Tag: hacker
-
Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware
A newly identified advanced persistent threat (APT) group tracked as UAT-11473 was observed exploiting CVE-2026-20127, an authentication-bypass flaw in Cisco Catalyst SD-WAN Controllers, to deploy a custom malware framework called KeyDrift. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-exploit-cisco-sd-wan-flaw-to-deploy-custom-keydrift-malware/
-
Sony ISP Breach Exposes 2.6 Million User Records
Japan Prepares Emergency Cybersecurity Measures Amid Corporate Breach Wave. A major Japanese internet service provider operated by a Sony subsidiary acknowledged Tuesday that hackers stole roughly 2.6 million subscriber records, a breach that’s the latest in a string of cyber incidents prompting the government to pledge a package of emergency measures. First seen on govinfosecurity.com…
-
Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls
China-nexus threat actors have exploited a VMware ESX zero-day to hide their tracks and chained PHP2Shell flaws with the >>Fragnesia<< Linux kernel bug to root … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/29/php2shell-fragnesia-vmware-esx-zero-day/
-
Hackers could poison AI models by tampering with core infrastructure
AI systems rely on a complex web of hardware. Compromising any one component could let adversaries change model weights. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-hardware-model-tampering-eclypsium/873177/
-
University of New Mexico restores hospital systems, urges no contact with hackers
The University of New Mexico was able to restore systems used by its healthcare facilities after a cyberattack forced it to divert ambulances and cancel classes at its medical school. First seen on therecord.media Jump to article: therecord.media/new-mexico-cyberattack-hospital
-
Chinese Hackers Exploit VMware ESXi Zero-Day to Target Law Firms in Cyber Espionage Attacks
Chinese state-linked hackers have exploited a zero-day vulnerability in VMware ESXi during espionage operations aimed at U.S. law firms, according to CrowdStrike’s latest assessment of threats affecting the legal sector. The activity is attributed to WARP PANDA, a China-nexus adversary that deployed malware in victims’ VMware vCenter environments. This series of intrusions, which continued into…
-
A Hacker Targeted High-Stakes Poker Players With Malware That Exposed Their Cards
Illicit software on the computers of some of the world’s best online poker players allowed the accused cheater to see what cards were in the victims’ hands”, and trounce them at the tables. First seen on wired.com Jump to article: www.wired.com/story/a-hacker-targeted-high-stakes-poker-players-with-malware-that-exposed-their-cards/
-
Volt Typhoon Hackers Exploit Multiple Zero-Days to Breach U.S. Critical Infrastructure Networks
Tags: access, breach, china, cyber, data-breach, exploit, framework, group, hacker, hacking, infrastructure, network, vulnerability, zero-dayChinese state-sponsored hacking group Volt Typhoon has exploited multiple previously unknown vulnerabilities in enterprise management platforms to penetrate strategically significant organizations. Its investigation exposed Silent Train, a covert access framework built from rapidly rotating chains of compromised devices. Over three years, Black Lotus Labs issued hundreds of victim notifications, helping investigations uncover four confirmed zero-day…
-
Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys
Hackers exploited a critical Cisco Catalyst SD-WAN flaw, fixed in February, to plant custom malware inside the systems that control an organization’s SD-WAN network.The malware, called KeyDrift, is designed to copy the keys that encrypt traffic between sites and store them for later use, Cisco Talos said on October 28. Talos calls the attacks historical…
-
Cloudflare Image Transformation Flaw Allows Hackers to Bypass CSP and Execute Malicious JavaScript
Security researchers have demonstrated an attack chain against Cloudflare’s Image Transformations service that bypasses SVG sanitization and Content Security Policy (CSP), enabling malicious JavaScript execution on a targeted website’s origin. Published on October 28, 2026, the research combines an XML serialization flaw, Chromium cache behavior, and redirects that circumvent image source restrictions. Exploitation depends on…
-
China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility
Tags: attack, china, crowdstrike, cve, cybersecurity, exploit, flaw, hacker, infrastructure, kev, threat, vmware, vulnerability, zero-dayThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities (KEV) catalog, after CrowdStrike revealed that it had been weaponized by a China-nexus threat actor known as Warp Panda in attacks targeting the U.S. legal sector.The vulnerability in question is CVE-2026-41709 (CVSS…
-
China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility
Tags: attack, china, crowdstrike, cve, cybersecurity, exploit, flaw, hacker, infrastructure, kev, threat, vmware, vulnerability, zero-dayThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities (KEV) catalog, after CrowdStrike revealed that it had been weaponized by a China-nexus threat actor known as Warp Panda in attacks targeting the U.S. legal sector.The vulnerability in question is CVE-2026-41709 (CVSS…
-
Japan Airlines warns of data breach as country grapples with multiple cyber incidents
Hackers stole passport numbers, frequent flyer numbers, email addresses and phone numbers for about 2,000 customers. First seen on therecord.media Jump to article: therecord.media/japan-airlines-warns-of-breach-country-grapples-with-incidents
-
Smashing Security podcast #490: How Jared Kushner’s iPhone was allegedly hacked twice
Dutch spies, Russian hackers and Jared Kushner’s iPhone. It sounds like the ingredients for a thriller, but according to claims in a new book the US President’s son-in-law may have been hacked twice. Is any of it true, and what does it tell us about the phones in our pockets? First seen on grahamcluley.com Jump…
-
Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents
A hacker obtained personally identifiable information about more than 40,000 Homeland Security staffers, which has since been published online. First seen on techcrunch.com Jump to article: techcrunch.com/2026/10/28/hacker-stole-personnel-data-about-thousands-of-homeland-security-employees-including-cbp-and-ice-agents/
-
Hackers Turn Compromised Websites Into Fake Cloudflare Verification Traps for Windows and Mac Users
Attackers are using compromised websites to present fake Cloudflare verification pages that steer Windows and macOS users toward executing malicious commands. The findings establish a delivery attempt, not a confirmed infection or identified malware family. The activity exploits the familiarity of browser security checks. Instead of completing a legitimate verification, visitors receive instructions intended to…
-
CyberDakait Hackers Target Indian Banking Users, Compromise 17,960 Android Devices
CyberDakait, a financially motivated Android malware operation targeting Indian banking customers since July 2025. Researchers identified at least 17,960 compromised devices and 7,611,443 intercepted SMS messages, exposing a campaign that combines banking credential theft, remote device control, and cryptocurrency mining. Although their technical implementations differ, Group-IB clusters them together because of overlapping distribution methods, phishing…
-
Hackers Exploit PHP2Shell Vulnerabilities to Gain Root Access on 25 Firewall Servers
Tags: access, credentials, cyber, data-breach, exploit, firewall, flaw, government, hacker, linux, theft, vulnerabilityHackers chained PHP2Shell vulnerabilities with a Linux kernel privilege escalation flaw to gain root access on 25 servers, including three systems associated with a United States government-affiliated environment, according to Dream researchers. Discovered on October 25, the operation progressed from exposed firewall management interfaces to credential theft, persistent tunneling, and Active Directory reconnaissance. Dream recovered…
-
Summit Public Schools Breach Exposes 115 GB of Student and Staff Data
A hacker has leaked 115 GB of Summit Public Schools data containing billions of lines, student and staff… First seen on hackread.com Jump to article: hackread.com/summit-public-schools-breach-student-staff-data/
-
Summit Public Schools Breach Exposes 115 GB of Student and Staff Data
A hacker has leaked 115 GB of Summit Public Schools data containing billions of lines, student and staff… First seen on hackread.com Jump to article: hackread.com/summit-public-schools-breach-student-staff-data/
-
Summit Public Schools Breach Exposes 115 GB of Student and Staff Data
A hacker has leaked 115 GB of Summit Public Schools data containing billions of lines, student and staff… First seen on hackread.com Jump to article: hackread.com/summit-public-schools-breach-student-staff-data/
-
Japan’s GMO Group Offers $1M Bounty for Hacker’s Identity
Extortion Group Holding to Ransom Data Stolen From Virtual Private Server Customers. Japan’s GMO Internet Group is offering a bounty of up to $1 million for information that helps unmask whoever hacked the company’s infrastructure, gaining access to over 25,000 virtual private servers and infecting customers’ home PCs with data-stealing malware when they remotely connected.…
-
Hackers seize on vulnerable IoT devices to spy, pivot and route traffic
Known vulnerabilities with available patches are by far the biggest risk facing connected devices, a new report found. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/internet-of-things-vulnerabilities-proxies-netgear-bitdefender/873033/
-
Belarusian hackers increasingly acting as proxies for Russia amid war in Ukraine
Belarus-linked hackers are increasingly aligning their cyber operations with Russia’s interests in Ukraine, researchers said Wednesday. First seen on therecord.media Jump to article: therecord.media/belarus-russia-hackers-ukraine-war
-
Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch
Tags: business, cve, flaw, hacker, intelligence, oracle, rce, remote-code-execution, threat, update, vulnerabilityThreat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), according to threat intelligence firm Defused Cyber.The vulnerability in question is CVE-2026-101767 (CVSS score: 9.8) in the Oracle Application Object Library of Oracle E-Business Suite. It was patched by Oracle last week as part of its Critical Patch…
-
Hackers Use Fake Phantom, Jupiter, and Bitget Firefox Extensions to Target Cryptocurrency Wallets
Three malicious Firefox extensions impersonating Phantom, Jupiter, and Bitget to steal cryptocurrency wallet recovery phrases and private keys. The campaign combines deceptive branding, bundled credential stealers, and remotely delivered JavaScript, with stolen information routed through infrastructure under bonto[.]io. All three listings were removed before Socket published its findings on October 27, 2026. Phantom’s impersonator advertised…
-
Ukrainian ransomware hacker sentenced, $11 million reward offered for co-conspirator
A Ukrainian national who participated in ransomware attacks targeting hospitals, government entities, law firms, and other businesses was sentenced to five years and 10 months … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/28/doj-ukrainian-ransomware-hacker-sentenced/
-
Hackers now scanning systems for recently-patched Oracle flaw
Attackers have begun probing the Internet for systems unpatched against a recently disclosed critical Oracle E-Business Suite (EBS) vulnerability. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-now-scanning-systems-for-recently-patched-oracle-flaw/
-
Hackers Reuse XWorm Malware Loader Across Phishing Campaigns Targeting Colombia and the UK
A judicial-themed phishing campaign targeting Colombian organizations that delivers XWorm through obfuscated scripts, encrypted PowerShell, and a reusable .NET loader. The recovered loader is binary-identical to one documented in a September 10, 2026, UK-linked case, connecting otherwise differently packaged delivery chains. The overlap establishes loader reuse, not common attribution. Different payload hashes, execution targets, and…
-
OWASP Warns AI Agents Are Making Cyberattacks Easier for Less-Skilled Hackers
OWASP has issued a warning that AI agents and chatbots are reducing the skills required for certain aspects of cyberattacks, particularly in areas like target discovery and vulnerability research. Their latest research indicates that beginners can advance by utilizing AI guidance; however, human expertise remains essential when tools fail or when dealing with complex attacks.…