Tag: hacker
-
Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
Attackers exploited a flaw in an optional Nextcloud app, Collabora Online – Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack on September 10.A web shell is a small file that executes any command an attacker sends via a web request, with…
-
Hacker targets Ivanti Connect Secure in chained exploitation
Researchers warn the attacker is taking multiple steps to clean up forensic evidence after an attack.; First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/hacker-ivanti-connect-secure-chained-exploitation/832983/
-
Microsoft, Health-ISAC and partners take down popular phishing kit services
The three marketplaces helped hackers impersonate major businesses and governments. Microsoft now controls the markets’ domain names. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/phishing-marketplace-takedown-microsoft-health-isac/832965/
-
Justice Department says North Koreans have infiltrated dozens of US companies
U.S. authorities warn that sanctioned hackers are increasingly targeting Americans to act as facilitators between breached U.S. companies and Pyongyang. First seen on techcrunch.com Jump to article: techcrunch.com/2026/10/13/justice-department-says-north-koreans-have-infiltrated-dozens-of-u-s-companies/
-
Copeland: Hacker kapern weitere Supermarkt-Kühlschränke
Nach Danfoss ist jetzt der US-Konzern Copeland als zweiter Lieferant in die Cyberattacken auf europäische Supermarkt-Kühlketten verwickelt. First seen on golem.de Jump to article: www.golem.de/news/copeland-hacker-kapern-weitere-supermarkt-kuehlschraenke-2610-214094.html
-
Justice Department says North Koreans have infiltrated dozens of U.S. companies
U.S. authorities warn that sanctioned hackers are increasingly targeting Americans to act as facilitators between breached U.S. companies and Pyongyang. First seen on techcrunch.com Jump to article: techcrunch.com/2026/10/13/justice-department-says-north-koreans-have-infiltrated-dozens-of-u-s-companies/
-
Phase Eight, Hobbs and Whistles owner joins growing list of fashion retailers targeted by hackers
People who have shopped with Phase Eight, Hobbs or Whistles will have to wait to find out whether their personal information was exposed in a cyberattack on the company behind … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/14/tfg-london-cyberattack-phase-eight-hobbs-whistles/
-
Hackers Chain 3 Ivanti VPN Zero-Days to Gain Root Access Without Authentication
Tags: access, authentication, credentials, cyber, exploit, hacker, ivanti, network, threat, vpn, vulnerability, zero-dayAttackers chained three zero-day vulnerabilities in Ivanti Connect Secure (ICS) VPN appliances to execute commands as root without authentication, then searched the affected network for credentials and sensitive Active Directory data. Volexity attributed the activity to an unknown threat actor it tracks as UTA0576, which repeatedly exploited an appliance running version 22.8R2.4, Build 19097 the…
-
Hackers Chain 3 Ivanti VPN Zero-Days to Gain Root Access Without Authentication
Tags: access, authentication, credentials, cyber, exploit, hacker, ivanti, network, threat, vpn, vulnerability, zero-dayAttackers chained three zero-day vulnerabilities in Ivanti Connect Secure (ICS) VPN appliances to execute commands as root without authentication, then searched the affected network for credentials and sensitive Active Directory data. Volexity attributed the activity to an unknown threat actor it tracks as UTA0576, which repeatedly exploited an appliance running version 22.8R2.4, Build 19097 the…
-
Hackers Chain 3 Ivanti VPN Zero-Days to Gain Root Access Without Authentication
Tags: access, authentication, credentials, cyber, exploit, hacker, ivanti, network, threat, vpn, vulnerability, zero-dayAttackers chained three zero-day vulnerabilities in Ivanti Connect Secure (ICS) VPN appliances to execute commands as root without authentication, then searched the affected network for credentials and sensitive Active Directory data. Volexity attributed the activity to an unknown threat actor it tracks as UTA0576, which repeatedly exploited an appliance running version 22.8R2.4, Build 19097 the…
-
Ghostscript flaw lets hackers hijack servers via PDF uploads
A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution through specially crafted PDF files. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ghostscript-flaw-lets-hackers-hijack-servers-via-pdf-uploads/
-
Hackers Attack French Supermarket Freezers Causing Food Loss
Unpatched and Outdated Refrigeration System Controllers From Danfoss Exploited. Hackers remotely targeted unpatched or outdated hardware controllers designed to remotely manage refrigeration systems in supermarkets and used them to defrost refrigerators and freezers across France, leading to widespread spoilage and in some cases fires. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/hackers-attack-french-supermarket-freezers-causing-food-loss-a-33084
-
Hackers Attack French Supermarket Freezers Causing Food Loss
Unpatched and Outdated Refrigeration System Controllers From Danfoss Exploited. Hackers remotely targeted unpatched or outdated hardware controllers designed to remotely manage refrigeration systems in supermarkets and used them to defrost refrigerators and freezers across France, leading to widespread spoilage and in some cases fires. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/hackers-attack-french-supermarket-freezers-causing-food-loss-a-33084
-
North Korean hackers target Ukrainian experts for possible intelligence on Russia’s war
North Korean hackers have been targeting Ukrainian experts in diplomacy, security and international policy amid Pyongyang’s growing military cooperation with Russia. First seen on therecord.media Jump to article: therecord.media/north-korea-hackers-russia-ukraine
-
Russian internet provider SkyNet reports outages after cyberattack claimed by Ukrainian hackers
One of St. Petersburg’s major internet providers said its network had been under a distributed denial-of-service (DDoS) attack since October 6, affecting services including online gaming, voice calls and video conferencing. First seen on therecord.media Jump to article: therecord.media/russian-internet-provider-skynet-reports-outages-ddos
-
Hackers Target Hundreds of French Supermarkets, Heating Refrigeration Systems to 50°C
Hundreds of French supermarkets experienced refrigeration disruptions after hackers reportedly manipulated control systems overnight, destroying fresh and frozen food. Intermarché, Netto, Coopérative U, and Leclerc stores were among those affected, with potential nationwide losses reaching several million euros, according to BFMTV. The incident targeted refrigeration systems supplied by the Danish manufacturer Danfoss. Les Mousquetaires confirmed…
-
Hackers Exploit Citrix NetScaler Zero-Days to Deploy Modified Platypus Backdoor
Tags: backdoor, citrix, cyber, defense, exploit, framework, hacker, incident response, open-source, threat, vulnerability, zero-dayThreat actors are exploiting two critical zero-day vulnerabilities in Citrix NetScaler to deploy a modified version of the open-source Platypus remote administration framework on compromised Application Delivery Controller (ADC) and Gateway appliances. Binary Defense’s Analysis on Demand and Incident Response team investigated an intrusion involving two Citrix NetScaler devices. One appliance showed evidence of exploitation…
-
Hackers Exploit Citrix NetScaler Zero-Days to Deploy Modified Platypus Backdoor
Tags: backdoor, citrix, cyber, defense, exploit, framework, hacker, incident response, open-source, threat, vulnerability, zero-dayThreat actors are exploiting two critical zero-day vulnerabilities in Citrix NetScaler to deploy a modified version of the open-source Platypus remote administration framework on compromised Application Delivery Controller (ADC) and Gateway appliances. Binary Defense’s Analysis on Demand and Incident Response team investigated an intrusion involving two Citrix NetScaler devices. One appliance showed evidence of exploitation…
-
(g+) Windows-Kernel: Ein falsches Jobangebot hebelt den Windows-Schutz aus
Mit gefälschten Jobangeboten schleusten nordkoreanische Hacker Schadcode ein und schalteten über eine Windows-Lücke Sicherheitssoftware aus. Wie Admins solche Angriffe erkennen können. First seen on golem.de Jump to article: www.golem.de/news/windows-kernel-ein-falsches-jobangebot-hebelt-den-windows-schutz-aus-2610-214044.html
-
GTA 6 leaker threatens to release full playable version of game ahead of official launch
The hacker behind a high-profile string of leaks involving the upcoming release of the Grand Theft Auto (GTA) 6 videogame has threatened to release a complete, playable build. First seen on bitdefender.com Jump to article: www.bitdefender.com/en-us/blog/hotforsecurity/gta-6-leaker-threatens-release-full-game
-
GTA 6 leaker threatens to release full playable version of game ahead of official launch
The hacker behind a high-profile string of leaks involving the upcoming release of the Grand Theft Auto (GTA) 6 videogame has threatened to release a complete, playable build. First seen on bitdefender.com Jump to article: www.bitdefender.com/en-us/blog/hotforsecurity/gta-6-leaker-threatens-release-full-game
-
Hackers cranked French supermarkets’ freezers up to 50 degrees, causing hundreds of stores to lose their stock
Hackers hit French supermarkets via unpatched Danfoss refrigeration systems, remote-heating freezers and destroying stock worth millions. Overnight from Sunday to Monday, a large cyberattack hit the refrigeration systems of hundreds of French supermarkets, BFMTV revealed. The attackers targeted equipment from the Danish maker Danfoss that many French stores use to regulate their cold. Fresh and…
-
Warnung des BSI: Hacker nehmen Firewall von Sonicwall ins Visier
Die Schwachstelle ist besonders schwerwiegend, weil sie Zugriffe aus der Ferne erlaubt – ohne Authentifizierung. First seen on golem.de Jump to article: www.golem.de/news/warnung-des-bsi-hacker-nehmen-firewall-von-sonicwall-ins-visier-2610-214040.html
-
Hackers force French supermarket fridges to heat up to 50C in ‘unprecedented’ cyber-attack
Hundreds of Intermarché shops and Coopérative U outlets in France hit, with fears Dutch chains also affectedHackers have forced the temperature of many French supermarket fridges up to 50C overnight, in an “unprecedented” cyber-attack affecting several hundred stores across the country, with fires and food losses reported.The Paris prosecutor’s office said on Monday â the large-scale…
-
Hackers Heat Supermarket Fridges to 50°C in France Cyberattack
Hackers reportedly heated supermarket fridges to 50°C in France, spoiling food stocks, while stores in the Netherlands and… First seen on hackread.com Jump to article: hackread.com/hackers-heat-supermarket-fridges-50c-france-cyberattack/
-
Hackers Use AI-Generated Event Lures to Steal Google Accounts and Bypass MFA
Tags: ai, authentication, credentials, cyber, framework, google, hacker, mfa, phishing, qr, spear-phishing, threatAn advanced persistent threat spear-phishing campaign targeting individuals affiliated with Taiwanese research organizations, combining likely AI-assisted event invitations with real-time Google authentication interception. Tracked as UAT-11985, the operation uses institutional impersonation, altered QR codes, and an adversary-in-the-middle phishing framework to steal credentials and authenticated sessions. Attackers repurposed legitimate public event information to make fraudulent invitations…
-
Cyber exec arrested in case allegedly tied to ShinyHunters hackers
Canadian cybersecurity executive Edward Dubrovsky has been arrested in Pennsylvania in connection with alleged extortion activity that multiple reports have linked to the FBI’s ongoing crackdown on the ShinyHunters hacking group. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cyber-exec-arrested-in-case-allegedly-tied-to-shinyhunters-hackers/
-
ARTEX AI, Claude agents used in cyberattacks on South Korean banks
The cyberattacks that shook the South Korean financial sector earlier this month were launched by a Chinese hacker using the ARTEX AI penetration testing suite and Claude agents. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hacker-used-artex-ai-and-claude-agents-to-target-south-korean-banks/