PhantomCaptcha RAT Attack Targets Aid Groups Supporting Ukraine

SentinelLABS’ research reveals PhantomCaptcha, a highly coordinated, one-day cyber operation on Oct 8, 2025, targeting the International Red Cross, UNICEF, and Ukraine government groups using fake emails and a Remote Access Trojan (RAT) linked to Russian infrastructure.

Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More – ​Read More

GlassWorm Malware Targets Developers Through OpenVSX Marketplace

GlassWorm, a self-propagating malware, infects VS Code extensions through the OpenVSX marketplace, stealing credentials and using blockchain for control.

Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More – ​Read More

Exploitation of Critical Adobe Commerce Flaw Puts Many eCommerce Sites at Risk

Patched in September, the SessionReaper bug could be exploited without authentication to bypass a security feature.

The post Exploitation of Critical Adobe Commerce Flaw Puts Many eCommerce Sites at Risk appeared first on SecurityWeek.

SecurityWeek – ​Read More

Why Organizations Are Abandoning Static Secrets for Managed Identities

As machine identities explode across cloud environments, enterprises report dramatic productivity gains from eliminating static credentials. And only legacy systems remain the weak link.
For decades, organizations have relied on static secrets, such as API keys, passwords, and tokens, as unique identifiers for workloads. While this approach provides clear traceability, it creates what security

The Hacker News – ​Read More

This ‘Privacy Browser’ Has Dangerous Hidden Features

The Universe Browser is believed to have been downloaded millions of times. But researchers say it behaves like malware and has links to Asia’s booming cybercrime and illegal gambling networks.

Security Latest – ​Read More

Best blood pressure watches: I tested the top models that actually work

I tested some of the top blood pressure watches available, and considered medical research and current FDA guidance, to help you choose the best one for your needs.

Latest news – ​Read More

Lanscope Endpoint Manager Zero-Day Exploited in the Wild

The bug has been exploited in the wild as a zero-day and the US cybersecurity agency CISA has added it to its KEV catalog.

The post Lanscope Endpoint Manager Zero-Day Exploited in the Wild appeared first on SecurityWeek.

SecurityWeek – ​Read More

Finally, a pair of clip-on earbuds with enough bass to fuel my workouts

When I run, I like to at least hear some bass from my open-ear earbuds, and until now, that seemed like a pipedream.

Latest news – ​Read More

I tested HP’s new all-white OmniBook, and it’s my favorite ultraportable Windows laptop yet

HP’s OmniBook 7 Aero packages solid hardware, a 2K display, and an exceptional speaker system in a featherweight device ideal for professionals.

Latest news – ​Read More

Over 250 Magento Stores Hit Overnight as Hackers Exploit New Adobe Commerce Flaw

E-commerce security company Sansec has warned that threat actors have begun to exploit a recently disclosed security vulnerability in Adobe Commerce and Magento Open Source platforms, with more than 250 attack attempts recorded against multiple stores over the past 24 hours.
The vulnerability in question is CVE-2025-54236 (CVSS score: 9.1), a critical improper input validation flaw that could be

The Hacker News – ​Read More