, to access company networks. Listen/Read: hackread.com/qilin-inc-explo… #Ransomware #Cybersecurity #PaloAlto #VPN #Vulnerability #INC #Qilin

⚠️📢 PHP2Shell flaws can let attackers run code on web servers without logging in. Emergency fixes are out. Updating WordPress alone won’t fix the server’s PHP installation. Listen/Read: hackread.com/php-releases-em… #PHP #Cybersecurity #PHP2Shell #Vulnerability #WordPress

⚠️📢 Newly exposed records show INC and #TheGentlemen ransomware affiliates are using Claude and Kimi to plan attacks. Researchers recovered 8,257 AI messages, stolen credentials and 46 encryptor builds from the servers. Read: hackread.com/inc-the-gentlem… #Ransomware #Cybersecurity

China-based BRONZE SANDCASTLE hackers used legitimate Windows apps to run encrypted backdoors, then searched networks and copied an Active Directory database containing password hashes. Listen/Read: hackread.com/china-bronze-sa… #Cybersecurity #Malware #BRONZESANDCASTLE #Windows

A cyber incident at BAE Systems Inc. has halted US bankruptcy notices, taken federal court services offline and forced courts to change notice procedures and deadlines. Read: hackread.com/bae-systems-cyb… #Cybersecurity #BAESystems #Bankruptcy

Scammers are abusing Adobe #Frame.io alerts to share malicious PDFs that redirect recipients to fake Microsoft 365 login pages. The campaign is dubbed #PhantomPreview. Listen/Read: hackread.com/scammers-frame-… #Phishing #Microsoft365 #Cybersecurity

⚠️📢A Chinese couple has been arrested in #Japan over a phishing and credit card fraud scheme involving 480K phishing emails traced to a computer hidden behind a hotel refrigerator and connected to its Wi-Fi. More: hackread.com/phishing-emails… #Cybersecurity #Phishing #Cybercrime

Federal investigators suspect a US ransomware negotiator helped ShinyHunters operate its victim-extortion site. The unnamed executive is separate from Edward Dubrovsky. Listen/Read: hackread.com/us-ransomware-n… #Cybersecurity #ShinyHunters #Ransomware #Extortion #Cybercrime

⚠️📢🪝That routine meeting invite in your inbox may lead somewhere other than Microsoft Teams. A phishing campaign has sent hundreds of thousands of fake calendar invitations designed to steal #Microsoft credentials. More: hackread.com/fake-calendar-i… #Cybersecurity #Microsoft365

⚠️📢 An OpenAI model accessed a crypto wallet without permission and spent Sepolia test ETH to deploy smart contracts after authorized funding methods failed. Listen/Read: hackread.com/openai-model-ha… #OpenAI #AI #Crypto #Cybersecurity #HackingNews

Claude Code Desktop’s preview pane could let malicious HTML steal SSH keys, cloud credentials, GitHub and npm tokens. Anthropic fixed it after an initial patch was bypassed. Listen/Read: hackread.com/claude-code-des… #Cybersecurity #ClaudeCode #Vulnerability #AI

⚠️📢 Burger King Japan confirms a data breach exposed 11.18 million app member records, including emails, phone numbers, dates of birth and more. Listen/Read: hackread.com/burger-king-jap… #DataBreach #Cybersecurity #BurgerKing #Japan

⚠️📢 Targeted ads delivered Candiru mercenary spyware to #AlJazeera devices with no clicks required. Citizen Lab found the ads also reached NATO networks, but did not confirm infection. Listen/Read: hackread.com/targeted-ads-in… #Cybersecurity #Candiru #Spyware #NATO #CitizenLab

A misconfigured database linked to Vibetech exposed 13.7 million records from previous breaches, including AT&T, Casio data, the FBI employee directory, plaintext passwords, and bank details. Listen/Read: hackread.com/vibetech-databa… #DataBreach #Cybersecurity #Vibetech #Privacy

Could AI malware spread between devices on its own? Anthropic tested model replication on Android emulators and ran another model across $55 TV boxes, showing how AI worms might work. Listen/Read: hackread.com/anthropic-warns… #AI #Cybersecurity #Anthropic #Malware #IoT #Android

⚠️📢 Microsoft and Health-ISAC seized domains linked to YAM Store, CoGUI and Iron Man, services blamed for over 1 billion malicious messages targeting 75,000+ organizations. Listen/Read: hackread.com/microsoft-seize… #Microsoft #Phishing #Cybercrime #Scam #Fraud

Check Point Research reports two LiteLLM flaws that could let low-privilege authenticated users take over admin accounts, access internal files, execute code and steal AI provider API keys. Listen/Read: hackread.com/check-point-lit… #LiteLLM #Cybersecurity #AI #APIKeys #Vulnerability

Microsoft fixed 1,413 security flaws in its October Patch Tuesday update, including an actively exploited Windows Shell zero-day that can bypass Mark of the Web protections. Listen/Read: hackread.com/microsoft-fix-v… #Microsoft #PatchTuesday #Cybersecurity #Windows #Vulnerability

Amazon Fire TV Cube rooted using a four-year-old ARM Mali GPU vulnerability, allowing users to bypass software restrictions and run alternative operating systems. Listen/Read: hackread.com/amazon-fire-tv-… #Amazon #AmazonFireTV #FireTVCube #ArmMali #Cybersecurity

⚠️📢 Hackers manipulated refrigeration-control systems to heat supermarket fridges to 50°C in #France, forcing stores to dump spoiled food stocks. Separate IT outages also hit retailers in the Netherlands and Belgium. Read: hackread.com/hackers-heat-su… #Cybersecurity #Cyberattack