Tag PowerShell

Star Blizzard Strikes 100+ Organizations Using Phishing and RedFlick Tactics

Microsoft Threat Intelligence has reported on the recent phishing and malware delivery activities conducted by Star Blizzard, a Russian state-sponsored threat group also known as Callisto Group or SEABORGIUM. This group is linked to Centre 18 of the Russian Federal Security Service, as noted by the U.S. Cybersecurity and Infrastructure…

Read MoreStar Blizzard Strikes 100+ Organizations Using Phishing and RedFlick Tactics

Trellix Uncovers DarkSword, JSCeal, Axios NPM Attacks, and APT28 Campaigns

Advanced Research Center Uncovers New Cyber Threats in Latest Report Trellix’s Advanced Research Center has unveiled its latest SecondSight Threat Hunting Report, which analyzes cyber activities recorded from January 1 to June 30, 2026. The findings, shared exclusively with Hackread.com, elucidate several sophisticated cyber campaigns characterized by targeted phishing efforts,…

Read MoreTrellix Uncovers DarkSword, JSCeal, Axios NPM Attacks, and APT28 Campaigns

Suspected AI-Generated PowerShell Script Used by Attacker to Map Active Directory

Cybersecurity Alert: Intrusion Using AI-Generated PowerShell Script Targeting Active Directory Cybersecurity researchers have uncovered a significant intrusion involving an unknown threat actor who employed a sophisticated PowerShell script for Active Directory (AD) enumeration. The script, described as “vibe-coded,” was designed to identify key components within the AD environment, including the…

Read MoreSuspected AI-Generated PowerShell Script Used by Attacker to Map Active Directory

Now, Even Russia’s Top Hackers are Utilizing Clickfix to Compromise Devices

Russian Hacking Group Targets Ukrainian Organizations with Clickfix Technique A prominent hacking group linked to the Russian government has recently deployed a sophisticated cyberattack technique known as Clickfix, which has raised alarms among cybersecurity experts in Ukraine. The country’s Computer Emergency Response Team (CERT) has issued warnings about this method,…

Read MoreNow, Even Russia’s Top Hackers are Utilizing Clickfix to Compromise Devices

MS Office Built-in Feature Enables Malware Execution Without the Need for Macros

With the rapid evolution of cybercrime, traditional defenses are increasingly being overwhelmed by attacks that exploit commonly used system tools and protocols. A recent investigation by Cisco’s Talos threat research group uncovered a campaign utilizing malware-laden Microsoft Word documents capable of executing code without requiring Macro permissions or corrupting memory.…

Read MoreMS Office Built-in Feature Enables Malware Execution Without the Need for Macros

Junior Hacker Leveraged Tailscale and OpenSSH to Maintain Access After C2 Outage

Cyber Intrusion at French Automotive Firm: A Case Study of Persistent Threats Recently, a French-speaking cybercriminal infiltrated a small automotive business in France, deploying a keylogger to capture sensitive banking and email credentials. The breach, characterized by conventional tactics, took an unexpected turn with a strategic decision made towards the…

Read MoreJunior Hacker Leveraged Tailscale and OpenSSH to Maintain Access After C2 Outage

63 Newly Discovered Vulnerabilities (Including 0-Days) Windows Users Must Address Immediately

In this month’s Patch Tuesday, Microsoft released a significant round of security updates addressing 63 vulnerabilities within its products, including the Windows operating system. Among these, 12 vulnerabilities have been categorized as critical, 49 as important, one as moderate, and one as low in severity. System administrators are urged to…

Read More63 Newly Discovered Vulnerabilities (Including 0-Days) Windows Users Must Address Immediately

How a USB Speaker Can Infiltrate a PC Without Direct Interaction

In a recent cybersecurity incident involving a speaker model known as the Katana V2X, a researcher successfully manipulated its firmware to explore potential vulnerabilities. After replacing the original firmware with a modified version that displayed the word “patched” on the speaker’s LED, the researcher turned his focus to FreeRTOS—the open-source…

Read MoreHow a USB Speaker Can Infiltrate a PC Without Direct Interaction

China-Linked Storm-1175 Leverages Zero-Day Vulnerabilities for Swift Medusa Ransomware Deployment

A prominent threat group based in China has been associated with the deployment of Medusa ransomware, recently leveraging a mix of zero-day and N-day vulnerabilities to execute rapid and sophisticated attacks on vulnerable internet-facing systems. This group’s operational speed and adeptness at identifying exposed network assets have led to significant…

Read MoreChina-Linked Storm-1175 Leverages Zero-Day Vulnerabilities for Swift Medusa Ransomware Deployment