Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

A new, highly evasive SquidLoader malware variant is targeting Hong Kong's financial institutions via phishing, bypassing antivirus and deploying Cobalt Strike Beacons.

Microsoft Copilot now features Desktop Share, allowing the AI to "see" and analyze your entire screen in real-time, offering enhanced assistance for projects and app navigation.

Google's GTIG reports ongoing attacks on SonicWall SMA 100 devices by UNC6148, using stolen credentials and the new OVERSTEP rootkit for persistent, undetectable control.

Matanbuchus 3.0, an enhanced MaaS loader, is bypassing defenses with new C2 protocols, obfuscation, and leveraging Microsoft Teams to deploy ransomware and Cobalt Strike.

A critical "Golden dMSA" flaw in Windows Server 2025's dMSAs allows attackers to compromise KDS root keys, enabling full, undetectable takeover of Active Directory.

A trivial "123456" password and Nexus Stealer malware on a Paradox.ai employee's device exposed data, potentially impacting Fortune 500 clients like Lockheed Martin.

lockc is open source software for providing MAC (Mandatory Access Control) type of security audit for container workloads.

A critical vulnerability (CVE-2025-4919) in Firefox's IonMonkey JIT compiler, demonstrated at Pwn2Own Berlin, allows out-of-bounds memory access, posing a significant risk.

Google's AI agent, Big Sleep, identified and neutralized a critical SQLite zero-day (CVE-2025-6965) that was actively known to threat actors, preventing its exploitation in the wild.

A new study exposes critical architectural flaws in Windows Hello for Business, allowing for biometric bypass and privilege escalation, undermining its passwordless security.

A new attack method demonstrates remote code execution on a secure system by exploiting interactions within a generative AI multi-component pipeline, bypassing traditional vulnerabilities.

Air Serbia is battling an ongoing cyberattack that has crippled internal operations, disrupted payroll, and potentially compromised Active Directory. An infostealer is suspected.

hoaxshell is an unconventional Windows reverse shell, currently undetected by Microsoft Defender and other AV solutions

Misconfigurations in Active Directory Certificate Services (ADCS) can introduce critical vulnerabilities into an Enterprise Active Directory environment, such as paths of escalation from low privileged accounts to domain administrator.

Active Directory Certificate Services (ADCS) is used for public key infrastructure in an Active Directory environment. ADCS is widely used in enterprise Active Directory environments for managing certificates for systems, users, applications, and more.

Hi hackers, Welcome to the latest edition of Bug Bytes! In this month’s issue, we’ll be featuring:  Exploiting Log4Shell (Log4J) in 2025  An indispensable GitHub recon tool (not the one you have in mi...