Chinese National Extradited Over $37 Million Cryptocurrency Scam
A Chinese national has been extradited to the United States over an alleged cryptocurrency investment scam that stole nearly $37 million from 174 victims.
University of Copenhagen Data Breach Exposes Information of 525,000 People
A cyberattack on the University of Copenhagen exposed personal information linked to 525,000 people, while a further update revealed compromised PIN codes affecting 20,000 staff and students.
Instagram Tests 90-Minute Videos in a New Challenge to YouTube
Instagram is testing 90-minute videos and new Reels features as it expands into long-form content and explores more ways for creators to earn money.
PHP Rebuilds Windows Packages to Fix Critical Brotli Security Flaw
PHP has released rebuilt Windows packages containing Brotli 1.2.1 to fix a critical security flaw that could expose applications using automatic HTTP response decompression.
Hackers Infect 953 Magento Stores With Malicious JavaScript Loader
Hackers have compromised 953 online stores, mainly Magento sites, using malicious JavaScript loaders that evade security scanners and target shoppers.
Microsoft Authenticator Android Flaw Could Expose Work Account Tokens
A high-severity vulnerability in Microsoft Authenticator for Android could let malicious apps steal work account tokens, while a separate token-replay campaign compromised 97 Microsoft 365 accounts across 79 organizations.
Apple Adds Apple Pencil Support to iPhone Duo With iOS 27.2
Apple's iOS 27.2 update brings Apple Pencil support to the iPhone Duo, alongside new FaceTime camera features, Edge Light, and expanded Siri AI capabilities.
OpenAI Launches GPT-6.1 Terra With Faster Performance and 50% Lower API Costs
OpenAI's GPT-6.1 Terra brings faster computer-use capabilities, improved coding and visual reasoning, fewer factual errors, and API pricing designed to make AI automation more affordable.
Microsoft 365 Token-Spraying Attack Compromises 97 Accounts Across 79 Organizations
A Microsoft 365 token-spraying campaign compromised 97 accounts across 79 organizations using stolen authentication tokens, rogue devices, and malicious inbox rules.
uCreator Android Spyware Can Hijack Telegram and WeChat Accounts
A commercial Android spyware kit called uCreator can steal Telegram credentials, hijack WeChat accounts, and collect sensitive data through modified apps.
Gheist Campaign Uses Stolen GitHub Tokens to Steal Secrets From Private Repositories
A cyber campaign called Gheist has planted more than 13,500 malicious branches across over 850 compromised GitHub accounts, targeting secrets in private repositories and enterprise environments.
Instagram Boss Admits iPhone Duo App Needs More Work
Instagram chief Adam Mosseri agrees the app needs improvements for Apple's foldable iPhone Duo after reports of interface problems on its wider display.
PHP2Shell Flaws and AI-Powered Attacks Put Global Organizations on Alert
Two critical PHP vulnerabilities can enable remote code execution, while researchers say the CARLIY0S system helped CyberCartel target more than 400 financial-sector organizations in Latin America.
Loading
