TheHackersNews

@zmgxukwfarucom

697 Following

15 Followers

TheHackersNews pfp

@zmgxukwfarucom

🚨 $1.9 BILLION Crypto Swap Site Seized! Germany’s BKA has shut down eXch[.]cx, a crypto exchange used by North Korean hackers & darknet actors. 🔍 €34M in crypto seized 📁 8 TB of data confiscated 🌐 Ran on clearnet + dark web Read full story ? https://t.co/b03Ef3LGYr

0 reply

0 recast

0 reaction

TheHackersNews pfp

@zmgxukwfarucom

🚨 Qilin Ransomware Surges to #1 A stealthy tool called NETXLOADER is fueling Qilin’s explosive growth—45 victims in April alone, across sectors like healthcare, finance, and tech. Find details here — https://t.co/N4ONWMY1I8

0 reply

0 recast

0 reaction

TheHackersNews pfp

@zmgxukwfarucom

Don’t let attackers turn your own tools against you. 🚨 @Bitdefender brings true innovation to endpoint security with the launch of GravityZone PHASR — the industry’s first solution to dynamically tailor hardening for each user. Learn more: https://t.co/4vjwJMxhSZ #Bitdefender https://t.co/NwyLM45Thb

0 reply

0 recast

0 reaction

TheHackersNews pfp

@zmgxukwfarucom

🚨 UPDATE - Darcula’s secret weapon exposed! NRK & Mnemonic uncover Magic Cat — a phishing toolkit behind 884K+ stolen cards in 7 months. 🔹 13M+ clicked links 🔹 600+ scammers 🔹 Real-time data & PIN capture 🔹 19K+ victims in Norway alone Dev behind it? A 24-year-old from https://t.co/TwvTi9UN06

0 reply

0 recast

0 reaction

TheHackersNews pfp

@zmgxukwfarucom

🚨 Zero-click. Wormable. Network-spreading. New flaws in Apple’s AirPlay protocol (🔓 AirBorne) could let hackers hijack your device without a click—then ride your Wi-Fi into corporate networks. CVE-2025-24252 + CVE-2025-24132 = silent RCE across Macs, TVs, speakers. Just being https://t.co/i7ZMYVfhlD

0 reply

0 recast

0 reaction

TheHackersNews pfp

@zmgxukwfarucom

🚨 Malicious Go modules are nuking Linux systems—wiping entire disks beyond recovery using hidden payloads. 🧨 3 GitHub-hosted packages posed as dev tools. Once run on Linux, they downloaded a script to overwrite /dev/sda—killing the OS. At the same time, npm & PyPI malware is: https://t.co/J7aqg6f3yI

0 reply

0 recast

0 reaction

TheHackersNews pfp

@zmgxukwfarucom

🚨 New Threat Unpacked: MintsLoader + GhostWeaver! A stealthy loader (MintsLoader) is being used in real-world phishing attacks to silently drop GhostWeaver—a persistent PowerShell-based trojan stealing browser data & hijacking systems. ?? Tactics include: — ClickFix social https://t.co/qB5OiGAaoq

0 reply

0 recast

0 reaction

TheHackersNews pfp

@zmgxukwfarucom

👤 Hackers aren’t cracking passwords anymore—they’re impersonating you. From AI deepfakes to social engineering, attackers now exploit weak links before and after login—like during account recovery or onboarding. 🔐 Orgs secure login, but not full identity lifecycle. Join free https://t.co/B235bRDbmb

0 reply

0 recast

0 reaction

TheHackersNews pfp

@zmgxukwfarucom

? What keeps CISOs awake at night this week? 🔸 0-days exploited before patches hit. 🔸 AI turning low-skill attackers into high-impact threats. 🔸 Identity systems being used against us — again. Security today demands strategic clarity. Every vulnerability is an opportunity https://t.co/HcT1gsVTXn

0 reply

0 recast

0 reaction

TheHackersNews pfp

@zmgxukwfarucom

A stealthy hacker-for-hire ToyMaker is selling access to top targets — leading straight to CACTUS ransomware attacks. 💰 They scan, hack, and hand over. 🛠? Malware: LAGTOY These brokers are speeding up ransomware ops. No espionage, just cash. Learn more: https://t.co/iKUBTC9UHq

0 reply

0 recast

0 reaction

TheHackersNews pfp

@zmgxukwfarucom

🛑 Critical SAP Exploit Alert! Hackers are abusing a flaw in SAP NetWeaver to drop JSP web shells—even fully patched systems are hit. Likely tied to CVE-2025-31324 (CVSS 10.0) | Allows unauthenticated file uploads via /metadatauploader. Details → https://t.co/uWvH68J5dK

0 reply

0 recast

0 reaction

TheHackersNews pfp

@zmgxukwfarucom

🔥 Critical Exploit Alert! A 9.0 CVSS flaw in Commvault Command Center lets hackers run code without logging in. 🎯 Targets versions 11.38.0–11.38.19 💥 Pre-auth SSRF → Remote Code Execution Learn more about CVE-2025-34028 here: https://t.co/Scx7xa4a96

0 reply

0 recast

0 reaction

TheHackersNews pfp

@zmgxukwfarucom

🔥 Google pulls the plug on third-party cookie prompts in Chrome. No more new pop-ups — just Incognito upgrades & IP protection by Q3 2025. While Firefox & Safari banned 3rd-party cookies in 2020, Google stalls—caught between privacy & profit. Read — https://t.co/MfZeUIcRtN

0 reply

0 recast

0 reaction

TheHackersNews pfp

@zmgxukwfarucom

🚨 Signed by Google. Hosted by Google. Hijacked by Hackers. 👀 Hackers sent real emails from [email protected] — fully verified, signed, no warnings. Victims handed over passwords, believing it was legit. ?? Real Google email ?? Fake login on Google Sites ?? Passed DKIM, SPF, https://t.co/VAEqejZq03

0 reply

0 recast

0 reaction

TheHackersNews pfp

@zmgxukwfarucom

?? Hold your phone near your card... and they drain your bank account. A new Android malware-as-a-service, SuperCard X, is targeting Italians with NFC relay attacks—letting cybercriminals remotely steal card data and pull off ATM & PoS fraud. 👉 Learn how it works: https://t.co/0vA9Tw1yRm

0 reply

0 recast

0 reaction

TheHackersNews pfp

@zmgxukwfarucom

AI is already in your SaaS. The real question: Do you know where—or how risky it is? Employees are using ChatGPT, bots, and AI tools without security oversight. Shadow AI is real—and your old playbook won’t catch it. 🔥 WEBINAR — Join AI security expert and learn: 📌 Real https://t.co/kdCHfOIgoz

0 reply

0 recast

0 reaction

TheHackersNews pfp

@zmgxukwfarucom

🚨 China-backed hackers are deploying TONESHELL v3, StarProxy, and stealth tools like SplatCloak to breach Myanmar targets—dodging EDR, logging keystrokes, and hopping across networks with FakeTLS tricks. ? 3 TONESHELL variants ? 2 new keyloggers (PAKLOG, CorKLOG) ? StarProxy https://t.co/11q34ceiwh

0 reply

0 recast

0 reaction

TheHackersNews pfp

@zmgxukwfarucom

🛑 CRITICAL ALERT → U.S. funding for MITRE’s CVE vulnerability database program ends Wednesday. MITRE warns: no funding = no new CVEs, degraded threat advisories, and slower incident response. 🛠? CVEs power security tools, alerts, and patching across critical infrastructure. https://t.co/hd0lY1O73m

0 reply

0 recast

0 reaction

TheHackersNews pfp

@zmgxukwfarucom

🚨 Threat ALERT: ResolverRAT is hitting healthcare and pharma sectors hard — phishing, fear-bait, stealth attacks. 🛡? Sophisticated multi-stage RAT 🌐 Localized lures: Hindi, Italian, Turkish + more 🕵??♂? Advanced evasion: encryption, IP rotation, memory-only payload 🔗 Read: https://t.co/6LLbHRjiWJ

0 reply

0 recast

0 reaction

TheHackersNews pfp

@zmgxukwfarucom

? Even patching won't save you. Fortinet confirms attackers kept read-only access to FortiGate devices after patching old flaws (CVE-2022-42475, CVE-2023-27997, CVE-2024-21762) via hidden symlink in SSL-VPN. Full details 👉 https://t.co/AbzC2WPo4r

0 reply

0 recast

0 reaction