Category: CYBER SECURITY

Google says hackers are using voice phishing to breach major financial firms, steal sensitive data, and demand multimillion-dollar ransoms.

OpenAI has dismantled a coordinated scam operation based in Cambodia that used ChatGPT to support a wide range of online fraud, including investment scams, romance scams, gambling schemes, and fake law enforcement impersonation campaigns.

Google has confirmed that a software bug—not actual malware—was responsible for a wave of Blogger websites being incorrectly flagged for violating its "Malware and Similar Malicious Content" policy, causing hundreds of legitimate blogs to be locked or temporarily removed.

A cybersecurity researcher has uncovered a publicly accessible database containing more than 102,000 sensitive records that appear to be linked to Brazil's Health Surveillance Information System (SISVISA), potentially exposing personal information, government documents, and regulatory records.

cPanel has patched a critical privilege escalation flaw that could let authenticated users gain root database access on vulnerable servers.

Security researchers have uncovered a set of post-compromise attack techniques that allow malware running on a Windows computer to access passkey-protected accounts without requiring a fingerprint, PIN, or any visible authentication prompt.

Microsoft has linked a global cyber-espionage campaign targeting hotel and conference center Wi-Fi networks to the Russian state-backed hacking group Midnight Blizzard, also known as APT29.

A cyberattack targeting the U.K.'s Police National Legal Database (PNLD) has exposed the contact information of more than 100,000 police officers, criminal justice professionals, and government partners, according to an official statement and reports.

A firmware flaw in older versions of the Coldcard Bitcoin hardware wallet has been linked to a series of large cryptocurrency thefts that may have resulted in losses of up to 1,367.05 BTC, worth around $88.6 million, according to new findings from Galaxy Research.

Adobe has released important security updates to fix several critical vulnerabilities affecting Adobe Campaign Classic (ACC) and Adobe Bridge.

Google says its artificial intelligence tools are dramatically changing how security vulnerabilities are discovered and fixed, revealing that the company patched more flaws in Chrome over the past month than it did during the previous two years combined.

South Korea's privacy regulator has fined wireless carrier KT Corp. 53.9 billion won (about $37.4 million) after a major data breach exposed the personal information of more than 16,000 mobile users and led to unauthorized financial transactions.

A newly uncovered cyber-espionage campaign has revealed that the Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is exploiting a critical Microsoft Exchange Outlook Web Access (OWA) vulnerability to deploy a powerful new backdoor called OWAReaper.

Anthropic has revealed that its experimental AI model, Claude Mythos Preview, independently helped uncover two new cryptographic attacks, including a complete key-recovery attack against the HAWK-256 digital signature scheme and a significantly faster attack on a reduced version of AES-128.

More than 24,000 internet-connected servers have been found exposing authentication password hashes because of a long-standing weakness in the Intelligent Platform Management Interface (IPMI), a remote management technology introduced more than two decades ago.

JetBrains has patched a critical TeamCity vulnerability that could let attackers execute code remotely without authentication.

The Coca-Cola Company has confirmed that hackers stole data from its dairy subsidiary, Fairlife, during a ransomware attack that disrupted production earlier this month.

Hackers are actively exploiting a critical vulnerability in the FastJson open-source Java library that allows remote code execution without requiring user interaction or elevated privileges.

Cybercriminals are abusing Steam discussion forums to spread a ClickFix social engineering attack that disguises malware as a solution for common gaming and PC issues.