Tag: hacker
-
CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades
Tags: cisa, cve, cybersecurity, exploit, flaw, hacker, infrastructure, kev, software, vulnerability, wordpressThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw in WordPress Core to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.The high-severity vulnerability, tracked as CVE-2026-119977 (CVSS score: 8.1), is a case of Time-of-check Time-of-use (TOCTOU) race condition that could be exploited to achieve arbitrary code First seen…
-
Hackers Disguise Malware as Popular Games and Software to Hijack Windows PCs
An evolving fake-download campaign that disguises trojanized installers as popular games, cracked software, and utilities to monetize Windows computers. Rather than delivering one payload, the operation distributes multiple software “offers” during a single installation session, converting victims’ bandwidth and computing resources into revenue streams. Microsoft’s November 3 investigation identified three confirmed branches: WorldProxyPool proxyware, CharityEngine…
-
Hackers Turn to AI Jailbreak Bundles as Researchers Uncover New Prompt Adware Technique
An AI jailbreak package that repeatedly modifies OpenAI Codex instructions to promote its author’s commercial service, showing how guardrail-bypass tools can double as advertising infrastructure. The Chinese language bundle, Haiou, was discovered on a cybercrime actor’s misconfigured web server alongside Cobalt Strike and penetration testing utilities. Published November 3, the investigation identifies the technique as…
-
Hackers Disguise Malware as Popular Games and Software to Hijack Windows PCs
An evolving fake-download campaign that disguises trojanized installers as popular games, cracked software, and utilities to monetize Windows computers. Rather than delivering one payload, the operation distributes multiple software “offers” during a single installation session, converting victims’ bandwidth and computing resources into revenue streams. Microsoft’s November 3 investigation identified three confirmed branches: WorldProxyPool proxyware, CharityEngine…
-
Hackers Disguise Malware as Popular Games and Software to Hijack Windows PCs
An evolving fake-download campaign that disguises trojanized installers as popular games, cracked software, and utilities to monetize Windows computers. Rather than delivering one payload, the operation distributes multiple software “offers” during a single installation session, converting victims’ bandwidth and computing resources into revenue streams. Microsoft’s November 3 investigation identified three confirmed branches: WorldProxyPool proxyware, CharityEngine…
-
Hackers Disguise Malware as Popular Games and Software to Hijack Windows PCs
An evolving fake-download campaign that disguises trojanized installers as popular games, cracked software, and utilities to monetize Windows computers. Rather than delivering one payload, the operation distributes multiple software “offers” during a single installation session, converting victims’ bandwidth and computing resources into revenue streams. Microsoft’s November 3 investigation identified three confirmed branches: WorldProxyPool proxyware, CharityEngine…
-
Hackers Disguise Malware as Popular Games and Software to Hijack Windows PCs
An evolving fake-download campaign that disguises trojanized installers as popular games, cracked software, and utilities to monetize Windows computers. Rather than delivering one payload, the operation distributes multiple software “offers” during a single installation session, converting victims’ bandwidth and computing resources into revenue streams. Microsoft’s November 3 investigation identified three confirmed branches: WorldProxyPool proxyware, CharityEngine…
-
Hackers Disguise Malware as Popular Games and Software to Hijack Windows PCs
An evolving fake-download campaign that disguises trojanized installers as popular games, cracked software, and utilities to monetize Windows computers. Rather than delivering one payload, the operation distributes multiple software “offers” during a single installation session, converting victims’ bandwidth and computing resources into revenue streams. Microsoft’s November 3 investigation identified three confirmed branches: WorldProxyPool proxyware, CharityEngine…
-
Hackers Disguise Malware as Popular Games and Software to Hijack Windows PCs
An evolving fake-download campaign that disguises trojanized installers as popular games, cracked software, and utilities to monetize Windows computers. Rather than delivering one payload, the operation distributes multiple software “offers” during a single installation session, converting victims’ bandwidth and computing resources into revenue streams. Microsoft’s November 3 investigation identified three confirmed branches: WorldProxyPool proxyware, CharityEngine…
-
Hackers Target French Blood Service, Reprogram Plasma Storage Freezers From -30°C to 110°C
Hackers reportedly targeted refrigeration equipment operated by Coolworld, a service provider for France’s Établissement Français du Sang (EFS), compromising the safety of blood products intended for medical use. This attack was detected overnight between November 1 and 2, 2026, and allegedly altered freezer settings from approximately -30°C to 110°C. According to reports, France’s Health Ministry…
-
Gorbag: Russische Hacker sammeln Informationen an der Frontlinie zur Ukraine
ESET Forscher decken ‘Gorbag” auf, eine mit Russland verbündete Gruppe, die einfache Infostealer einsetzt, um Daten von ukrainischen Organisationen in der Nähe der Frontlinie zu sammeln First seen on welivesecurity.com Jump to article: www.welivesecurity.com/de/eset-research/gorbag-russische-hacker-sammeln-informationen-an-der-frontlinie-zur-ukraine/
-
Hackers hijack cPGuard autoupdate to deploy backdoor, steal data
Attackers have compromised the update infrastructure for the cPGuard web security suite to distribute a backdoor and a data-stealing script. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-hijack-cpguard-autoupdate-to-deploy-backdoor-steal-data/
-
Binance says fake job interview led to $6.3 billion crypto heist
Cryptocurrency exchange Binance says North Korean hackers used a fake job interview to trick an employee into installing malware that ultimately let them compromise the company’s wallet infrastructure and steal about $6.34 billion in digital assets. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/binance-says-fake-job-interview-led-to-63-billion-crypto-heist/
-
Binance Says Hackers Used Well-Known Tricks to Carry Out a $6.34 Billion Heist
Suspected North Korean attackers duped an engineer with a fake job interview and a malicious download to gain a foothold in the crypto firm’s system and steal billions, according to Binance. First seen on wired.com Jump to article: www.wired.com/story/binance-says-hackers-used-well-known-tricks-to-carry-out-a-dollar634-billion-heist/
-
Food suppliers in UK hit by cyber-attacks after freezers targeted in Europe
Cybersecurity experts say national impact ‘minimal’ but incidents may represent the ‘foothills’ of a wider threat Food suppliers in the UK have been hit by cyber-attacks after hackers raised the temperatures of supermarket freezers across Europe.The UK’s National Cyber Security Centre (NSCS) said it was working with the affected companies but the national impact was…
-
Hackers Exploit BTCPay Server Flaw to Steal Cryptocurrency
Attackers drained hot wallets on outdated BTCPay Server instances, with $1.63m traced so far First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/btcpay-server-flaw-cryptocurrency/
-
Freezers of UK meat suppliers heat up after cyber-attacks in Europe
Cybersecurity experts say incidents had minimal effect but may represent the ‘foothills’ of a wider threatMeat suppliers in the UK have been hit by cyber-attacks after hackers raised the temperatures of supermarket freezers across Europe.The UK’s National Cyber Security Centre (NCSC) said it was working with the affected companies but that the national impact was…
-
Russia-linked cyber spies target Ukraine’s war crimes investigations, military aid routes
The hackers use relatively simple malware to steal sensitive documents, login credentials and other information from Ukrainian organizations, particularly those near the front line and the Russian border. First seen on therecord.media Jump to article: therecord.media/russia-linked-cyber-spies-target-ukraine-war-support
-
Hackers Exploit WordPress Flaw Within 48 Hours of Security Patch
Attackers needed less than two days to start going after a freshly patched WordPress vulnerability. The flaw sits in WordPress core itself, and it can let an attacker run code on a website while that site is installing an update. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/wordpress-vulnerability-7-1-4-patch-attacks/
-
Russia-Aligned Gorbag Hackers Exploit WinRAR Flaw to Deploy Data-Stealing Malware
A Russia-aligned threat actor known as Gorbag has been observed using simple information stealer malware in attacks targeting Ukrainian organizations.”Active since at least February 2025, the group has focused exclusively on Ukrainian targets, with a clear preference for law enforcement and justice entities, local administrations near the front line, and the defense sector,” ESET researcher…
-
Microsoft Analyzes 383,000 Security Vulnerabilities and Reveals Which Flaws Hackers Exploit Most
Microsoft’s analysis of approximately 383,000 disclosed vulnerabilities shows that attackers overwhelmingly favor weaknesses enabling system takeover rather than exploiting vulnerabilities indiscriminately. The research identifies 2,056 CVEs linked to real-world exploitation, roughly 0.5% of the population, highlighting why vulnerability management must prioritize demonstrated attacker utility over disclosure volume or severity scores alone. Covering vulnerabilities published from…
-
Microsoft Analyzes 383,000 Security Vulnerabilities and Reveals Which Flaws Hackers Exploit Most
Microsoft’s analysis of approximately 383,000 disclosed vulnerabilities shows that attackers overwhelmingly favor weaknesses enabling system takeover rather than exploiting vulnerabilities indiscriminately. The research identifies 2,056 CVEs linked to real-world exploitation, roughly 0.5% of the population, highlighting why vulnerability management must prioritize demonstrated attacker utility over disclosure volume or severity scores alone. Covering vulnerabilities published from…
-
Harvard University data breach exposed info of 851,000 accounts
Hackers who breached Harvard University’s Alumni Affairs and Development systems in November 2025 stole data linked to more than 850,000 unique email addresses, according to breach notification service Have I Been Pwned. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/harvard-university-data-breach-exposed-info-of-851-000-accounts/
-
Hackers Exploit DLL Sideloading in Signed OpenAI and Anthropic Binaries to Deploy YobaLoader Malware
A campaign tracked as Yoba abuses interest in generative AI to push cryptocurrency-mining malware through fake GitHub projects. Check Point Research published its findings on October 27, 2026, after about two months of tracking. The operators pair legitimate, signed OpenAI and Anthropic executables with a malicious winmm.dll, so the payload loads through DLL sideloading. The…
-
Hackers Exploit DLL Sideloading in Signed OpenAI and Anthropic Binaries to Deploy YobaLoader Malware
A campaign tracked as Yoba abuses interest in generative AI to push cryptocurrency-mining malware through fake GitHub projects. Check Point Research published its findings on October 27, 2026, after about two months of tracking. The operators pair legitimate, signed OpenAI and Anthropic executables with a malicious winmm.dll, so the payload loads through DLL sideloading. The…
-
Hackers Exploit DLL Sideloading in Signed OpenAI and Anthropic Binaries to Deploy YobaLoader Malware
A campaign tracked as Yoba abuses interest in generative AI to push cryptocurrency-mining malware through fake GitHub projects. Check Point Research published its findings on October 27, 2026, after about two months of tracking. The operators pair legitimate, signed OpenAI and Anthropic executables with a malicious winmm.dll, so the payload loads through DLL sideloading. The…
-
Hackers Exploit BTCPay Server Flaw to Steal Bitcoin and Litecoin From Hot Wallets
BTCPay Server, a self-hosted, open-source cryptocurrency payment processor, has urged users to install the latest version of its software in response to reports of Bitcoin and Litecoin being stolen from hot wallets on instances running older versions.”Our investigation found that these attacks targeted servers running BTCPay Server 2.4.1 (released on 23 July 2026) or earlier,”…
-
North Korea Binance Heist: Pyongyang Denies $6.3B Hack
The FBI attributed the $6.3 billion Binance crypto heist to North Korean state hackers, sparking denials from Pyongyang amid ongoing asset recovery efforts. First seen on securityonline.info Jump to article: securityonline.info/binance-crypto-heist-north-korea/
-
Hackers Exploit Critical Magento StyleSmuggler Vulnerability to Deploy PSK Agent RAT and Hijack Servers
Attackers exploited the critical StyleSmuggler vulnerability in Magento and Adobe Commerce to deploy PSK Agent, a remote access trojan enabling command execution, traffic proxying, and persistent server access. The campaign ran September 913, 2026, targeting stores across Western Europe, North America, and Asia-Pacific. Imperva’s earlier analysis reports a CVSS score of 10.0 and exploitation preceding…