HackRead

Chinese state-sponsored hackers, attributed to groups Daggerfly and Crimson Palace, infiltrated a major U.S. company's network for at least four months in 2024, likely stealing sensitive email data.

SpyLoan apps have surged by 75% globally between Q2 and Q3 of 2024, targeting unsuspecting users with fake loan offers. Researchers identified 15 malicious apps on Google Play, downloaded over 8 million times, exploiting users through excessive permissions and sensitive data harvesting.

Despite advancements in cybersecurity tools, human vulnerability remains a significant weak point, with phishing being one of the most dangerous forms of social engineering.

To successfully launch your startup, focus on building a solid foundation that includes strong branding, a functional website, cybersecurity, and smart budget allocation. Your brand is the cornerstone of your business, so ensure it reflects your values and resonates with your target audience through thoughtful choices in colors, fonts, and messaging.

A significant data breach has exposed over 644,000 sensitive records, totaling 713 GB of personal information from SL Data Services, LLC, operating as Propertyrec.

Ethereum’s Layer 2 solutions are projected to reach a $1 trillion market capitalization by 2030, driven by their ability to address Ethereum’s scalability challenges.

Smart contract security is critical in DeFi, where exploits have caused significant financial losses. Immunefi's latest report reveals $1.4 billion lost to hacks and rugpulls in 2024, with Web2 hackers increasingly targeting smart contract vulnerabilities.

With the rise of e-commerce and digital payments, payment fraud has become increasingly sophisticated, costing businesses billions annually.

The U.S. Department of Justice has taken down PopeyeTools, a major cybercriminal marketplace active since 2016, and arrested three alleged administrators.

A recent Facebook malvertising campaign exploited Meta’s advertising platform to distribute malware disguised as a Bitwarden security update. Cybersecurity researchers at Bitdefender revealed that the campaign targeted business accounts, tricking users into installing malicious Chrome extensions.

Microsoft’s November 2024 Patch Tuesday update addresses 91 security vulnerabilities, including four zero-day flaws, with two actively exploited in the wild.

A self-described "data vigilante" known as Nam3L3ss has leaked nearly 8 million employee records from 27 major companies, including Amazon, 3M, HP, and Delta, exploiting the MOVEit vulnerability.