Category: CYBER SECURITY

A security researcher has released proof-of-concept exploit code for an unpatched Visual Studio Code zero-day vulnerability that could allow attackers to steal GitHub authentication tokens by tricking users into clicking a malicious link.

A large malware campaign known as WeedHack is targeting Minecraft players through fake mods, clients, cheats, and utilities, infecting more than 116,000 systems since January.

Hackers are actively exploiting a critical privilege escalation flaw in the Kirki plugin for WordPress that can let attackers take over any user account, including administrator accounts.

Dashlane says hackers stole at least a dozen encrypted password vaults belonging to customers during a cyberattack over the weekend, after attackers managed to break through the company’s two-factor authentication protections.

Google has released the June 2026 Android security updates, fixing 124 vulnerabilities, including one zero-day flaw that has already been exploited in targeted attacks.

The U.S. Cybersecurity and Infrastructure Security Agency has ordered federal agencies to secure their systems against a high-severity Oracle WebLogic Server vulnerability that was patched two years ago but is now being actively exploited in attacks.

Spanish National Police have arrested a person accused of leaking sensitive personal information linked to members of several major state organizations, including Spain’s National Cybersecurity Institute, known as INCIBE.

Several Dashlane users were temporarily locked out of their accounts after the password manager detected brute-force login attempts from unfamiliar devices and distant locations.

Nearly 2,000 WordPress websites have been infected with malware that uses Steam Community profile comments to hide command-and-control data, according to GoDaddy security researchers.

A threat actor tracked as DriveSurge has been running large-scale malware distribution campaigns by abusing compromised websites and using ClickFix and FakeUpdates tactics to infect visitors.

Atlas Menu, a cheat service used for the popular online game Grand Theft Auto V, has been hacked, exposing data from almost 64,000 accounts, according to the breach notification website Have I Been Pwned.

The debate over digital security in education has grown stronger after Instructure, the company behind the widely used Canvas learning platform, reached an agreement with hackers following a major cyberattack that disrupted thousands of universities and colleges worldwide.

Hackers are actively targeting WordPress websites using a vulnerable version of the WP Maps Pro plugin, a critical security flaw that can let attackers create rogue administrator accounts without logging in.

Microsoft is facing criticism over how it is handling publicly disclosed zero-day exploits, after a security researcher using the name Nightmare Eclipse began posting proof-of-concept exploit code online.

California Attorney General Rob Bonta has filed a lawsuit against 23andMe, now known as Chrome Holding Co., accusing the company of failing to protect customers’ sensitive genetic and personal information properly.

Google says its Chrome Device Bound Session Credentials security feature is now generally available and is rolling out to users to help prevent account takeovers caused by stolen session cookies.

Threat actors are abusing ChatGPT’s content-sharing feature to show fake OpenAI outage pages that trick users into downloading malware disguised as the ChatGPT desktop app.

A North Carolina man has been sentenced to more than 10 years in prison for selling the personal information of over 7 million elderly Americans to scammers based in Jamaica.

The ShinyHunters extortion gang stole personal information from 4.9 million accounts after hacking U.S. telecom giant Charter Communications in early April, according to data breach notification service Have I Been Pwned.