Unpacking Russian-Iranian Private-Sector Cyber Connections

Reuters reported on April 7 that Ukraine is claiming that Russia is supplying Iran with “cyber support,” citing alleged interactions between Russian cybercriminal hackers and Iranian hacker groups. Th...

Massive AI investment scam network spans 15,500 domains

AI investment scammers abused the Keitaro ad-tracking platform to cloak their campaign except for possible targets

Polish intelligence warns hackers attacked water treatment control systems

The agency did not publicly attribute the incidents to a specific group or country but said Poland faced intensified hostile cyber activity in 2024 and 2025, “with particular emphasis on the special s...

Ivanti EPMM CVE-2026-6973 RCE Under Active Exploitation Grants Admin-Level Access

Ivanti EPMM flaw CVE-2026-6973 exploited in limited attacks; CISA mandates fixes by May 10, 2026, increasing urgency.

Cline Kanban Flaw Lets Websites Hijack AI Coding Agents

Oasis Security finds critical Cline kanban WebSocket flaw exposing AI coding agents to hijack

60% of MD5 password hashes are crackable in under an hour

Happy World Password Day! Maybe it's finally time to kill this holiday in favor of World No-More-Passwords Day?

AI Coding Agents Could Fuel Next Supply Chain Crisis

“TrustFall” attack shows how AI coding agents can be manipulated into launching stealthy supply chain compromises.

Google Chrome Accused of Silently Installing 4GB AI Model on User Devices

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

OpenAI and Anthropic LLMs Used in Critical Infrastructure Cyber-Attack

Commercial AI models were used to help plan and conduct cyber-attack against operational technology of a water and drainage facility, say researchers

Critical Redis Vulnerabilities Enables Remote Code Execution Attacks

Five high-severity Redis flaws enable remote code execution across Redis Cloud, Redis Software, and community editions.

Malicious NuGet Packages Target Browser Credentials, SSH Keys, and Crypto Wallets

Rogue NuGet packages mimicked trusted .NET libraries to steal creds, SSH keys, and crypto wallet data from developers.

Google Fixes CVSS 10 Gemini CLI Vulnerability Enabling GitHub Issue-Based RCE

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Palo Alto PAN-OS Flaw Under Active Exploitation Enables Remote Code Execution

CVE-2026-0300 exploited via public PAN-OS portal before May 13, 2026 patch, enabling root RCE on firewalls.