Category: CYBER SECURITY

Several major tech and data platforms, including Bumble, Match Group, and Crunchbase, were recently targeted in cyberattacks, according to a Bloomberg News report.

The Federal Bureau of Investigation has seized the notorious RAMP cybercrime forum, a platform widely used to advertise malware, hacking services, and ransomware operations.

Hackers have stolen personal and contact information linked to over 29.8 million user accounts after breaching the systems of SoundCloud, according to disclosures from the company and independent breach investigators.

A federal grand jury in Nebraska has charged 31 additional defendants for their alleged roles in a large-scale ATM jackpotting operation tied to the Venezuelan criminal group Tren de Aragua.

Multiple threat actors, including state-sponsored groups and financially motivated cybercriminals, are actively exploiting a high-severity WinRAR vulnerability tracked as CVE-2025-8088, according to new findings from the Google Threat Intelligence Group.

Microsoft has released emergency out-of-band security updates to fix a high-severity zero-day vulnerability in Microsoft Office that is actively being exploited in real-world attacks.

South Korean police believe that personal information from more than 30 million users of Coupang may have been leaked, far exceeding the company’s earlier claim that only a few thousand accounts were affected.

A lawsuit filed in the United States has accused Meta of misleading users about WhatsApp’s privacy protections.

Security researchers have observed active attacks targeting a critical vulnerability in the GNU InetUtils telnetd server that remained undiscovered for more than a decade.

U.S. federal prosecutors in South Carolina have announced that two Venezuelan nationals convicted in an ATM jackpotting scheme will be deported after completing their prison sentences.

The cybercrime group ShinyHunters has claimed responsibility for a wave of ongoing voice phishing attacks targeting single sign-on (SSO) accounts linked to major platforms, including Okta, Microsoft Entra, and Google.

A cyberattack attempt on Poland’s energy infrastructure in late December has been linked to Russian state-backed hackers, according to new findings from a cybersecurity research firm.

Pwn2Own Automotive 2026 has officially come to an end, with security researchers earning a total of $1,047,000 after successfully exploiting 76 previously unknown security vulnerabilities.

149 million login credentials were exposed in an unsecured infostealer database, putting social, financial, and government accounts at serious risk.

LastPass has issued a warning about a new phishing campaign that is targeting its users with fake maintenance emails.

Security researchers made headlines on the first day of the Pwn2Own Automotive 2026 hacking contest after successfully hacking the Tesla Infotainment System using 37 zero-day vulnerabilities.

Security researchers have found a way to trick Google’s AI assistant, Gemini, into leaking private Calendar data using only normal-looking language.

A critical vulnerability has been discovered in the popular WordPress plugin Advanced Custom Fields: Extended (ACF Extended), which is used on more than 100,000 websites.

The U.K. government has warned that Russian-aligned hacktivist groups are continuing to target critical infrastructure and local government organisations using denial-of-service (DDoS) attacks.

A North Korea–linked hacking group has carried out a sophisticated malware distribution campaign by exploiting online advertising systems operated by Naver and Google, according to a report released Monday.