News4hackers

Retired official in Pune lost ₹1.15 crore to a fake trading app campaign promoted via social engineering.

Researchers found over 50,000 exposed Stripe API keys, increasing fraud and payment compromise risk for merchants.

Medusa ransomware campaign now affects 500+ organizations and increasingly targets critical infrastructure sectors.

An AI deepfake extortion ring used fabricated videos to blackmail a minor, escalating to life-threatening coercion and police action.

Evooo1Bot Mirai-based botnet infects routers and IoT edge devices, converting them into persistent SOCKS5 proxy/traffic relay nodes.

Metabase zero-day impacted Salesforce and ServiceNow portals, exposing long-running data leakage and authentication bypass risk to enterprise tenants.

Threat actors exploited a service-provider vulnerability to withdraw funds in a massive bank fraud affecting multiple customers and banking services.

Critical vulnerabilities discovered in Belgian eID software put two million users at risk of identity compromise.

Contractor in Indore defrauded of ₹1.5 crore via fabricated loan documents and identity abuse, probe widening.

Critical Ruflo vulnerability allows unauthenticated attackers to spawn persistent malicious AI agent swarms and corrupt memory post-patch.

VERITAS project aims to secure AI models, datasets, and automated research systems against model and data attacks.

JadePuffer resurfaces deploying ransomware designed to encrypt or wipe AI models, datasets and vector DBs.

Rise in deceptive QR-code scams leading to credential theft, fraudulent payments and account takeover attempts.

Vulnerabilities in cloud-connected baby monitors and cameras exposed nearly one million devices and private video data.

Fortinet VPN credential exposure affects ~73k devices; patch now and rotate credentials to reduce risk.

High-severity vulnerability in NGINX-related stack exposed services to DoS; ensure patches are applied and traffic is filtered from untrusted sources.