Huawei zero-day attack behind last year’s crash of Luxembourg's entire telecoms network

There is no evidence that the incident has recurred, but the flaw remains unexplained and has not been publicly acknowledged by the company.

Trapdoor Android Ad Fraud Scheme Hit 659 Million Daily Bid Requests Using 455 Apps

Trapdoor used 455 Android apps and 183 C2 domains, generating 659M daily bid requests and fueling ad fraud.

Universal Robots patches critical 9.8 flaw in ‘cobots’ OS

Critical flaw in Universal Robots cobots could let attackers hijack production systems remotely.

B1ack’s Stash Marketplace Gives Away 4.6 Million Stolen Credit Cards

The stolen credit card data was released as a free download, allegedly in response to seller misconduct.

Legacy Microsoft Utility Fuels New Wave of Malware

Cybercriminals continue abusing Microsoft’s legacy MSHTA utility to deliver malware, with researchers saying that the default-enabled Windows component remains a

Drupal to Release Urgent Core Security Updates on May 20, Sites Told to Prepare

Drupal plans May 20 core security patches as exploits may follow within hours or days, requiring urgent site updates.

Pwn2Own Berlin 2026 Closes With $1.3 Million in Zero-Day Payouts

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

7-Eleven Data Breach Confirmed After ShinyHunters Ransom Demand

The hackers claimed to have stolen more than 600,000 Salesforce records, including personal information and corporate data.

NYC Health + Hospitals says hackers stole medical data and fingerprints during breach affecting at least 1.8 million people | TechCrunch

The New York public healthcare system said hackers stole personal and medical data, and scans of biometrics — including fingerprints — in one of the largest recorded breaches of 2026.

Exploitation of Critical NGINX Vulnerability Begins

The flaw leads to denial-of-service on default configurations and to remote code execution if ASLR is disabled.

‘Patched’ Windows bug resurfaces 6 years later as working SYSTEM-level exploit

Elevation of privilege flaw in Cloud Filter driver reappears, raising concerns over regression vulnerabilities in Windows.

More than $10 million stolen from crypto platform THORChain

THORChain officials said the investigation into the incident is ongoing but explained that one of their six vaults was compromised, leading to a loss of about $10.7 million.

American Lending Center Data Breach Affects 123,000 Individuals

The non-bank lender discovered a ransomware attack nearly one year ago, but only recently completed its investigation.

Critical ‘Claw Chain’ Vulnerabilities Put Thousands of OpenClaw AI Servers at Risk

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Email

CVE-2026-42897 is exploited in on-prem Exchange; crafted emails enable spoofing, forcing urgent mitigation.

Grafana Says It Rejected Ransom Demand After Source Code Theft

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread