Category: CYBER SECURITY

Google has released emergency security updates for Chrome to fix another zero-day vulnerability that has already been exploited in the wild. This is the fifth Chrome zero-day patched by the company since the start of the year.

CISA has ordered U.S. government agencies to secure their Check Point Remote Access VPN and Mobile Access systems against a critical vulnerability that is already being exploited in zero-day attacks by Qilin ransomware affiliates.

France’s digital affairs directorate, DINUM, has warned that hackers breached Tchap, the French government’s encrypted messaging platform, after gaining access through a hijacked user account.

The University of Oxford has disclosed a new data breach after being informed by its third-party provider, Group GTI, that its CareerConnect career services platform had been compromised.

Gogs has released a security update to fix a critical zero-day vulnerability that could allow attackers to compromise internet-facing servers and access any hosted repositories, including private ones.

WhatsApp has detected and stopped spear phishing campaigns allegedly linked to the NSO Group after investigating user reports about social engineering attacks.

Microsoft has temporarily removed access to dozens of its open source projects on GitHub while it investigates how hackers were apparently able to compromise the projects and add password-stealing malware to the code.

Meta has revealed that more than 20,000 Instagram users had their accounts hijacked after attackers exploited a flaw in the company’s AI-powered support system to reset passwords and gain access to accounts.

Hackers are actively exploiting a critical security flaw in the Everest Forms Pro WordPress plugin that can allow them to take full control of vulnerable websites.

A Chinese espionage group tracked as UNC5221 has been linked to attacks on Microsoft 365 environments using the Brickstorm backdoor and two previously undocumented malware tools named Plenet and AgentPSD.

Toshiba and Muji have warned website visitors about suspicious sign-in screens that appeared on their websites and could have tricked users into entering their account credentials.

A ransomware gang has taken its attacks on law firms to a more aggressive level by sending fake IT workers directly to victims’ offices, where they steal data from computers using USB drives or help other gang members connect to systems remotely, according to Google...

A former IBM cybersecurity executive has accused the company of being hacked multiple times by foreign governments over the past decade and then covering up the incidents.

A Chinese-speaking cybercrime group has expanded its operations into Europe, using newly discovered malware and the Atlas backdoor in a wave of financially motivated attacks.

The U.S. Treasury’s Office of Foreign Assets Control has announced sanctions against Nobitex, Iran’s largest cryptocurrency exchange, accusing the platform of helping process payments linked to terrorist activities, sanctions evasion, and transactions connected to the Islamic Revolutionary Guard Corps.

A widespread Instagram hacking campaign that used Meta’s AI support chatbot to take over accounts appears to have continued even after the company said the issue had been fixed.

Acer has confirmed that it is working on fixes for two maximum-severity zero-day vulnerabilities affecting its Wave 7 mesh routers.

Europol has taken part in a major international crackdown on criminal networks making millions from illegal access to premium sports broadcasts, films, and TV channels.