Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

AerynOS, a Linux distro from the creator of Solus, releases a new update. While still in alpha, version 2025.08 brings new desktops and installer options.

Ten severe vulnerabilities, including critical remote code execution flaws, were found in industrial controllers that manage refrigeration for major retailers.

The Pennsylvania Attorney General's Office suffered a ransomware attack that encrypted its files and crippled its servers, delaying civil and criminal proceedings.

A new report reveals the Silver Fox APT is using a Microsoft-signed vulnerable driver to bypass security solutions and deploy the ValleyRAT trojan.

Laravel creator Taylor Otwell warns developers against building overly complex applications and straying from the framework's core principles.

Cisco Talos found over 1,100 publicly exposed Ollama servers. The lack of basic security leaves these local AI models vulnerable to attack.

A new report reveals that Android droppers are evolving to bypass Google's Pilot Program, delivering a wider range of malware than ever before.

A new malicious npm package, nodejs-smtp, is impersonating a popular email library to secretly hack cryptocurrency wallets and steal funds.

A major breach at Salesloft exposed authentication tokens, triggering a global threat cascade and putting hundreds of companies at risk.

A security researcher discovered a critical flaw in Pudu Robotics' systems, allowing her to control its fleet of service robots from afar.

A new report reveals a malicious campaign using Google Ads to promote a fake PDF editor, which covertly installs the TamperedChef infostealer.

Google will host a special event to unveil Gemini for Home, a new AI-powered assistant that promises a more integrated and proactive smart home experience.

The Envoy Project has patched two new vulnerabilities: a use-after-free bug that can lead to DoS (CVE-2025-54588) and a session-hijacking flaw in its OAuth2 filter.

Google Play Services now backs up Android's anti-theft settings to the cloud. This small change ensures your phone stays protected even after a factory reset.

OpenAI has acquired Statsig for $1.1 billion and announced a major restructuring of its leadership, signaling a new focus on its applications business.

Google has released Chrome 140, patching six vulnerabilities including a high-severity use-after-free flaw in the V8 JavaScript engine that could allow for remote code execution.

I missed an AI bug that ended up costing me a place in the top 5 at the DEFCON 33 Bug Bounty Village CTF.

Hey depressed people, after a banger response from the previous article on JWT, part1. I am back again with Part 2 of it. As I already…

Enhance your application security with a comprehensive application security risk assessment. Identify vulnerabilities, ensure compliance…