MonsterCloud's Owner Charged with Fraud for Secretly Paying Ransoms
PremiumDoJ charged MonsterCloud owner Zohar Pinhasi for wire fraud, alleging secret ransom payments and overbilling of victims.
§Source · The Hacker News
The Hacker News
Every dispatch we have aggregated from The Hacker News.
All dispatchesFriday, October 9
Cyber Attackers Breach ccTLDs to Forge Google Domain Certificates
PremiumAttackers compromised .gh, .sl and .as registries to obtain unauthorized HTTPS certificates for several Google domains, enabling impersonation.
SonicWall Releases Critical Patch for SMA1000 SSRF Vulnerability
PremiumSonicWall released hotfixes for four SMA1000 flaws; most serious was a CVSS 10.0 pre-auth SSRF potentially reaching internal functions.
Critical LMCache Vulnerability Exposes Servers to Remote Code Execution
PremiumCritical unauthenticated RCE in LMCache (LLM cache servers) allows remote code execution; no fixed version available yet.
Wazza Phishkit: A New Threat to Banking, Government, and Manufacturing
PremiumWazza phishkit delivers advanced session management and filtering to target banking, government, and manufacturing, improving credential harvesting success.
Tensorlake npm Package Compromise Exposes Developer Secrets
PremiumMalicious tensorlake npm release deploys Shai-Hulud worm stealing developer secrets and spreading through developer systems.
FortiBleed Threat: FBI and Secret Service Issue Urgent Warning
PremiumFBI and Secret Service warn FortiBleed remains active, harvesting Fortinet credentials and locking out admins; urgent mitigations required.
Wednesday, October 7
Inside the Vulnerabilities of Public MCP Servers: A Wake-Up Call for Security
OX Security found critical MCP protocol vulnerabilities in thousands of public servers exposing AI agent infrastructure risk.
Cling Botnet Exploits Realtek SDK Flaw Using STUN Protocol
Exploit attempts against Realtek Jungle SDK attempt to deliver Cling botnet that uses STUN-based command-and-control channels.
Linux Backdoors Masquerade as Email Security Tools in Asia
Linux backdoors target telecom/network appliances in Korea and Taiwan, impersonating email services to evade detection.
FBI Severs Ties with Contractor After Data Breach Reveals Security Lapse
FBI removed an Accenture contractor after a missed patch contributed to a ShinyHunters breach exposing bureau employee data.
ClickFix Attack Exploits Browser Cache to Deliver Malicious Payloads
ClickFix prefetches payloads into browser cache disguised as PNGs to bypass Run limits and execute malicious scripts.
Massive Data Breach in Denmark's National Registry Exposes Millions
Attackers abused a company's authorized access to expose 8.8 million Danish citizens' personal data.
Monday, October 5
Key Arrest in ShinyHunters Case Aids FBI Investigation
PremiumA suspected ShinyHunters member 'Rey' was reportedly detained in Jordan and is cooperating with the FBI to ID other group members.
TA419's Sophisticated Phishing Campaign Targets U.S. AI Policy Experts
PremiumTA419 is running Microsoft AitM-style phishing campaigns to steal credentials from U.S. AI policy experts at think tanks and universities.
Friday, October 2
OpenAI Thwarts Unauthorized AI Reasoning Extraction Linked to Moonshot AI
PremiumOpenAI says it disrupted a distillation campaign attributed to Moonshot AI aimed at extracting protected model reasoning.
MetaMask Addresses Security Incident, Initiates Validator Exit
PremiumMetaMask reports ongoing infrastructure security incident prompting exit of affected Ethereum validators; no immediate wallet compromise reported.
Sophisticated Phishing Campaign Targets US C-Suite with Microsoft 365 and Remote Access Tools
PremiumC-Suite phishing campaign steals Microsoft 365 sessions then deploys RMM tools to establish remote access across US targets.
Bitget Suffers Massive $387.5M Crypto Heist Due to Zero-Day Exploit
PremiumBitget attributes $387.5M crypto theft to a third-party zero-day in security tooling, per SlowMist findings.
Exploitation of Citrix NetScaler Vulnerability Leads to Security Breaches
PremiumThreat actors exploit Citrix NetScaler pre-auth flaws to drop web shells, create superusers, and steal configs.
Get these articles delivered to your inbox.
Subscribe free