Category: CYBER SECURITY

North Korean hackers have launched another large-scale software supply chain attack, publishing more than 100 malicious packages across popular developer platforms in an effort to infect software developers and cryptocurrency professionals.

Google, the FBI, and industry partners have disrupted the NetNut residential proxy botnet, a massive network that hijacked more than two million Android devices, including smart TVs and streaming boxes, to help cybercriminals hide their attacks.

A large-scale password spraying campaign has targeted Microsoft 365 environments, generating more than 81 million login attempts over just two weeks in an effort to compromise business accounts.

Apple's privacy-focused Hide My Email feature is reportedly affected by a security flaw that could expose users' real email addresses, despite being designed to keep them private.

Adobe has released emergency security updates to fix seven critical vulnerabilities affecting its ColdFusion web application development platform and Campaign Classic marketing automation software.

The U.S. government is offering a reward of up to $10 million for information that helps identify or locate members of two Russian-linked hacking groups accused of targeting WhatsApp and Signal users.

WhatsApp has started rolling out one of its biggest privacy updates yet by allowing users to create unique usernames instead of sharing their phone numbers.

Nissan has confirmed that a cyberattack targeting an Oracle PeopleSoft vulnerability exposed the personal information of some current and former employees.

The U.S. Department of Justice has seized nearly 400 websites that were illegally streaming live matches from the 2026 FIFA World Cup.

WhatsApp has patched a privacy loophole that allowed users to determine whether someone had blocked them by checking the app's encryption verification feature.

Japanese telecommunications giant KDDI Corporation has revealed that a cyberattack may have exposed the email addresses and passwords of up to 14.22 million customer accounts after attackers breached one of its email systems used by five internet service providers (ISPs) in Japan.

The FBI and CISA warn that Russian hackers are using fake Signal support messages to steal Backup Recovery Keys, allowing them to restore encrypted backups and read victims' past conversations.

Russian hackers were responsible for the cyberattack that crippled Jaguar Land Rover (JLR) last year, according to a new report from The New York Times, citing people familiar with the investigation.

A widely used Google Chrome extension designed to block YouTube ads has come under scrutiny after security researchers discovered it contains the capability to execute arbitrary JavaScript code.

A major crackdown on online sports piracy has disrupted the PirloTV network after authorities and entertainment industry groups shut down 44 domains linked to the illegal streaming platform.

Cybersecurity researchers have uncovered a new campaign targeting macOS users with the Atomic macOS Stealer (AMOS) malware through a growing social engineering tactic known as ClickFix.

Market intelligence company Klue has revealed that the credentials used by hackers to steal customer data earlier this month were originally issued in 2022 as part of a limited pilot project.

Tata Electronics has confirmed that it recently experienced a cybersecurity incident after a ransomware group claimed to have stolen and published a large amount of company data, including documents allegedly linked to Apple and Tesla.

Cybersecurity researchers have uncovered an ongoing malware campaign targeting WhatsApp users across multiple countries with deceptive messages disguised as business and financial documents.

A cybersecurity company known for developing spyware and hacking tools for government agencies has disclosed details of a vulnerability affecting older Apple iPhones, potentially opening new opportunities for security researchers to explore iOS exploits and jailbreak techniques.