Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

promptfoo is an open-source CLI and library that helps you build reliable and secure LLM apps with automated red teaming, evaluation, and RAG benchmarks.

North Korean hackers have stolen a record $2B in crypto assets in the first nine months of 2025, with funds reportedly used to finance the country's nuclear program.

CISA warns that an old Windows CLFS flaw (CVE-2021-43226) is being actively exploited again, allowing local attackers to escalate privileges for full system takeover.

The Scattered Lapsus$ Hunters group is offering a $10 crypto bounty to users who spam executives of victim companies to pressure them into paying a ransom.

OpenSSH 10.1 is released with a critical fix for shell injection, a new warning for weak crypto, and socket relocation for enhanced security and performance.

Redox OS, the Rust-based operating system, now supports multithreading by default on x86, delivering a significant boost in performance and stability.

Google DeepMind has unveiled CodeMender, an AI agent that uses Gemini to automatically detect, repair, and harden software code against vulnerabilities like buffer overflows.

Abracadabra.money suffered its third exploit in two years, losing $1.7M after attackers exploited an outdated token pool to mint 1.79M MIM stablecoins.

A critical 10/10 RCE flaw (CVE-2025-49844) has been found in Redis. The flaw, active for 13 years, allows unauthenticated attackers to execute arbitrary code.

"Vibe coding," or adapting AI-generated code, is becoming widespread, but it introduces security risks by lacking provenance and inheriting old vulnerabilities.

French prosecutors have opened an investigation into Apple's Siri, prompted by whistleblower claims that the voice assistant recorded and analyzed user conversations without consent.

The Medusa ransomware group, Storm-1175, has been actively exploiting a critical, unauthenticated GoAnywhere MFT flaw (CVE-2025-10035) for initial network access.

A massive fire at South Korea's national data center (NIRS) has paralyzed 647 government services and destroyed all backups, with full recovery expected to take weeks.

LinkedIn has filed a lawsuit against ProAPIs for allegedly using millions of fake accounts to scrape and resell user data for up to $15,000 per month.

The differences between a VDP, BBP, and PTaaS, and how a combination might benefit your cybersecurity strategy.

Every hacker dreams of finding that one big, high-impact vulnerability — the kind that makes your heart race and your inbox light up with…

Cloud Application Security Market Introduction:

→ I suggest that you first complete this room for better understanding

How I turned a 128GB USB drive into my ultimate cybersecurity lab — and the mistakes you can avoid.

In an increasingly interconnected digital landscape, the robustness of an organization’s cybersecurity posture directly shapes its market…