For the latest discoveries in cyber research for the week of 28th July, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES The US Energy Department, including its National Nucl...

Surge in scanning activity targets MOVEit Transfer systems, raising concerns over possible exploitation.

BeyondTrust has released security updates to fix a high-severity flaw in its Remote Support (RS) and Privileged Remote Access (PRA) solutions that can let unauthenticated attackers gain remote code ex...

Work management platform Asana is warning users of its new Model Context Protocol (MCP) feature that a flaw in its implementation potentially led to data exposure from their instances to other users a...

Welcome to June! We’re back—this time, we're exploring Sitecore’s Experience Platform (XP), demonstrating a pre-auth RCE chain that we reported to Sitecore in February 2025. We’ve spent a bit of time...

According to reports, the US Department of Justice will assess whether the deal would harm competition in the cybersecurity market.

Email accounts of several Washington Post journalists were compromised in a cyberattack believed to have been carried out by a foreign government.

Three high-severity Tenable Agent vulnerabilities could allow users to overwrite and delete files, or execute arbitrary code.

GitLab has released security updates to address multiple vulnerabilities in the company's DevSecOps platform, including ones enabling attackers to take over accounts and inject malicious jobs in futur...

Exclusive: Incident responders suggested sweeping improvements following Active Directory database heist

Ivanti has released security updates to fix three high-severity hardcoded key vulnerabilities in the company's Workspace Control (IWC) solution.

OpenAI is working to fix an ongoing outage impacting ChatGPT users worldwide and preventing them from accessing the chatbot on the web or via mobile and desktop apps.

Recently, Microsoft changed the way the Entra Connect Connect Sync agent authenticates to Entra ID. These changes affect attacker tradecraft, as we can no longer export the sync account credentials…

A significant supply chain attack hit NPM after 15 popular Gluestack packages with over 950,000 weekly downloads were compromised to include malicious code that acts as a remote access trojan (RAT).

: It’s definitely not a cyberattack though! Really!

The U.S. Department of State has announced a reward of up to $10 million for any information on government-sponsored hackers with ties to the RedLine infostealer malware operation and its suspected cr...

Germany fined Vodafone $51 million for failing to protect user data from partners and unauthorized third-parties.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

LayerX has unearthed network of malicious “sleeper agent” extensions that appear to serve as infrastructure for future malicious activity, currently installed on nearly 1.5 million users worldwide.   ...

TechCrunch reports that leading trust management platform Vanta had private information from less than 4% of its over 10,000 clients inadvertently exposed to other customers due to a product code chan...

An international law enforcement operation has taken down AVCheck, a service used by cybercriminals to test whether their malware is detected by commercial antivirus software before deploying it in th...

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

: Hackers take personal data bytes from the brand with three stripes

AT&T had a database purportedly including 31 million sensitive user records exposed on a popular hacking forum, reports Cybernews.

: Downtime stings retailer, with technical recovery costs coming at a later date

SK Telecom says that a recently disclosed cybersecurity incident in April, first occurred all the way back in 2022, ultimately exposing the USIM data of 27 million subscribers.

Coinbase is going Liam Neeson on its attackers, potentially setting a new precedent for incident response in the wake of crypto- and blockchain-targeting cyberattacks.

International far-right media outlet The Epoch Times was reported by SafetyDetectives cybersecurity experts to have a database of 32 million records allegedly stolen from its systems leaked online, ac...

EXCLUSIVE: The tech biz was in the process of dropping the payroll company as it learned of the breach

The CFPB has decided to withdraw a 2024 rule that was aimed at limiting the sale of Americans’ personal information by data brokers.

Police disrupt cybercrime ops, malicious NPM package hides malware via Unicode, and spies leverage zero-day in enterprise messaging app.

On Thursday, CISA warned U.S. federal agencies to secure their systems against ongoing attacks exploiting a high-severity vulnerability in the Chrome web browser.

: They're smishing, they're vishing

Manipulating Git Histories to Obscure the Truth

Keeping your ears to the ground and eyes wide open for the latest vulnerability news at watchTowr is a given. Despite rummaging through enterprise code looking for 0days on a daily basis, our interest...

: One expert tells us: 'It is the most unique breach disclosure I've ever seen'

Insiders bribed at Coinbase leaked customer data (<1% of users), triggering $20M extortion; funds safe.

APT28 exploited MDaemon zero-day CVE-2024-11182 in targeted webmail hacks across 10+ nations.

Chrome flaw CVE-2025-4664 enables cross-origin data leaks; active exploit confirmed; update to 136.0.7103.113.

Microsoft announces a 3% workforce reduction (around 6,000 jobs) as part of a strategic restructuring to align with its AI-driven market strategy.

This post will examine the cryptography behind passkeys, the guarantees they do or do not give, and interesting cryptographic things you can do with them, such as generating cryptographic keys and sto...

A cybersecurity incident on Nucor Corporation's systems forced the company to take offline parts of its networks and implement containment measures.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Ivanti's Desktop & Server Management (DSM) product is an old acquaintance that we have encountered in numerous red team and internal assessments. The main purpose of the product is the centralized dis...

Microsoft began laying off nearly 3% of its entire workforce Tuesday, its largest mass layoff in more than two years.

Siemens RUGGEDCOM devices face CVSS 9.9 command injection flaws. Authenticated users can execute root-level code via web tools. Patch to V2.16.5 now.

​Ivanti has released security updates for its Neurons for ITSM IT service management solution that mitigate a critical authentication bypass vulnerability.