Category: CYBER SECURITY

Cybersecurity researchers have discovered a new social engineering attack called InstallFix that tricks users into running malicious commands while pretending to install legitimate command line tools.

A Ghanaian man has pleaded guilty to his role in a massive fraud operation that stole more than $100 million from victims across the United States through romance scams and business email compromise schemes.

Spanish and Ukrainian law enforcement authorities have dismantled a criminal network that exploited Ukrainian women displaced by the war to run a large scale online gambling fraud scheme that laundered nearly €4.75 million.

A U.S. government contractor’s son accused of stealing more than $46 million in cryptocurrency from the U.S. Marshals Service was arrested Wednesday on the Caribbean island of Saint Martin.

Hackers are actively exploiting a critical vulnerability in the User Registration and Membership plugin used by more than 60,000 WordPress websites.

The Wikimedia Foundation experienced a security incident after a self-propagating JavaScript worm modified user scripts and vandalized pages on Meta Wiki.

The FBI is reportedly investigating a cybersecurity breach that affected one of its internal systems used to manage wiretaps and foreign intelligence surveillance warrants.

Security researchers have uncovered a previously undocumented iOS exploit toolkit called Coruna that has been used by multiple threat actors in espionage operations and financially motivated cyberattacks.

Password management service LastPass has issued a warning about a new phishing campaign targeting its users with fake alerts claiming unauthorized access to their accounts.

The FBI and Europol have shut down the hacking forum LeakBase in a major international operation targeting cybercrime platforms.

Security researchers have discovered a powerful set of iPhone hacking tools that appear to have leaked from a government customer and are now being used by cybercriminals and espionage groups.

A series of cyberattacks hit Iran early Saturday, happening at the same time as joint U.S. and Israeli military strikes on targets inside the country, according to cybersecurity experts.

A popular Chrome extension called QuickLens Search Screen with Google Lens has been removed from the Chrome Web Store after it was hijacked and turned into a malware delivery tool targeting thousands of users.

South Korea’s National Tax Service made a costly mistake after accidentally revealing the recovery phrase of a seized cryptocurrency wallet, allowing someone to steal millions in digital assets.

Security researchers have discovered that thousands of Google API keys publicly exposed in website code could be abused to access the Gemini AI assistant and potentially retrieve private data.

UFP Technologies, a U.S.-based medical device manufacturer, has revealed that a recent cybersecurity incident compromised parts of its IT systems and led to data theft.

Google’s Threat Intelligence Group, along with Mandiant and other partners, has stopped a large global espionage campaign linked to a suspected Chinese threat actor.

The US government has imposed sanctions on two companies accused of buying and reselling zero-day exploits, along with their founders and associates, citing national security concerns.