Category: CYBER SECURITY

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to urgently patch a critical security flaw in the Widget Factory Joomla Content Editor (JCE) plugin that is being actively exploited by attackers.

Kodak has confirmed that it is investigating a cybersecurity incident after an unauthorized third party gained temporary access to a limited amount of company data.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to secure their systems against an actively exploited vulnerability affecting the LiteSpeed cPanel user-end plugin.

The U.S. Federal Trade Commission (FTC) says Americans lost $3.5 billion to imposter scams in 2025, with reported losses nearly tripling since 2020.

Security researchers have uncovered a coordinated malware campaign on the JetBrains Marketplace involving at least 15 malicious plugins designed to steal AI API keys from developers.

Security researchers have discovered a new Android banking trojan called Rokarolla that targets 217 banking and cryptocurrency applications and can take near-complete control of infected devices.

A security researcher has revealed a major vulnerability in FIFA's internal systems that could have allowed an attacker to take control of World Cup television broadcasts worldwide.

A supply-chain attack targeting the content delivery network (CDN) of software publisher Awesome Motive exposed users of several popular WordPress marketing plugins to malicious code, according to findings from e-commerce security firm Sansec.

The United States Department of Justice announced Friday that it has seized two websites accused of hosting nonconsensual AI-generated nude images and videos of women, marking what appears to be the first publicly disclosed domain seizure under the TAKE IT DOWN Act.

The Federal Bureau of Investigation, working alongside Google and Black Lotus Labs, has dismantled a large-scale Chinese phishing-as-a-service operation known as Outsider Enterprise.

A cyberattack temporarily disrupted services at four major Iranian banks, but officials said customer data was not compromised.

A China-linked cyberespionage group known as Velvet Ant remained hidden inside a major organization’s critical infrastructure network for nearly a decade, according to a new investigation by Sygnia.

Google has filed a lawsuit seeking to dismantle the infrastructure behind an alleged large-scale AI-powered cybercrime operation that used fake websites, scam text messages, and phishing tools to steal passwords, credit card details, and other sensitive information from victims.

At least 40 fake FIFA World Cup 2026 ticketing websites have been linked to a wider fraud network involving 15 active cybercriminal operators, according to a new report by cybersecurity firm CloudSEK.

International law enforcement agencies have dismantled AudiA6, a cryptocurrency laundering service allegedly used by ransomware groups and other cybercriminals to hide stolen funds.

Kyushu Electric Power has disclosed a major physical security incident after an external storage device containing customer information went missing from one of its subsidiaries’ server rooms.

The University of Nottingham has confirmed that a cybercriminal group gained access to its student records system, exposing data belonging to both current students and alumni.

South Korea’s data protection regulator has fined e-commerce giant Coupang a record 624.7 billion won, or about $410 million, over serious privacy violations linked to a massive data breach that affected more than 37 million users.

The JDY botnet, a malware network previously linked to Chinese threat actors such as Volt Typhoon, has expanded its targeting and reconnaissance activity, with a strong focus on the United States.

Nearly one million passports, driver’s licenses, and other photo IDs were reportedly left exposed on the public internet, raising serious concerns about how sensitive personal data is stored and protected online.