US Ransomware Negotiator Suspected of Helping ShinyHunters Extort Victims
Federal investigators suspect a US ransomware negotiator helped ShinyHunters operate an extortion site used to pressure nearly 100 organisations.
Hack Read
Please support the site operations by clicking ads.
Bright Security Introduces STAR Fuzzer, Agentic Fuzzing That Writes Its Own Harnesses and Proves Every Finding
San Rafael, United States, 19th October 2026, CyberNewswire
Fake Calendar Invites Target 40,000 Firms in Microsoft Credential Theft
More than 40,000 organisations have received fake calendar invitations designed to steal Microsoft account credentials, according to new…
OpenAI Model Hacked Crypto Wallet and Spent Funds to Deploy Smart Contracts
OpenAI disclosed that an internal AI model hacked a crypto wallet and spent Sepolia test ETH without permission…
Claude Code Desktop Flaw Let Malicious HTML Steal Developer Credentials
Noma Labs found a high-severity Claude Code Desktop flaw that let malicious HTML files steal local credentials and…
MDR vs EDR vs SOC: What You’re Actually Buying in 2026
MDR vs EDR vs SOC explained for 2026, covering tools, monitoring, incident response, staffing and how each option supports CMMC compliance.
Burger King Japan Data Breach Impacts 11.18 Million App Member Records
The Burger King Japan data breach occurred between October 2 and 7, exposing emails, birth dates and other…
Targeted Ads Used to Infect Al Jazeera Devices with Candiru Spyware
Citizen Lab found targeted ads delivered Candiru spyware to Al Jazeera devices without clicks, while the same ad…
Vibetech Database Exposes 13.7M Records Including AT&T and FBI Data
An misconfigured Vibetech database exposed 13.7 million records from previous breaches, including AT&T, Casio and FBI data, passwords and bank details.
Anthropic Warns Small AI Models Could Power Self-Spreading AI Worms
Anthropic finds small AI models can set up inference servers across different hardware, raising concerns about future AI…
Microsoft Seizes YAM Store and Phishing Kit Domains Linked to 1B Malicious Messages
Microsoft and Health-ISAC seize domains linked to YAM Store, CoGUI and Iron Man, services that enabled over 1…
What Your IP Address Reveals Every Time You Visit a Website
Your IP address can reveal your location, ISP, connection type, and VPN use to websites, ad networks, and trackers before a page even loads.
Private Instagram Downloaders Are Parsers, Not Privacy Bypass Tools
Disclosure: This article was produced in partnership with FastDL. Hackread.com reviewed and edited the content before publication. “SaveVid.Net…
FLock.io Unveils Edge Decision Model, Built on Qwen, for Enhanced Data Privacy
Built on Qwen3.5-2B, the System One model executes sub-31ms local inference, allowing enterprises to run automated classifications quickly, at low cost and completely offline without transmitting sensitive data to third-party cloud servers.
Check Point Reports LiteLLM Flaws Enabling Admin Takeover and API Key Theft
Check Point Research found two LiteLLM vulnerabilities that could let low-privilege users execute code, access sensitive files, hijack admin accounts, and steal AI provider API keys.
Microsoft Fixes 1,413 Vulnerabilities in Record October Patch Tuesday Update
Microsoft addressed 1,413 security vulnerabilities in its October 2026 Patch Tuesday update, making it the company’s largest monthly…
AI Scams Target Crypto Users, Not Protocols, and Wallet Security Is Catching Up
Picture a composite case drawn from documented scams where a tech professional spends forty minutes on a video…
Best NinjaOne Alternatives for Endpoint, Patch, and Vulnerability Management
Compare the best NinjaOne Alternatives for endpoint management, patch management, remote monitoring, IT automation and MSP security workflows.
MS Teams Phishing, ClickFix and Shai-Hulud npm Attacks Dominate Threat Report
Ontinue’s 1H 2026 threat report shows attackers increasingly abusing Microsoft Teams, npm packages, device-code logins and blockchain ClickFix…
SerpApi Expands Beyond Search Results with New Extract API
New API enables developers to extract structured content, discover website pages, and perform bounded crawling, all within the SerpApi workflow
