Category: Hacker News

⚡ Weekly Recap: Drift Breach Chaos, Zero-Days Active, Patch Warnings, Smarter Threats & More
You Didn’t Get Phished — You Onboarded the Attacker
Noisy Bear Targets Kazakhstan Energy Sector With BarrelFire Phishing Campaign
Malicious npm Packages Impersonate Flashbots, Steal Ethereum Wallet Keys
CISA Orders Immediate Patch of Critical Sitecore Vulnerability Under Active Exploitation
TAG-150 Develops CastleRAT in Python and C, Expanding CastleLoader Malware Operations
SAP S/4HANA Critical Vulnerability CVE-2025-42957 Exploited in the Wild
Automation Is Redefining Pentest Delivery
VirusTotal Finds 44 Undetected SVG Files Used to Deploy Base64-Encoded Phishing Pages
GhostRedirector Hacks 65 Windows Servers Using Rungan Backdoor and Gamshen IIS Module
Russian APT28 Deploys “NotDoor” Outlook Backdoor Against Companies in NATO Countries
Simple Steps for Attack Surface Reduction
Google Fined $379 Million by French Regulator for Cookie Consent Violations
CISA Flags TP-Link Router Flaws CVE-2023-50224 and CVE-2025-9377 as Actively Exploited
Cybercriminals Exploit X’s Grok AI to Bypass Ad Protections and Spread Malware to Millions
Threat Actors Weaponize HexStrike AI to Exploit Citrix Flaws Within a Week of Disclosure
Detecting Data Leaks Before Disaster
Android Security Alert: Google Patches 120 Flaws, Including Two Zero-Days Under Attack
Iranian Hackers Exploit 100+ Embassy Email Accounts in Global Phishing Targeting Diplomats
Malicious npm Packages Exploit Ethereum Smart Contracts to Target Crypto Developers