Category: CYBER SECURITY

CarGurus has suffered a major data breach that exposed the personal information of around 12.5 million users.

Russia is investigating Telegram founder Pavel Durov as part of a criminal case related to the alleged facilitation of terrorist activities, according to state-run newspaper Rossiyskaya Gazeta.

Spanish authorities have arrested four suspected members of a hacktivist group known as Anonymous Fénix, which is accused of launching cyberattacks against government ministries, political parties, and public institutions.

Several popular mental health apps on Google Play have security weaknesses that could expose users’ deeply personal medical information, according to a new report from mobile security firm Oversecured.

Chinese hackers breached the network of Pulse Secure, a VPN provider owned by software company Ivanti, in February 2021, according to new reporting from Bloomberg.

The Federal Bureau of Investigation has issued a new cybersecurity alert warning about a growing number of malware-enabled ATM jackpotting attacks across the United States.

African law enforcement agencies have arrested 651 suspects and recovered more than $4.3 million during a large international operation targeting investment fraud, mobile money scams, and fake loan application schemes.

A newly discovered Android banking malware called Massiv is spreading by pretending to be an IPTV streaming application, allowing attackers to steal digital identities and gain access to victims’ online banking accounts.

Hackers have stolen personal and contact information belonging to nearly one million users after breaching the systems of Figure Technology Solutions, a blockchain-focused financial technology company founded in 2018.

Microsoft has confirmed that a bug in its Office software allowed Copilot AI to process and summarize confidential emails without proper permission.

Polish authorities have arrested a 47-year-old man suspected of links to the notorious Phobos ransomware group during a coordinated international crackdown known as Operation Aether.

Notepad++ has introduced a new “double-lock” security design for its update mechanism after a recently disclosed supply-chain attack exposed weaknesses in older versions.

A suspected Chinese state-backed hacking group has been exploiting a critical zero-day vulnerability in Dell software since mid-2024, according to new research from Mandiant and the Google Threat Intelligence Group.

Google has released an emergency security update to patch a high-severity Chrome vulnerability that is already being exploited in zero-day attacks.

Fake AI Chrome extensions used by over 300,000 users were found stealing Gmail data, credentials, and voice input in a large malware campaign.

A critical security vulnerability has been discovered in the WPvivid Backup & Migration plugin for WordPress, putting more than 900,000 websites at risk of complete takeover.

State-sponsored hacking groups from China, Iran, North Korea, and Russia are actively using Google’s Gemini AI model to support nearly every stage of cyber attacks, according to a new report from Google Threat Intelligence Group (GTIG).

Microsoft has patched a serious security flaw in Notepad that could have allowed attackers to trick users into clicking malicious links embedded in Markdown files.

North Korean hackers are running highly targeted cyberattacks against companies in the cryptocurrency sector using AI-generated deepfake videos and a technique known as ClickFix to deliver malware on both macOS and Windows systems.