Category: CYBER SECURITY

Spanish police have dismantled a large cybercrime and money-laundering network accused of stealing around €140 million (about $160 million) through investment scams and business email compromise (BEC) attacks.

Users of LastPass and Bitwarden are being targeted in a new phishing campaign that uses fake security policy notifications to trick victims into visiting fraudulent websites and downloading potentially malicious files.

The European Union and the United Kingdom have announced their first coordinated cyber sanctions package against Russia, targeting individuals and organizations accused of carrying out years of cyberattacks, espionage, and disruptive operations across Europe.

A new report claims Iran exploited long-known weaknesses in global mobile phone networks to track the locations of U.S. military personnel across the Middle East before and during the recent conflict.

A new report has raised concerns that Europe’s growing dependence on Chinese-made solar inverters could expose the continent to a major cybersecurity threat.

The Australian Cyber Security Centre (ACSC) has warned that cybercriminals are carrying out a large-scale global campaign targeting vulnerable content management systems (CMS) and website plugins.

Dutch police believe local hackers were involved in the cyberattack that compromised the personal information of millions of customers at telecommunications provider Odido earlier this year.

A former U.S. ransomware negotiator has been sentenced to four years in federal prison after admitting he secretly worked with the notorious BlackCat (ALPHV) ransomware gang while pretending to help victims recover from cyberattacks.

KDDI has revealed that attackers compromised an email platform used by five internet service providers in Japan, exposing millions of customers' email addresses and passwords after exploiting a previously unknown software vulnerability.

Cybersecurity researchers have confirmed that attackers are actively exploiting a critical vulnerability in Adobe ColdFusion, tracked as CVE-2026-48282, only hours after Adobe released security updates.

Opera has fixed a serious security vulnerability in Opera GX, its gaming-focused web browser, after researchers discovered that a malicious website could silently install a browser mod and use it to steal sensitive information from websites a victim visits.

North Korean hackers have launched another large-scale software supply chain attack, publishing more than 100 malicious packages across popular developer platforms in an effort to infect software developers and cryptocurrency professionals.

Google, the FBI, and industry partners have disrupted the NetNut residential proxy botnet, a massive network that hijacked more than two million Android devices, including smart TVs and streaming boxes, to help cybercriminals hide their attacks.

A large-scale password spraying campaign has targeted Microsoft 365 environments, generating more than 81 million login attempts over just two weeks in an effort to compromise business accounts.

Apple's privacy-focused Hide My Email feature is reportedly affected by a security flaw that could expose users' real email addresses, despite being designed to keep them private.

Adobe has released emergency security updates to fix seven critical vulnerabilities affecting its ColdFusion web application development platform and Campaign Classic marketing automation software.

The U.S. government is offering a reward of up to $10 million for information that helps identify or locate members of two Russian-linked hacking groups accused of targeting WhatsApp and Signal users.

WhatsApp has started rolling out one of its biggest privacy updates yet by allowing users to create unique usernames instead of sharing their phone numbers.

Nissan has confirmed that a cyberattack targeting an Oracle PeopleSoft vulnerability exposed the personal information of some current and former employees.