Category: CYBER SECURITY

A 25-year-old man in the United Kingdom has been sentenced to two and a half years in prison for stealing nearly £200,000 ($265,000) worth of cryptocurrency through SIM-swapping fraud.

A critical Bricksforge WordPress vulnerability with a CVSS score of 10.0 is being actively exploited, allowing unauthenticated attackers to execute PHP code on vulnerable websites.

Cybersecurity researchers have uncovered two cybercrime operations using artificial intelligence (AI) to automate attacks, compromise enterprise networks, steal sensitive data, and support financial fraud.

Japanese entertainment company Daiichi Kosho has disclosed a security incident involving malware discovered on a contractor’s computer, potentially exposing more than 8.7 million customer and employee records.

- Five U.S. states have sued TP-Link, alleging misleading security claims, insufficient disclosure of China-related risks and privacy concerns. The legal action comes as researchers detail five vulnerabilities affecting certain ISP-supplied devices.

A ransomware attack on Japanese cloud provider IDC Frontier has affected 495 organizations, disrupting railway services and food logistics while putting millions of records at potential risk.

A high-severity Telegram Desktop vulnerability, CVE-2026-10718, could let attackers steal local files and hijack accounts through specially crafted links.

Bitdefender researchers have uncovered Midnight Mimosa, a malware campaign preinstalled on thousands of low-cost Android devices across more than 150 countries.

The FBI has seized seven internet domains allegedly used by Chinese state-sponsored hacking group Flax Typhoon to operate two cyberattack tools, MicroScan and FishHub, which were used to target critical infrastructure and organizations worldwide.

Cybersecurity researchers have discovered a group of 16 malicious Mozilla Firefox extensions designed to steal cryptocurrency wallet recovery phrases and private keys.

The U.S. Department of State is offering up to $10 million for information that could help locate Chinese national Zhang Yu, who is accused of helping Chinese intelligence-linked hackers target U.S. COVID-19 research.

A 26-year-old man believed to be based in China's Guangdong province may be behind a recent series of cyberattacks targeting South Korean financial institutions, according to cybersecurity firm CrowdStrike.

Security researchers have demonstrated a remote attack against Samsung’s Galaxy S26 that can reportedly compromise the phone simply by sending it a single email.

Attackers hijacked .gh, .sl and .as domains to obtain unauthorized HTTPS certificates for Google and YouTube domains. Chrome blocked the certificates.

A 54-year-old musician from North Carolina has been sentenced to 18 months in federal prison after using AI-generated music and automated bots to fraudulently generate more than $10 million in streaming royalties from platforms including Spotify, Apple Music, Amazon Music, and YouTube Music.

A security researcher says OpenAI awarded $300 for a sandbox escape involving access to an internal Responses API endpoint.

WordPress 7.1.3 is a security and maintenance release that fixes seven vulnerabilities and four bugs. WordPress users are urged to update immediately.

Double Counter suffered a Metabase-related cyberattack that exposed Discord usernames, IP data and email addresses, with 274,900 addresses now listed by HIBP.

Ukraine’s Computer Emergency Response Team (CERT-UA) has discovered more than 100 compromised websites being used to distribute an information-stealing malware known as LunexStealer, also called Psychedelic Stealer.

Hackers are actively exploiting stored cross-site scripting (XSS) vulnerabilities in two WordPress plugins to compromise websites, install backdoors, and create unauthorized administrator accounts.