New Xanthorox AI hacking platform spotted on dark web with modular tools, offline mode, and advanced voice, image, and code-based cyberattack features.

A sophisticated new artificial intelligence (AI) platform tailored for offensive cyber operations, named Xanthorox AI, has been identified by cybersecurity firm SlashNext. First appearing in late Q1 2025, Xanthorox AI is reportedly circulating within cybercrime communities on darknet forums and encrypted channels.

According to SlashNext’s investigation, shared with Hackread.com ahead of its publishing on Monday, Xanthorox stands out from previous malicious AI tools like WormGPT, FraudGPT and EvilGPT due to its independent, multi-model framework. The system is based on five distinct AI models optimized for specific cyber operations.

These models are hosted on private servers under the seller’s control rather than public cloud infrastructure or openly accessible APIs. This unique setup sets Xanthorox AI apart from previous malicious tools that often relied on existing large language models (LLMs).

Xanthorox AI is a fully custom-built platform that uses “fully custom-built language models” instead of established models like LLaMA or Claude. It is promoted as a modular system capable of code generation, vulnerability exploitation, data analysis, and integrated voice and image processing, enabling automated and interactive attacks.

Its modular design allows for future updates or the replacement of specific functionalities. Xanthorox AI also has built-in voice and image handling modules. It can perform live internet search scraping using over 50 engines, offering up-to-date information. It also offers offline functionality, allowing users to use it without a constant network connection. The platform also emphasizes data containment to eliminate third-party AI data collection risks.

The toolkit includes the Xanthorox Coder, which automates tasks such as code creation and script development, while Xanthorox Vision adds visual intelligence by allowing users to upload images or screenshots for analysis. Reasoner Advanced aims to replicate human-like decision-making, supporting tasks requiring logical consistency and persuasive communication.

The platform also facilitates voice-based interaction through real-time voice calls and asynchronous voice messaging, allowing hands-free command and control. Overall, Xanthorox AI offers a versatile hacking assistant representing a significant advancement in cyberattack capabilities, enabling more precise and scalable phishing campaigns and malware creation.

Screenshot: SlashNext

“Xanthorox AI presents itself as a comprehensive, all-in-one hacking tool, powered by a modular architecture designed to support a wide range of cybercrime operations. From an attacker’s perspective, Xanthorox AI hits most of the marks needed for a versatile hacking assistant,” researchers wrote in their blog post.

Its emergence highlights the importance of adopting advanced AI-powered detection technologies, including AI-powered threat detection platforms capable of behavioural anomaly analysis and signature-less malware identification, email security solutions employing AI-based content and intent analysis, and network security measures incorporating AI-driven intrusion detection and prevention systems.

Casey Ellis, Founder at Bugcrowd, a San Francisco-based leader in crowdsourced cybersecurity, called it “a fascinating development,” noting that the cybercriminal ecosystem works like any service industry, with specialized groups and “startups” creating competitive advantages. He highlighted the thought and R&D behind the toolkit, the local model tuning that avoids reliance on major vendors, and praised the expert mix as the most effective way to build a flexible AI-powered attack platform.

Xanthorox AI Surfaces on Dark Web as Full Spectrum Hacking Assistant

Crypto software wallets are invincible in the micro range. If you own multiple crypto assets, you need safe and reliable wallets, too.

Crypto wallets offer an extra layer of security against **malicious attacks** targeting everyday users. It’s not always easy to open your online crypto account every time you want to make a payment, and many merchants still don’t support direct crypto transactions. That’s where digital wallets step in. They make payments easier, but in 2025, the biggest concern around crypto wallets is safety.

That’s why it makes sense to focus on wallets that are both cost-effective and secure. Before choosing one, it’s important to understand how its security system works. At the same time, the wallet should be flexible enough to let you buy, sell, or stake crypto without hassle.

There are over a hundred crypto wallets available this year, but we’re going to focus on 10 that stand out as some of the safest options.

****1: Zengo****

The wallet has more than 380 coins. As you can do frequent transactions, we would categorize it as a hot wallet. Meanwhile, it is not a hardware-compatible wallet. The cost of maintaining the wallet is 19.99 every month. However, the annual subscription is only $129. 

They claim that they have been providing services to over 1.5 million customers and “0 wallets” have been hacked.

****Special features** **

It is the best wallet for security-conscious users. The strong and integrated security design can stop any kind of phishing crimes or bad entry gates. 

The company says that there are 1.5 billion customers who have had zero wallet attacks to date. 

****Benefits** **

Firstly, you get a secure infrastructure with this wallet. Moreover, you will get weekly software updates. You can easily buy or sell Crypto from the wallet. Therefore, it is a good option to keep your fiat currency in it. 

****Limitations** **

The price of the wallet is slightly on the higher side. Moreover, no hardware devices are compatible with it. Lastly, it allows only third-party access for withdrawals. 

Understandably, this measure is important from a security point of view. But it is stunted from the utility point of view. 

****2: Coinbase** **

This wallet can support more than 5500 cryptocurrencies. It is a hot wallet for sure. Like the previous one, it has no hardware wallet compatibility. But the best part is that it is a free wallet. This is the reason why it is more popular among users. Moreover, Coinbase has over **90 govt crypto assets** too. 

****Why should beginners use it?****

Beginners can use it for practice. It has easy navigation. You can use it on the website as well. Meanwhile, you can easily download it from various platforms and start using it without any concern. But it is the best option for the low-cost beginners. 

The company charges 0 network fees either. Plus, you can customize and minimize the wallet anytime. If you check the **BTC heatmap, you’ll see that Bitcoin has most of the investors’ shares**. Hence, you need a free wallet source for Bitcoin investors. 

****Benefits** **

It is the best option for beginners. Moreover, it is a low-cost platform with various amenities. You can trade more than 5500 coins over it. 

****Limitations** **

The wallet code is not an open-source code. You cannot generateay new address for every single transaction. It is not comfortable with the hardware assets. However, you can connect your ledger wallet to transfer assets. 

****3: Exodus****

The coin supports more than 281 currencies. It is a hot wallet for sure. However, the best part is that it is hardware-compatible. It is free of cost, too. 

****Why choose it?****

You can choose it as it makes slots to manage individual digital currencies on your mobile platform itself. The fiat payment methods are also separate. You can find them easily in your wallet. 

Lastly, you can use it to purchase or sell your coins. At the same time, you can swap or stake the coins easily. But the best part is that you can do all of these directly from your mobile phone. 

****Benefits** **

The platform offers intuitive integration across mobile and desktop. It also offers the same to and from any browser platform. The software wallet is compatible with hardware wallets like Trezor.

So, it is an exceptional quality which premium wallets also don’t offer often. 

****Limitations** **

Customer support is very limited. It is available through email only. There is no in-house exchange policy with this wallet. Lastly, it is not an open-source option.

****4: Electrum****

It is a bitcoin-only wallet. On that note, it is one of the major downsides of this wallet. However, you can treat it as a hot as well as a cold wallet. Moreover, it is hardware-compatible. But the best part is that it is free of cost.

****Why Should You Choose It?****

You should choose a wallet that’s tailored to secure your Bitcoin. And that’s Electrum for you. Moreover, the Electrum app is available over a range of platforms. 

****Benefits****

Firstly, it is a free and downloadable wallet option. At the same time, it is well compatible with all the hardware wallets. Lastly, its source code is auditable. You may also peer review the codes and send suggestions. 

****Limitations** **

The biggest drawback of the platform is that it does not have the best trading features. So, buying, selling, and staking are not options you can pursue on this platform. You may simply keep your Bitcoin safe here. 

Moreover, there are no customer support options here. You will get community support at best. Lastly, you need genuine technical expertise to develop your wallet. 

This wallet is widely used for managing Ethereum and ERC-20 tokens. It is a hot wallet and works as a browser extension or mobile app. While it doesn’t support hardware wallet integration by default, it can be connected to devices like Ledger. One major reason for its popularity is its simple interface and easy access to decentralized apps.

****Why Should You Choose It?****

If you’re working mostly with Ethereum and related tokens, MetaMask is a smart choice. It’s user-friendly, supports quick access to decentralized apps, and works smoothly across both mobile and browser platforms.

****Benefits****

MetaMask is free to use and easy to install on both desktop and mobile devices. It offers seamless access to Ethereum-based dApps, supports custom tokens, and can be connected to hardware wallets like Ledger for added security. It’s also open-source, so developers can review and contribute to its code.

****Limitations****

MetaMask is limited to Ethereum and ERC-20 tokens, so it’s not ideal if you deal with a wide range of cryptocurrencies. It doesn’t offer built-in options for staking or advanced trading. Customer support is minimal, and new users might find the interface a bit technical at first.

****6: Trust Wallet****

The wallet supports more than 10,000 cryptocurrencies, including all major tokens and coins. It is a hot wallet designed for frequent on-the-go transactions. Trust Wallet is not tied to any specific hardware wallet by default, but it does support hardware integration through third-party connections. The wallet is free to download and use, with no monthly subscription costs.

It’s owned by Binance, which adds a layer of credibility. The wallet has been downloaded over 60 million times and has maintained a strong track record with no major security breaches reported.

****Special features****

Trust Wallet is known for its built-in Web3 browser that lets users interact with decentralized apps (dApps) directly from within the wallet. It also supports staking of various coins and offers a secure backup feature using a single recovery phrase.

The wallet runs with a strong emphasis on user privacy. No personal data or KYC is needed to set up or use it.

****Benefits****

Trust Wallet is a beginner-friendly wallet that supports a huge range of assets. It includes built-in staking, token swapping, and direct access to dApps. It’s available on both Android and iOS platforms, and it also supports NFTs across multiple blockchains.

Since it’s backed by Binance, there’s strong ongoing development, regular security updates, and integration with popular tools.

****Limitations****

The wallet doesn’t come with its own in-house customer support; users rely on community forums or Binance channels for help. Although it can connect with Ledger, it’s not fully optimized for hardware wallet security. Also, as a mobile-only wallet, it may not suit users looking for a full desktop experience.

Lastly, being owned by Binance may raise concerns for users looking for more decentralized control.

The Crypto.com DeFi Wallet supports over 1000 cryptocurrencies and is designed as a hot wallet, allowing users to make frequent transactions with ease. It’s non-custodial, meaning users have full control over their private keys. While it isn’t tied directly to a hardware wallet, it can integrate with Ledger devices for added security. The wallet is completely free to use with no subscription or maintenance costs.

The wallet is part of the broader Crypto.com ecosystem, which has tens of millions of users globally. It is separate from the centralized Crypto.com app, giving users the option to keep their assets fully decentralized.

****Special features****

One of the standout features is the ability to stake and earn rewards on various assets directly from the wallet. It also includes token swapping, DeFi access, and NFT storage. Users get full control over their keys, with backup options via a recovery phrase.

The wallet is also open-source, which means its code is publicly auditable, a major plus for transparency and community trust.

****Benefits****

The wallet provides access to decentralized finance without sacrificing usability. You can connect it easily with the Crypto.com exchange or app for seamless transfers. There’s a built-in swap function that supports multiple chains, and the app is available on both iOS and Android.

Another benefit is the ability to stake coins directly from the wallet and earn passive income. The user interface is clean and intuitive, especially for users already familiar with Crypto.com’s services.

****Limitations****

Although the wallet offers Ledger integration, it’s not natively built for hardware security, so users must go through extra steps to sync. There’s no desktop version of the wallet; it’s mobile only, which might not suit all users.

Also, as with most DeFi wallets, there’s no way to recover your funds if you lose your recovery phrase. And while support exists, it may not be as responsive as that of fully centralized platforms.

****8: BitBox02****

BitBox02 is a hardware wallet that supports major cryptocurrencies like Bitcoin, Ethereum, and Litecoin, along with ERC-20 tokens. It’s a cold wallet, which means it stores your assets offline for maximum protection. Unlike hot wallets, it’s not meant for frequent daily transactions. It is a paid device, with a one-time cost of around $129, depending on where you buy it.

Developed by Shift Crypto, a Swiss company, BitBox02 is known for its strong focus on privacy, security, and open-source principles. It’s available in two versions: Bitcoin-only and multi-coin, giving users the option to choose based on their needs.

****Special features****

BitBox02 comes with a built-in screen and touch sensors for transaction confirmation, and it uses a microSD card for backup instead of the traditional 12 or 24-word recovery phrase. This makes backup and restoration more straightforward and secure for some users.

The wallet’s firmware and companion app are open-source, which allows for public audits and community contributions, a solid trust factor for security-focused users.

****Benefits****

As a cold wallet, BitBox02 offers high-end security. Your private keys never touch an internet-connected device. The use of a microSD card for encrypted backups is a unique feature that enhances safety and user convenience.

The device is lightweight, portable, and works with Windows, macOS, and Linux. It also supports Tor for added privacy, and users can verify all addresses on the device screen before sending transactions.

****Limitations****

BitBox02 isn’t ideal for those looking for a wallet for everyday use; it’s designed for long-term holding and security, not frequent trading. The supported coins list is more limited compared to some multi-coin software wallets.

It also doesn’t support mobile use; it must be connected to a computer. Finally, while the microSD backup system is secure, it’s a less familiar method that could confuse users accustomed to seed phrases.

****9: SafePal S1****

The SafePal S1 is a hardware wallet supporting over 10,000 cryptocurrencies, including Bitcoin (BTC), Ethereum (ETH), Binance Coin (BNB), and various ERC-20 tokens. As a cold storage device, it keeps assets offline, enhancing security. The wallet operates independently without direct integration with other hardware wallets. Priced at $49.99, it offers a cost-effective solution for secure crypto storage.

****Special Features****

The SafePal S1 employs a 100% air-gapped signing mechanism, ensuring complete offline operation without Bluetooth, Wi-Fi, NFC, or USB connections. It features an EAL 5+ independent secure element, a true random number generator, multiple layers of security sensors, and an anti-tampering self-destruct mechanism. Additionally, its compact design, comparable to a credit card, enhances portability.

****Benefits****

Users benefit from managing unlimited tokens within a single device, with support for over 100 blockchains and continuous additions. The wallet integrates seamlessly with the SafePal App, providing access to decentralized applications (DApps) and facilitating cross-chain swaps and trades. Its user-friendly interface supports 15 languages, catering to a global audience.

****Limitations****

While the SafePal S1 offers robust security features, it lacks direct USB connectivity, relying solely on QR code scanning for transactions, which may be less convenient for some users. Additionally, as a hardware wallet, it requires physical possession for access, which might not suit users who prefer software-based solutions. Furthermore, being a relatively newer entrant in the hardware wallet market, it may not have the same extensive track record as some established competitors.

****10: Ledger Nano X****

The Ledger Nano X is a hardware wallet that supports over 5,500 cryptocurrencies, including major assets like Bitcoin (BTC), Ethereum (ETH), and Binance Coin (BNB). As a cold storage device, it keeps your private keys offline, providing enhanced security. The Nano X is compatible with both desktop and mobile devices via Bluetooth connectivity. Priced at $149, it offers a comprehensive solution for managing a diverse crypto portfolio.

****Special Features****

The Nano X features Bluetooth Low Energy (BLE) connectivity, allowing users to manage their crypto assets on the go through the Ledger Live app on smartphones. It incorporates a Secure Element (SE) chip, ensuring that private keys remain isolated and protected from potential threats. The device can install up to 100 apps simultaneously, accommodating a wide range of cryptocurrencies.

****Benefits****

The Ledger Nano X offers extensive support for a vast array of cryptocurrencies, making it suitable for users with diverse portfolios. Its Bluetooth functionality enhances user experience by enabling wireless management of assets via mobile devices. The integration with the Ledger Live app provides a unified platform for buying, selling, swapping, and staking various cryptocurrencies. Additionally, the device’s robust security features, including the Secure Element chip and custom operating system, offer peace of mind to users.

****Limitations****

While Bluetooth connectivity adds convenience, some users may have concerns about potential security risks associated with wireless connections. However, Ledger emphasizes that only non-sensitive data is transmitted via Bluetooth, and private keys never leave the device. The device’s price point of $149 may be considered high compared to other hardware wallets. Additionally, the battery is not replaceable, which could affect the device’s longevity.

Top Crypto Wallets of 2025: Balancing Security and Convenience

NSA and global cybersecurity agencies warn fast flux DNS tactic is a growing national security threat used in phishing, botnets, and ransomware.

A collaborative effort by international cybersecurity agencies, including the National Security Agency (NSA), Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC), Canadian Centre for Cyber Security (CCCS), and New Zealand National Cyber Security Centre (NCSC-NZ), has highlighted a critical security issue known as Fast Flux.

According to a joint advisory, both cybercriminals and state-sponsored actors are exploiting this new technique, which allows them to conceal malicious server locations and maintain persistent command and control (C2) infrastructure and has been declared a national security threat.

****Understanding fast flux****

Fast flux’s core mechanism lies in the dynamic manipulation of Domain Name System (DNS) records. By rapidly altering the IP addresses associated with a single domain, attackers effectively obfuscate the true location of their malicious servers. This rapid rotation renders traditional IP-based blocking methods ineffective, as the target IP address becomes obsolete almost immediately.

Research reveals that cybercriminals are employing two methods of fast flux- Single flux and Double flux. Single flux involves linking a single domain name to numerous, frequently rotated IP addresses, ensuring that even if one IP is blocked, the domain remains accessible.

Single Flux (Source: CISA)

Conversely, Double flux further enhances this obfuscation by also frequently changing the DNS name servers responsible for resolving the domain, adding another layer of anonymity.

Double Flux (Source: CISA)

“These techniques leverage a large number of compromised hosts,” CISA notes, often forming botnets, which act as proxies to hide the malicious traffic’s origin.

****Malicious Applications and the Role of Bulletproof Hosting****

CISA emphasizes that Fast Flux is not solely used for maintaining C2 communications. It plays a significant role in phishing campaigns, making social engineering websites difficult to take down.

Furthermore, “bulletproof hosting” (BPH) providers, who disregard law enforcement requests, are increasingly offering it as a service to their clients. This allows for the seamless operation of malicious activities like botnet management, fake online shops, and credential theft, all while providing a layer of protection against detection and takedown, and has been used in Hive and Nefilim ransomware attacks. One BPH provider even advertised the service’s ability to bypass Spamhaus blocklists, highlighting its appeal to cybercriminals. 

****Detection and Mitigation****

The agencies strongly recommend a multi-layered approach to detect and mitigate “fast flux” attacks. This includes leveraging threat intelligence feeds, implementing anomaly detection for DNS query logs, analyzing DNS record time-to-live (TTL) values, monitoring for inconsistent geolocation, and using flow data to identify unusual communication patterns.

 For organizations, agencies recommend DNS and IP blocking, reputational filtering, enhanced monitoring and logging, and phishing awareness training as potent mitigation strategies. It is crucial for organizations to coordinate with their Internet service providers and cybersecurity providers, particularly Protective DNS (PDNS) providers, to implement these measures, the advisory concludes.

John DiLullo, CEO at Deepwatch, a San Francisco, Calif.-based AI+Human Cyber Resilience Platform, commented on the latest development, stating: This latest advisory will hit many organizations like a double espresso. Any enterprise relying on IP reputation as a credible means of securing their infrastructure or proprietary data is a soft target for this type of exploit.”

“Fortunately, correlative detection techniques, especially those leveraging ‘low and slow’ Machine Learning methods, can defeat these intrusions handily. However, many companies’ infrastructures simply aren’t there yet. This is a significant wake-up call,” he warned.

NSA and Global Allies Declare Fast Flux a National Security Threat

A hacker, previously linked to the Tracelo breach, now claims to have breached Twilio’s SendGrid, leaking and selling data on 848,000 customers, including contact and company info.

A hacker using the alias Satanic is claiming responsibility for what could be a major breach involving SendGrid, a cloud-based email delivery platform owned by **Twilio**.

According to a post made earlier today, Thursday, April 3, 2025, on Breach Forums, a popular cybercrime platform, Satanic is offering the allegedly stolen data for $2,000 and has shared a sample to support the claim. In the post, the hacker stated:

> _“We would like to announce the breach of the largest Email Hosting Provider – SendGrid is cloud-based email infrastructure provides businesses with email delivery management. (3 April 2025).”_

Screenshot credit: Hackread.com

****What’s allegedly included in the breach?****

Satanic claims the database includes full customer and company information for 848,960 entities. Hackread.com’s research team analysed the sample data provided by the hacker, which included the following information:

*   Customer emails, phone numbers, physical addresses, cities, states, countries, social media profiles, and LinkedIn IDs

*   Company-level data such as domain names, revenue, employee counts, SEO performance, hosting providers, and rankings from services like Cloudflare and Tranco

*   Financials like revenue, operating income, net income, and other business metrics

*   Employee data and some public-facing executive details

*   Information on company tech stacks, including CMS platforms, payment solutions, and CRM tools

Additionally, among the companies listed in the sample data are Bank of America, Bazaarvoice, and the BBC. The data appears to be structured and highly detailed and includes dozens of metadata fields that go far beyond just contact information.

Each entry features web analytics metrics, internal email addresses (including those of high-level staff), phone numbers, geolocation data, and even insights into backend technologies and accessibility compliance. If the data is authentic, this could be more than a traditional leak.

Sample data leaked by the hacker (Screenshot credit: Hackread.com)

****Satanic’s track record****

This isn’t the first time that Satanic has been tied to a major data breach. In September 2024, the same hacker was behind the **Tracelo incident**, where personal data on 1.4 million users of a smartphone geolocation tracking service was leaked online. Beyond high-profile breaches, Satanic is also known in underground communities for distributing infostealer logs via Telegram.

****Twilio’s recent breach history****

This would also not be the first time Twilio, SendGrid’s parent company, has been associated with data exposures. **On July 4, 2024**, the hacker group ShinyHunters leaked a dataset containing 33 million phone numbers belonging to users of Twilio Authy, a two-factor authentication app.

Then, **in September 2024**, a separate breach exposed 12,000 call records through a third-party tool used by a Twilio customer. While neither incident confirmed a direct compromise of Twilio’s infrastructure, they did raise questions about data security.

****Still unconfirmed****

At the time of writing, Hackread.com has reached out to Twilio for comment. It’s important to note that these are unverified claims made by a hacker, and no official confirmation has been issued by Twilio or SendGrid.

However, given the nature of the sample and the profile of the individual making the claims, security teams and impacted organizations may want to take a closer look.

This is a developing story.

Hacker Claims Twilio’s SendGrid Data Breach, Selling 848,000 Records

Cybersecurity researchers at Jscamblers have uncovered a sophisticated web-skimming campaign targeting online retailers. The campaign utilizes a legacy…

Cybersecurity researchers at Jscamblers have uncovered a sophisticated **web-skimming** campaign targeting online retailers. The campaign utilizes a legacy application programming interface (**API**) to validate stolen credit card details in real time before transmitting them to malicious servers. This technique allows attackers to ensure they are only harvesting active and valid card numbers, significantly increasing the efficiency and potential profit of their operations.

According to Jscrambler’s analysis, shared with Hackread.com, this web-skimming operation has been ongoing since at least August 2024. The attack starts with the injection of malicious JavaScript code, designed to mimic legitimate payment forms, into the checkout pages of targeted websites. This code captures customer payment information as it is entered. The second phase involves obfuscation using a base64-encoded string, which conceals crucial URLs from static security analyses, such as those performed by Web Application Firewalls (**WAFs**).

The key innovation in this campaign lies in its use of a deprecated version of the **Stripe API**, a popular payment processing service, to verify the card’s validity before the data is sent to the attackers’ servers. In the third stage, the legitimate Stripe iframe is concealed and replaced with a deceptive imitation, and the “Place Order” button is cloned, hiding the original. The entered payment data is validated using Stripe’s API, and card details, if confirmed, are quickly transmitted to a drop server controlled by the attackers. The user is then prompted to reload the page following an error message.

Researchers have identified that affected online retailers are primarily those using popular e-commerce platforms like **WooCommerce**, **WordPress**, and **PrestaShop**. They also observed **Silent Skimmer** variants, but not consistently.  Around 49 affected merchants, a figure suspected to be an underestimate, were identified, along with two domains used to serve the attack’s second and third stages. An additional 20 domains on the same server were also detected. Jscrambler reported that 15 of the compromised sites had addressed the issue.

Further probing revealed that the skimmer scripts are dynamically generated and tailored to each targeted website, indicating a high degree of sophistication and automated deployment. Researchers employed a brute-forcing technique, manipulating the Referrer header, to identify additional victims.

In one instance, the skimmer impersonated a Square payment iframe while in some other instances, the skimmer injected payment options, such as cryptocurrency wallets, dynamically inserting fake **MetaMask** connection windows. The wallet addresses associated with these attempts showed little to no recent activity, though.

In their **blog post**, researchers have warned Merchants to implement real-time webpage monitoring solutions to detect unauthorized script injections, whereas Third-Party Service Providers (TPSPs) can enhance security by adopting hardened iframe implementations to prevent iframe hijacking and form modifications.

Screenshot of the Iframed fake square payment form

“Jscrambler’s research team continues to track this campaign, and we urge all online merchants to prioritize security measures against client-side threats,” researchers concluded.

Hackers Exploit Stripe API for Web Skimming Card Theft on Online Stores

Jacksonville, United States, 3rd April 2025, CyberNewsWire

**Jacksonville, United States, April 3rd, 2025, CyberNewsWire**

Secure Ideas, a premier provider of penetration testing and security consulting services, proudly announces its recent achievements of CREST accreditation and CMMC Level 1 compliance, reinforcing its commitment to delivering the highest standards of security assessment and regulatory compliance for its clients.

With these certifications, Secure Ideas strengthens its ability to deliver globally recognized, standards-based offensive security services, specializing in identifying vulnerabilities, exploiting weaknesses, and exposing gaps in critical systems.

****CREST Accreditation: Excellence in Penetration Testing****

Secure Ideas’ achievement of CREST (Council for Registered Ethical Security Testers) accreditation underscores its adherence to the highest legal, ethical, and technical standards in penetration testing. CREST-accredited organizations undergo rigorous evaluations of their business processes, security methodologies, and quality assurance frameworks.

As a CREST-certified penetration testing provider, Secure Ideas ensures that all penetration tests—whether network, web application, API, or physical security—are conducted following established best practices in scoping, reconnaissance, assessment, exploitation, and reporting. This certification provides clients with increased assurance that their security posture is being evaluated using proven methodologies by experienced professionals.

****CMMC Level 1 Compliance: Protecting DoD Information****

In addition to CREST certification, Secure Ideas has also achieved Cybersecurity Maturity Model Certification (CMMC) Level 1. Developed by the Department of Defense (DoD) to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI), CMMC requires defense contractors and subcontractors to implement cybersecurity standards at progressively advanced levels.

CMMC Level 1 focuses on the basic safeguarding of FCI by ensuring compliance with 15 security requirements outlined in FAR clause 52.204-21. These requirements include essential practices such as:

*   Limiting access to authorized users.
*   Protecting physical and digital access to information.
*   Implementing secure configurations for devices and systems.

CMMC compliance has become a mandatory requirement for organizations working with the DoD. By achieving Level 1 compliance, Secure Ideas strengthens its position to support defense contractors and subcontractors in meeting their own compliance obligations.

**Key Benefits for Clients:**

*   **Globally Recognized Standards:** Testing and security services aligned with internationally recognized frameworks.
*   **Enhanced Security Assurance:** CREST and CMMC compliance ensure robust protection of sensitive data.
*   **Regulatory Compliance Support:** Certifications align with GDPR, ISO 27001, PCI DSS, and NIS Regulations, helping clients meet regulatory requirements.

**About Secure Ideas**

Secure Ideas is a leading provider of adversarial cybersecurity solutions and services, dedicated to helping businesses of all sizes protect their information and assets from cyber threats. With a team of experienced and skilled professionals, Secure Ideas offers innovative products and services designed to meet the unique security needs of organizations in a rapidly evolving digital landscape. For more information, users can visit secureideas.com.

**Contact**

**COO**  
**Andrew Kates**  
**Secure Ideas**  
**\[email protected\]**  
**9049628046**

Secure Ideas Achieves CREST Accreditation and CMMC Level 1 Compliance

The first-of-its-kind solution integrates with company codebases, enabling AI agents to work in-context and generate production-grade, front-end code in minutes.

AutonomyAI, a company focused on enhancing front-end software development for businesses, has announced its launch from stealth with $4 million in pre-seed funding, with participation from Inbound Capital, Gilad Shany of IoN Partners and Vikram Makhiija, Senior Director at Google Cloud Security, among others.

Research firm IDC predicts that by 2028, the market for AI-supporting technology investments will reach $749 billion, with 67% of the $227 billion projected spend for 2025 going towards business integrations such as AI agents. This figure surpasses cloud and digital service provider investments for the first time. Speaking at Davos 2025, Salesforce CEO Marc Benioff proclaimed that the deployment of an Agentic AI suite has allowed him to better redistribute resources in the company. His remarks echo the growing sentiment regarding the use of AI to increase efficiency at organizational levels. 

AutonomyAI’s proprietary Agentic Context Engine (ACE) comprehends organizational frameworks, powering a suite of autonomous AI agents for companies to integrate into their front-end development workflows to yield consistent, production-ready results. The ACE-powered agents understand the nuances of a company’s codebase and organizational standard, enabling them to execute tasks with the precision and stability expected from a senior developer in minutes, such as fetching key external information like UI designs, and utilizing components from the codebase without needing a developer to specify, supervise, refactor, or test the code. 

“Until now, AI solutions for code development operated in silos, lacking context about the organization and its goals, helping individual developers complete their tasks rather than perform the tasks for them in accordance with the company’s sprint cycles,” said Adir Ben-Yehuda, CEO. “We inform our agents of the business’s needs, enabling them to simply ‘run with it’. This is pragmatic AI – the future of AI-driven development.”

AutonomyAI believes that plugging in AI agents to organizational contexts is the key to unlocking the true efficiency of AI, significantly accelerating innovation without any sacrifice to quality.

“Autonomy AI is the first AI coding solution that truly comprehends and adapts to the unique context of a business, empowering engineers to dramatically increase their efficiency while allowing organizations to put more resources into business logic and high-impact projects,” said Arik Faingold, Chairman and co-founder of AutonomyAI. Gilad Shany, investor and Managing Partner at ION Crossover, added, “AutonomyAI’s leadership team’s vision represents a fundamental shift in how organizations use AI, which will soon become the new standard.” 

AutonomyAI developed its solution on the backs of co-founder and CTO Tammuz Dubnov and an engineering team that includes four former CTOs, who saw the potential impact of AI agents on the velocity of R&D. The company’s funded emergence from stealth, its engineering team’s deep expertise, and its innovative ACE-powered AI agents position AutonomyAI to lead the emerging market for AI-powered development.

****About AutonomyAI****

Co-founded by Arik Faingold (Co-founder of Pentera and Comm-IT) and Tammuz Dubnov (CTO), and led by Adir Ben-Yehuda (CEO), AutonomyAI’s mission is to transform the way software companies develop front-end code with its Agentic Context Engine (ACE) and suite of AI agents that plug into organizational frameworks and generate ‘production-grade’ code in minutes, enabling organizations to redistribute their resources more efficiency towards more strategic and innovative projects.

AutonomyAI Emerges from Stealth with $4M Pre-Seed Funding to Transform Front-End Development with Autonomous AI Agents

Cybersecurity researcher Jeremiah Fowler uncovers a massive 47.8GB database with disturbing AI-generated content belonging to GenNomis.

A major data leak incident at GenNomis, a platform run by **South Korean** AI firm AI-NOMIS, has brought serious concerns about the risks of unmonitored AI-generated content to the forefront.

For your information, GenNomis is an AI-powered image-generation platform that allows users to create unrestricted images from text prompts, generate AI personas, and perform face-swapping, with over 45 artistic styles and a marketplace for buying and selling user-generated images.

****What Data Was Exposed?****

According to vpnMentor’s report, shared with Hackread.com, cybersecurity researcher Jeremiah Fowler discovered a publicly accessible and misconfigured database containing a whopping 47.8 gigabytes of data, including 93,485 images and JSON files.

This trove of information revealed a disturbing collection of explicit **AI-generated material**, face-swapped images, and depictions involving what appeared to be underage individuals. A limited examination of the exposed records showed a prevalence of x-rated content, including AI-generated imagery that raised red flags about the exploitation of minors.

The incident supports warnings from a UK-based internet watchdog, which **reported** that dark web pedophiles are using open-source AI tools to produce child sexual abuse material (**CSAM**).

Deepfake Images of Minors (Source: vpnMentor)

Fowler **reported** seeing numerous images that appeared to depict minors in explicit situations, as well as celebrities portrayed as children, including figures like Ariana Grande and Michelle Obama. The database also contained JSON files that logged command prompts and links to generated images, offering a glimpse into the platform’s inner workings.

****Aftermath and Dangers****

Fowler discovered that the database lacked basic security measures such as password protection or encryption but explicitly stated he implies no wrongdoing by GenNomis or AI-NOMIS for the incident.

He promptly sent a responsible disclosure notice to the company, and the database was deleted after GenNomis and AI-NOMIS websites went offline. However, a folder in the database labelled “Face Swap” disappeared before he sent the disclosure notice.

Listed Folders (Source: vpnMentor)

This incident highlights the growing problem of “**nudify**” or **Deepfake** pornography, where AI is used to create realistic explicit images without consent. Fowler noted, elaborating that an **estimated** 96% of Deepfakes online are pornographic, with 99% of those involving women who did not consent.

The potential for misuse of the exposed data in extortion, reputation damage, and revenge scenarios is substantial. Moreover, this exposure contradicts the platform’s stated guidelines, which explicitly prohibit explicit content involving children.

Fowler described the data exposure as a “wake-up call” regarding the potential for abuse within the AI image generation industry, highlighting the need for greater developer responsibility. He advocates for the implementation of detection systems to flag and block the creation of explicit Deepfakes, particularly those involving minors and stresses the importance of identity verification and watermarking technologies to prevent misuse and facilitate accountability.

At the time of writing, the GenNomis website was offline.

AI Image Site GenNomis Exposed 47GB of Underage Deepfakes

Accidentally deleted some photos from your iPhone? You’re definitely not alone; most iPhone users have done it at…

Accidentally deleted some photos from your iPhone? You’re definitely not alone; most iPhone users have done it at some point. The good news is that it’s often not the end of the road. In this guide, we’ll walk you through several straightforward ways to recover those deleted pictures, with clear steps anyone can follow.

****Can You Get Deleted Photos Back on iPhone?****

In short? Yes, most of the time, you can. Apple knows people accidentally delete stuff all the time. Maybe you tapped the wrong photo while half-asleep or thought you had a backup when you didn’t. Whatever the reason, iPhones aren’t unforgiving. There are built-in options that can help you get those photos back.

First up is the Recently Deleted album – Apple’s built-in “Are you sure about that?” folder. Deleted photos usually stick around there for 30 days before they’re permanently removed.

But if it’s been more than 30 days, or you have already emptied that folder, don’t give up just yet. There’s still hope. Between iCloud backups, Finder or iTunes backups, and specialized recovery software, there are still ways to bring those photos back even if they seem long gone.

The key is knowing where to look and acting quickly before the data gets overwritten.

****How to Get Deleted Photos from iPhone in the Photos App****

Alright, let’s start with the easiest way – the _Recently Deleted_ folder. It’s the first thing anyone, including Apple’s official guide, will tell you to check. And honestly, they’re right. This little folder has saved us more times than we’d like to admit.

How to get deleted photos back using the Recently Deleted folder:

1.  Open the **Photos** app on your iPhone.
2.  Scroll down and find the **Recently Deleted** folder under _Utilities_.
3.  Open it – you’ll see photos and videos that were deleted in the last 30 days.
4.  All you have to do is tap **Select**, choose the photo (or photos) you want back, hit **Recover** or **Recover All**, and they jump right back into your photo library like nothing ever happened. It’s almost too easy, which is maybe why some people forget it’s even there.  
    

Now, if you don’t see the photos you’re looking for, it’s probably because it’s already been more than 30 days, or maybe you cleared this folder out yourself. But don’t stop here – this is always step one, sure, but it’s definitely not the only one.

If the _Recently Deleted_ folder came up empty, there’s still a classic option: backups.

A lot of iPhone users don’t realize they might already have copies of their deleted photos tucked away in an iCloud backup or on their computer from the last time they synced using Finder or iTunes. The catch? Getting those photos back usually means restoring your iPhone to an earlier state, rewinding your entire device to how it was at the time of the backup.

But here’s something important to check before you even start digging through backups: if you had iCloud Photos turned on, your photos weren’t part of your iPhone backup at all. They were syncing separately with iCloud. So, in that case, restoring a backup won’t help because the photos were never included in the backup to begin with.

This part trips up a lot of people, and it comes up all the time on Apple’s official discussion forums – Many users don’t realize until it’s too late that iCloud Photos and iCloud Backups don’t work together the way they assumed.

Now, if you _didn’t_ have iCloud Photos turned on, you’re still in the game. Let’s break down the two main types of backups you can check.

****1\. Use Finder or iTunes Backup****

If you’ve ever plugged your iPhone into your computer and made a backup, even if you don’t remember when, there’s a chance your photos are still in there. To check, connect your iPhone to your Mac. If you’re using Windows, you’ll be using iTunes instead.

*   On a Mac, open up **Finder** like you normally would. On Windows, fire up **iTunes** if you still have it installed. From there, your iPhone should pop up in the sidebar.
*   Select your iPhone.

*   In the _General_ or _Summary_ tab, click Restore Backup.
*   Choose a backup from before you lost the photos.
*   Click **Restore** and wait – it might take a while, depending on the size of your backup.

Once it’s done, your iPhone will look the way it did when you made that backup, photos included.

Quick heads up: Restoring a backup will replace everything on your iPhone with whatever was saved at that time. So anything added after that, like messages, apps, or photos, could be lost unless it’s backed up somewhere else.

****2\. Use iCloud Backup****

If you don’t use a computer for backups, no worries – iCloud might still have your back. But fair warning, this method is a bit more involved because you’ll need to reset your iPhone before you can load an older backup.

Here’s how it works:

*   First, check if you even have a usable backup. Go to **Settings** > **Apple ID** (your name at the top) > **iCloud** > **iCloud** **Backup**.

*   Tap on your device name and look at the date of the latest backup. If the backup was made _before_ you deleted the photos, you’re in business.

*   Next, go back to **Settings** > **General** > **Transfer or Reset iPhone** > **Erase All Content and Settings**.

*   Your iPhone will reset and bring you to the setup screen. Follow the prompts until you reach the **Apps & Data** screen.

*   Choose **Restore from iCloud Backup** and sign in to your Apple ID.

*   Select the backup you just checked and let the restore run its course.

Once it finishes, your iPhone will be back to how it looked on the day of that backup – photos, messages, and all.

Quick reminder: if iCloud Photos was turned on, your photos weren’t included in your iPhone backup. They live in your iCloud Photos library, separate from the backup itself.

If that’s the case, check your other synced devices or log into iCloud.com from any browser. There’s always a small chance that the sync didn’t complete. Maybe your iPhone was in low power mode or the Wi-Fi wasn’t cooperating, and your deleted photos are still sitting safely in the cloud.

****How to Retrieve Permanently Deleted Photos from an iPhone with Software****

If you had no success with any of the previous steps, it might be worth it to try data recovery tools. This kind of software can recover deleted photos, videos, messages, contacts, and much more, even when they are not included in recent iPhone backups.

The good news is that there are plenty of options out there, and some of the best data recovery software tools in 2025 make the process way less intimidating than it sounds. One such popular one is **Disk Drill**, which we’ll use as an example here.

It works on both Mac and Windows and is pretty straightforward. Disk Drill can scan your iPhone directly for recoverable photos or dig into your Finder/iTunes backups and pull out individual files – which means you won’t even need to erase your entire phone to get those photos back.

Here’s how to recover deleted photos from your iPhone with this tool:

*   Download Disk Drill from the official www.cleverfiles.com website and install it on your Mac like you would any regular app.

*   Once it’s installed, open it up and look for the **iPhones & iPads** section in the sidebar.

*   Select your iPhone if you want to try scanning the device directly for deleted photos. Or, if you’re hoping to pull photos from an older backup, you can select an available Finder or iTunes backup right inside Disk Drill.

*   Next, click the **Search for lost data** button to kick off the scan.

*   Your iPhone will ask you for your device password – go ahead and enter it directly on the phone. If you’re dealing with an encrypted backup instead, Disk Drill will pop up a password prompt – you’ll need to enter your backup password to continue.

*   Now, sit tight and let Disk Drill do its thing. Scans can take a while depending on how much data you have.

*   Once the scan finishes, head over to the **Photos** section in the results. You’ll see previews of the photos Disk Drill found. _Pro tip_: hit the spacebar to bring up a quick preview.

*   When you’re ready, select the photos you want back, click **Recover**, and choose a spot on your Mac to save them.

A couple of things to keep in mind:

*   Disk Drill needs free space – about double the used space on your iPhone – to run the scan properly.

*   The free version lets you preview all recoverable photos, but if you want to actually recover them, you’ll need to upgrade to Disk Drill Pro.

****Video Guide****

****The Bottom Line****

There are a few ways you can try to recover deleted photos on an iPhone. Start with the _Recently Deleted_ folder, then check any backups, and if that doesn’t work, you can try using recovery software for photos that were permanently deleted.

But let’s be honest: if the photos are truly gone, what are your chances? It’s complicated. iPhones keep photos in secure databases, and when something is deleted, it’s not wiped right away. It’s just marked as deleted. Recovery tools don’t dig directly into the phone. Instead, they create a backup through Finder or iTunes and look in that backup for traces of those photos that haven’t been fully erased yet.

Here’s the most important thing to know: As soon as you realize something was deleted and there’s no backup, put your iPhone in Airplane Mode and stop using it for anything else. The more it’s used, the more likely it is that the deleted data will be overwritten.

Acting quickly gives you the best shot at getting your photos back.

How to Recover Deleted Photos from an iPhone

The Growing Threat of Digital Identity Theft Identity theft is a continuous online threat that lurks behind every…

****The Growing Threat of Digital Identity Theft****

Identity theft is a continuous online threat that lurks behind every login, transaction, and online engagement in 2025, rather than being a one-time criminal. Protecting your financial and personal identity has never been more important, especially with fraudsters using sophisticated phishing techniques, data breaches at an all-time high, and sensitive information regularly **spilling on the dark web**.

Today’s consumers must decide which identity protection service to choose to secure their digital presence. Two names consistently dominate this space, prompting one key question: Who secures your digital life better in 2025? This face-off dissects and compares every key detail of the two leading services to help you make an informed, security-driven decision. Suppose you’ve ever worried about your social security number, credit details, or personal data falling into the wrong hands. In that case, this analysis is crafted for you so you can stop guessing and start protecting what matters.

****Features Breakdown – What’s on Offer?****

When it comes to identity protection, not all services are created equal. Both contenders in this face-off promise strong defenses, but their feature sets reveal key differences. The essentials look similar: credit monitoring, dark web surveillance, fraud alerts, and identity recovery assistance.

However, it’s the finer details and execution that separate the two. One service leverages near **real-time alerting systems**, ensuring users are notified within minutes of suspicious activity. The other, while comprehensive, often experiences delays, leaving users exposed for more extended periods without immediate action.

Beyond monitoring, some services offer extras like VPN access, password managers, and family plan coverage. Yet, many users overlook how bloated or fragmented these bundles can get, often pushing unnecessary upsells disguised as “premium” features. The reality is that identity protection isn’t about flashy add-ons. It’s about speed, accuracy, and straightforward security layers that work without gimmicks. And that’s precisely what today’s digital users should demand.

****Pricing and Upsells – The Hidden Costs of Protection****

In an era of growing online risks, budget-conscious users are often trapped in a game of hidden fees and escalating subscription costs. It’s not enough to look at the price tag; you need to understand the actual cost of long-term digital protection. One of the services in this comparison frequently upsells. Their initial pricing may appear competitive, but users soon discover that advanced features like identity restoration, credit lock services, or family plan expansions come at an additional cost.

This paywall-heavy model creates confusion and penalizes customers for seeking full coverage. On the other hand, the competitor in this analysis has streamlined its pricing strategy. Instead of bombarding users with constant upgrade prompts, it bundles its most valuable features upfront, offering predictable pricing and transparent plans. In a market flooded with marketing noise, knowing precisely what you’re paying for and avoiding surprise fees should be non-negotiable.

****Family & Multi-User Protection – Who Watches Over Everyone?****

Cybercriminals don’t just target individuals; they target households. In 2025, identity theft attacks will be increasingly focused on families, especially children and elderly relatives who may be less aware of the risks. Multi-user and family protection plans have become essential to **identity theft services**. One of the contenders in this face-off leads the charge with flexible, affordable family plans that cover multiple members under a single subscription without nickel-and-diming users for every additional account.

These plans don’t just duplicate features; they extend monitoring and real-time alerts to every member, ensuring your family’s data is as protected as yours. In comparison, the other service struggles in this department, often locking family coverage behind complex, expensive tiers. For modern families juggling financial security and digital privacy, simplified, scalable coverage isn’t optional; it’s essential. The best service doesn’t just protect you; it protects everyone you care about, all under one roof.

****Real-Time Alerts & Threat Response – The Speed Factor****

When your identity is at risk, speed is everything. A delay of even a few hours can result in fraudulent charges, compromised credit, or worse, stolen personal data being sold across black market forums. This is where one service outperforms the other in this showdown. It consistently delivers faster, near real-time alerts when suspicious activity is detected, giving users time to respond, lock accounts, and prevent financial damage.

The other provider, while reputable, has been criticized for lagging notifications and slower response times. Delayed alerts can mean the difference between safety and disaster in a digital landscape where hackers operate within minutes. Proper identity protection isn’t passive; it’s proactive, instant, and relentless. In 2025, anything less than real-time threat alerts is no longer acceptable. Digital users deserve a service that detects threats and allows them to act before it’s too late.

****Who Wins the 2025 Identity Protection Battle?****

After analyzing features, pricing strategies, family coverage, and real-time threat response, the winner of this 2025 identity protection face-off is clear. While both services offer credible security options, **Aura and LifeLock** differ significantly in execution. Aura’s faster alerts, more substantial family plans, simplified pricing, and absence of constant upsells make it the more intelligent choice for modern users.

In a digital world where identity theft is evolving daily, the best defense isn’t about branding or bundled perks; it’s about who acts faster, protects wider, and delivers real value without playing games. Your digital identity is worth more than confusing subscriptions and delayed responses. Choose the service that prioritizes your protection, not their profit margins.

Source

HackRead