HackRead

5 days ago | hackread.com | Amir Waqas

Cofense Intelligence reveals a novel phishing technique using blob URIs to create local fake login pages, bypassing email security and stealing credentials. Cybersecurity researchers at Cofense Intelligence have reported a new and increasingly effective method cybercriminals are using to deliver credential phishing pages directly to users’ email inboxes. This technique, which emerged in mid-2022, leverages “blob URIs” (binary large objects- Uniform Resource Identifiers).

5 days ago | hackread.com | Deeba Ahmed

A flaw in Microsoft Entra ID’s legacy login allowed attackers to bypass MFA, targeting admin accounts across finance, healthcare, and tech sectors. Cybersecurity firm Guardz has discovered a targeted campaign exploiting a weakness in Microsoft Entra ID’s legacy authentication protocols, allowing attackers to bypass modern security measures like Multi-Factor Authentication (MFA).

6 days ago | hackread.com | Amir Waqas

PowerSchool paid ransom after a major data breach; now hackers are targeting teachers and schools with direct extortion threats for more payment. On December 28, 2024, education tech giant PowerSchool experienced one of the biggest data breaches in U.S. school history, compromising the personal information of over 60 million students and 9.5 million teachers. The company responded by paying an undisclosed ransom. But the fallout didn’t stop there.

6 days ago | hackread.com | Amir Waqas

LockBit’s dark web domains were hacked, exposing internal data, affiliate tools, and over 60,000 Bitcoin wallets in a major blow to the ransomware group. The ransomware group LockBit has suffered a serious blow after its dark web domain and infrastructure was hijacked and defaced by an unknown attacker. The breach, which surfaced on May 7, disrupted several of the group’s hidden service panels and included a public taunt: “Don’t do crime.

6 days ago | hackread.com | Deeba Ahmed

Bitdefender exposes Facebook ad scams using fake crypto sites and celebrity lures to spread malware via malicious desktop clients and PowerShell scripts. A persistent malware campaign is exploiting Facebook’s advertising network to target cryptocurrency enthusiasts, security researchers at Bitdefender revealed today.