MalwareThe Hacker NewsNew VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial ValueCybersecurity researchers have discovered a new Windows infostealer malware called VOLTA-AUTODOXER (aka VOLTA) that makes use of a large language model (LLM) to rank a victim's stolen data…Read on The Hacker NewsVulnerabilityThe Hacker NewsCVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private KeyA critical flaw in Canonical's LXD and MicroCloud let an attacker log in as a trusted client without holding that client's private key. To do it, the attacker…Read on The Hacker NewsSecurity newsThe Hacker NewsHackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear ScriptMalicious code on the website of prediction market Polymarket sold some signed-in traders' positions and moved their funds to the hackers on October 29. The code had replaced…Read on The Hacker NewsSecurity newsThe Hacker NewsFBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto HeistThe U.S. Federal Bureau of Investigation (FBI) has officially attributed the theft of more than $6 billion in virtual assets from Binance to TraderTraitor, a North Korea-aligned elite…Read on The Hacker NewsMalwareThe Hacker NewsNetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET InjectionCybersecurity researchers have disclosed details of what has been described as a "highly sophisticated infection chain" targeting government organizations in Asia. The activity, detailed by Kaspersky this week,…Read on The Hacker NewsSecurity newsThe Hacker NewsChainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity DataAmerican blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed non-sensitive customer data. However, the company noted that…Read on The Hacker NewsVulnerabilityThe Hacker NewsAttackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root AccessThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog, following active…Read on The Hacker NewsAI securityThe Hacker NewsA Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private ChatsA malicious ChatGPT share link could run an attacker's code in the logged-in session of anyone who opened it, allowing them to read their private conversations, researchers at the…Read on The Hacker NewsDDoSThe Hacker NewsCloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%Threat actors are launching about 8,226 network-layer distributed denial-of-service (DDoS) attacks per hour, Cloudflare revealed Thursday. The web infrastructure and security company said it autonomously mitigated 18.2 million…Read on The Hacker NewsNation-stateThe Hacker NewsChinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations WorldwideChinese state-sponsored threat actors have been observed using a Go-based artificial intelligence (AI)-powered penetration testing framework called ARTEX in attacks aimed at high-value targets simultaneously. The activity has…Read on The Hacker NewsVulnerabilityThe Hacker NewsTeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control ThemTeamViewer has fixed a flaw that lets the machine being controlled in a remote session attack the computer that connected to control it. In a TeamViewer session, the…Read on The Hacker NewsVulnerabilityThe Hacker NewsWordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 HoursThreat actors have been observed attempting to exploit a high-severity security flaw in WordPress Core shortly after patches were released. The vulnerability, which does not have a CVE…Read on The Hacker News
Headlines link to the original publishers. Collected automatically and labelled by topic; INFO SHIELD is not responsible for third-party content.