Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Well, it’s been quite the week or so for Google users. What with the news that Gmail passwords were confirmed as being included as part of…

A new series devoted to tech hacks explained by an actual hacker that you can use to set yourself apart from the woefully unprepared when…

Software Security has evolved over decades around predictable systems, Defined attack surfaces. It worked because software did exactly…

Vladimir Tsakanyan

Introduction: The Need for Lightweight Communication

Indivíduos de mau caráter não hesitam em explorar os bondosos e bem-intencionados. Diante da menor brecha, o objetivo é sempre o mesmo: obter vantagem às custas da ingenuidade alheia Há uma …

The new wave of job scams looks professional, convincing, and dangerously real. Posing as recruiters from trusted brands, scammers know…

Muitas pessoas ainda clicam em links suspeitos, usam antivírus gratuitos ou não sabem limpar seus dados pessoais.
 Este infográfico mostra…

Description: A ctf for beginners, can you root me?

October 2025

A comprehensive look at what it really takes to succeed in penetration testing

Apple’s ambitious 2026 roadmap features 15+ major products: iPhone 18, a foldable iPhone, M6 MacBooks with touchscreens, and a massive Apple Intelligence rollout.

SEQRITE exposed SkyCloak, an espionage campaign targeting Russian/Belarusian military personnel. It uses malicious LNK files to deploy OpenSSH over Tor obfs4 bridges for stealthy, persistent remote access.

Fortinet exposed TruffleNet, a massive BEC campaign using stolen AWS keys to exploit Amazon SES for email fraud. It abuses Portainer as a C2 and uses TruffleHog for reconnaissance.

Zimperium found 760+ Android apps exploiting NFC/HCE to steal payment data. The malware impersonates 20 banks across Russia, Poland, and Brazil, using Telegram for criminal coordination.

Researchers at Arctic Wolf Labs have uncovered an extensive cyber espionage campaign by UNC6384, a Chinese-affiliated threat actor, targeting European diplomatic entities across Hungary, Belgium, …

In a recent blog post, Google revealed that “in the last 12 months, fraudsters have used advanced AI tools to create more convincing schemes, resulting in over $400 billion in stolen funds globall…

Researchers at Gen Threat Labs have identified two new toolsets in active use by North Korean state-sponsored groups, underscoring the regime’s continued investment in advanced cyber-espionage and…

ASEC confirmed Kinsing is exploiting Apache ActiveMQ RCE (CVE-2023-46604) to deploy XMRig cryptominer. The group now integrates Sharpire, Cobalt Strike, and Meterpreter for advanced post-exploitation.

Silent Push found AdaptixC2, an open-source pen-testing framework, is now used by Russian cybercriminals and Akira RaaS. The developer's Russian-language activity suggests strong ties to the threat ecosystem.