Geek Feed

Drift loses $280 million North Korean hackers seize Security Council powers

April 5, 2026April 5, 2026 geekfeed0Tagged CryptoCurrency, Drift Protocol, Exchange, Financial Theft, Solana

The Drift Protocol lost at least $280 million after a threat actor took control of its Security Council administrative powers in a planned, sophisticated operation. Blockchain intelligence firms Elliptic and TRM Labs linked the attacks to North Korean threat actors, based on multiple on-chain indicators consistent with DPRK tradecraft. These include Tornado Cash usage, CarbonVote deployment timing (09:30 Pyongyang time), cross-chain […]

2 mins read

Residential proxies evaded IP reputation checks in 78% of 4B sessions

April 5, 2026April 5, 2026 geekfeed0Tagged Evasion, Internet, Residential, Residential Proxy, Traffic

Researchers warn that residential proxies used to route malicious traffic are a big problem for IP reputation systems, as there is no clear distinction between attackers and legitimate users. This occurs because residential proxies are too short-lived, uninvolved, or systematically rotated, preventing defense systems from cataloging them in time. Cybersecurity intelligence platform GreyNoise determined this after examining a […]

3 mins read

New Progress ShareFile flaws can be chained in pre-auth RCE attacks

April 5, 2026April 5, 2026 geekfeed0Tagged Exploit Chain, Progress ShareFile, Progress Software, rce, Remote Code Execution, vulnerability

Two vulnerabilities in Progress ShareFile, an enterprise-grade secure file transfer solution, can be chained to enable unauthenticated file exfiltration from affected environments. Progress ShareFile is a document sharing and collaboration product typically used by large and mid-sized companies. Such solutions are an attractive target for ransomware actors, as previously seen in Clop data-theft attacks exploiting bugs in Accellion […]

2 mins read

Medtech giant Stryker fully operational after data-wiping attack

April 5, 2026April 5, 2026 geekfeed0Tagged Breach, Cyberattack, Data Wiper, Handala, Iran, Security Breach, Stryker, Wiper

Stryker Corporation, one of the world’s leading medical technology companies, says it’s fully operational three weeks after many of its systems were wiped out in a cyberattack claimed by the Iranian-linked Handala hacktivist group. The Fortune 500 medtech giant has over 53,000 employees, makes a wide range of products (including neurotechnology and surgical equipment), and […]

2 mins read

Critical Cisco IMC auth bypass gives attackers Admin access

April 5, 2026April 5, 2026 geekfeed0Tagged Authentication Bypass, bypass, cisco, CVE-2026-20093, Integrated Management Controller, vulnerability

Cisco has released security updates to address several critical and high-severity vulnerabilities, including an Integrated Management Controller (IMC) authentication bypass that allows attackers to gain Admin access. Also known as CIMC, Cisco IMC is a hardware module embedded on the motherboard of Cisco servers that provides out-of-band management (even if the operating system is powered off or crashed) for UCS […]

2 mins read

New CrystalRAT malware adds RAT, stealer and prankware features

April 4, 2026April 4, 2026 geekfeed0Tagged CrystalX RAT, Data Theft, malware, Malware-as-a-Service, Prank

A new malware-as-a-service called CrystalRAT is being promoted on Telegram, offering remote access, data theft, keylogging, and clipboard hijacking capabilities. The malware emerged in January with a tiered subscription model. Apart from the Telegram channel, the MaaS was also promoted on YouTube via a dedicated marketing channel that showcased its capabilities. Kaspersky researchers say in a report […]

3 mins read

Apple expands iOS 18 updates to more iPhones to block DarkSword attacks

April 4, 2026April 4, 2026 geekfeed0Tagged apple, Darksword, Exploit Kit, ios, ios 18, iphone

Apple has now made it possible for more iPhones still running iOS 18 to receive security updates that protect against the actively exploited DarkSword exploit kit. “We enabled the availability of iOS 18.7.7 for more devices on April 1, 2026, so users with Automatic Updates turned on can automatically receive important security protections from web […]

3 mins read

Hackers exploit TrueConf zero-day to push malicious software updates SVE

April 4, 2026April 4, 2026 geekfeed0Tagged 0day, Actively Exploited, Asia, china, CVE-2026-3502, government, TrueConf, Video Conferencing, Zero-Day

Hackers have targeted TrueConf conference servers in attacks that exploit a zero-day vulnerability, allowing them to execute arbitrary files on all connected endpoints. The flaw is tracked as CVE-2026-3502 and received a medium severity score. It stems from a missing integrity check in the software’s update mechanism, which can be used to replace the legitimate update with […]

3 mins read

New EvilTokens service fuels Microsoft device code phishing attacks

April 4, 2026April 4, 2026 geekfeed0Tagged EvilTokens, microsoft, PhaaS, phishing, Phishing Kit, Phishing-as-a-Service

A new malicious kit called EvilTokens integrates device code phishing capabilities, allowing attackers to hijack Microsoft accounts and provide advanced features for business email compromise attacks. The kit is sold to cybercriminals over Telegram and is under continuous development, its author stating that they plan to extend support for Gmail and Okta phishing pages. Device […]

2 mins read

‘NoVoice’ Android malware on Google Play infected 2.3 million devices

April 4, 2026April 4, 2026 geekfeed0Tagged android, google play, malware, mobile, NoVoice, Rootkit

A new Android malware named NoVoice was found on Google Play, hidden in more than 50 apps that were downloaded at least 2.3 million times. The apps carrying the malicious payload included cleaners, image galleries, and games. They required no suspicious permissions and provided the promised functionality. After launching an infected app, the malware tried to […]

4 mins read

PirloTV sports piracy network disrupted as 44 domains seized

Bluekit phishing kit adopts browser-in-the-middle for login theft

Google releases new privacy controls for activity history, personalization

DraftKings hacker ‘Snoopy’ sentenced to 18 months in prison

Malicious Edge extension abuses Native Messaging as bridge to malware

CISA warns of max severity Ubiquiti flaws exploited in attacks

Drift loses $280 million North Korean hackers seize Security Council powers

Residential proxies evaded IP reputation checks in 78% of 4B sessions

New Progress ShareFile flaws can be chained in pre-auth RCE attacks

Medtech giant Stryker fully operational after data-wiping attack

Critical Cisco IMC auth bypass gives attackers Admin access

New CrystalRAT malware adds RAT, stealer and prankware features

Apple expands iOS 18 updates to more iPhones to block DarkSword attacks

Hackers exploit TrueConf zero-day to push malicious software updates SVE

New EvilTokens service fuels Microsoft device code phishing attacks

‘NoVoice’ Android malware on Google Play infected 2.3 million devices