RondoDox botnet exploits old ASUS router flaw CVE-2018-5999, hijacking unsupported devices for DDoS attacks in active campaigns.

Europol completely dismantles 'First VPN,' seizing 33 servers and uncovering an underground database used by thousands of global ransomware operators.

Read the latest Gafgyt malware analysis revealing how the dangerous COXMO botnet variant spreads via standalone scripts.

Malware Family: AryStinger Threat Actor: Unknown (Suspected) Victims: Over 4,000 legacy D-Link routers and NAS systems Delivery Vector: Exploitation of older CVEs Key Capabilities: Traffic proxyin…

At a Glance Malware family RustDuck Threat actor Unattributed Targets / victims IoT devices, web apps, and enterprise servers; 59 victim IPs and 203 attack incidents in XLab telemetry Delivery vec…

A New Breed of Cloud Warfare Cloud infrastructure represents a modern battleground. This conflict occurs not merely between cybersecurity defenders and malicious actors. Surprisingly, rival cyberc…

At a Glance Actor Russian-speaking solo actor using the handle “bandcampro” Activity type AI-assisted C&C botnet, password attacks, fraud planning Targets Eight PCs at a dental cli…

A proxy software development kit (SDK) named Popa has been exposed, capable of transforming mobile phones, TV boxes, and…

Follow us on all major social media platforms @Hackread

Unveiling Operation STANDOFF A singular malicious installer served as the entry point into a vast criminal ecosystem that concurrently compromised endpoints, exfiltrated sensitive data, hijacked v…

At a glance Malware family: Kimwolf (also tracked as AISURU) Threat actor: Unknown (Operators manage both Linux IoT and Android variants) Target or victims: Android TV boxes and set-top boxes Deli…

At a Glance Malware family Sality peer-to-peer (P2P) botnet; EggJagger clipper payload Threat actor Single operator (unnamed); attribution not publicly confirmed Victims Over 15,000 infected machi…

The United States successfully seized the domains of two prominent hacking platforms. The Department of Justice and the FBI allege the Chinese state-sponsored group QTFY operated these platforms. …

At a Glance Malware family XMRig cryptominer deployed via Redis abuse Threat actor Unnamed operator (suspected single actor, linked by wallet reuse) Target / victims 3,562 internet-facing Redis se…

The relay is a rented truck. The quartermaster runs the depot.

TL;DR A KGUARD DVR vulnerability now tracked as CVE-2026-87827 carries a maximum CVSS score of 10.0. It lets an unauthenticated attacker run commands and fully take over the device. Mirai botnets …

At a Glance Malware family ClingSTUN, a Linux back-connect proxy backdoor Threat actor Unknown; no attribution Targets Internet-facing IoT and edge devices; victim counts not disclosed Delivery ve…

Experiments show cheap TV boxes can run capable AI models, and small models may soon be able to spread across such devices on their own.

Experiments show cheap TV boxes can run capable AI models, and small models may soon be able to spread across such devices on their own.

A Forgotten Backdoor on Millions of PCs An abandoned build of Popcorn Time kept a dangerous mechanism on millions of computers for years. Through it, anyone could quietly run code with top system …