Category: CYBER SECURITY

A critical vulnerability in Elementor Pro could allow unauthenticated attackers to upload malicious PHP files and execute arbitrary code on affected WordPress websites.

Security researchers have uncovered a large cybercrime operation using thousands of compromised WordPress websites to spread malware, steal files and support ransomware attacks.

Sakura Internet says hackers accessed its sales management system, potentially exposing information linked to as many as 1,360,563 member accounts.

Cybersecurity researcher Jeremiah Fowler has uncovered a major data exposure involving millions of facial images from what appears to be a reverse image search service.

Varonis has disclosed three vulnerabilities in Microsoft Copilot Personal that could allow attackers to execute prompts without user interaction, extract data from connected services, and plant persistent instructions in Copilot's memory.

U.S. authorities have expanded charges against 17 alleged members of Iran-based Mabna Institute, accusing the group of hacking hundreds of universities, companies and government organizations to steal research, intellectual property and other sensitive data.

GitLab has released an emergency security update for a critical vulnerability that could allow unauthenticated attackers to remotely modify or delete public projects and user data on affected self-managed installations.

A critical vulnerability in the Forminator Forms WordPress plugin affects more than 600,000 sites and could allow unauthenticated attackers to upload executable PHP files and take complete control of vulnerable websites.

A threat actor known as TheHatman is selling millions of alleged employee records from Fortune 500 companies, claiming they were stolen from Microsoft Azure.

France’s Ministry of the Economy and Finance has confirmed a data breach affecting 678,000 individuals and professionals after attackers accessed systems operated by the country’s tax administration.

Cybercriminals are increasingly buying expired domains because they can inherit valuable traffic, backlinks and reputation from their previous owners and quickly turn them into malicious infrastructure.

Hackers are exploiting a recently patched macOS Screen Sharing vulnerability to gain unauthorized access to systems and install Monero cryptocurrency miners.

Ukrainian authorities have dismantled 94 fraudulent call centers accused of running investment scams, impersonating banks and stealing access to victims’ financial accounts.

North Korean hackers linked to the Lazarus group are exploiting a Windows zero-day vulnerability to gain SYSTEM privileges and target defense, aerospace and aviation organizations.

Researchers discovered more than 737 Chrome extensions impersonating popular VPN and proxy brands, with nearly 75,000 downloads and hundreds still available on the Chrome Web Store.

Security researchers have detected attempts to exploit a critical vulnerability in Adobe Commerce and Magento that could allow attackers to take over customer accounts and access private data.

Microsoft has released its monthly security updates for August, fixing hundreds of vulnerabilities across its products, including a Windows flaw that is already being exploited in attacks.

Google says Chrome’s anti-abuse systems blocked or reduced more than 7 billion unwanted notifications per day on Android during the first quarter of 2026.

The FBI is warning that cybercriminals are targeting the online accounts of both adults and children to steal intimate photos and videos, which can then be used for harassment, extortion or other attacks.

Zoom has patched a serious security vulnerability that could have allowed attackers to take control of devices belonging to people in a meeting.