Category: CYBER SECURITY

Security researchers have now identified another 17 malicious extensions across the Chrome, Firefox, and Microsoft Edge add-on stores, where they amassed a combined 840,000 installations.

Hackers are actively exploiting a critical security vulnerability in the popular Modular DS WordPress plugin that allows attackers to bypass authentication and gain full admin-level access to affected websites.

Microsoft has announced that it has disrupted RedVDS, a large cybercrime platform connected to more than $40 million in reported losses in the United States since March 2025.

Monroe University has confirmed that hackers stole personal, financial, and health information of more than 320,000 people after breaking into its systems during a cyberattack in December 2024.

South Korean cybersecurity authorities believe that around 9.6 million user accounts may have been affected by a recent cyberattack on Kyowon Group, a major education service provider, according to informed sources on Wednesday.

The University of Hawaii has confirmed that a ransomware gang breached its Cancer Center in August 2025 and stole sensitive data from a research project, including documents dating back to the 1990s that contained Social Security numbers.

Hackers are using fake browser windows to steal Facebook logins, tricking users with realistic popups, phishing emails, and trusted cloud platforms.

Instagram has confirmed that it has fixed a technical issue that allowed an external party to request password reset emails for some users without authorization.

The latest version of the BreachForums hacking forum has suffered a data breach, with a database containing hundreds of thousands of user records leaked online.

Many users say they received password reset messages they never requested, raising concerns about a new phishing campaign targeting Instagram accounts.

The Illinois Department of Human Services (IDHS) has disclosed a major data breach that exposed the personal and health-related information of nearly 700,000 Illinois residents due to incorrect privacy settings on an online mapping platform.

The FBI has issued a flash alert warning that the North Korea–backed hacking group Kimsuky (APT43) is using malicious QR codes in spearphishing campaigns to target organizations across the United States.

A sophisticated China-linked threat actor known as UAT-7290 has expanded its cyber-espionage operations beyond South Asia, now targeting telecommunications providers and organizations in Southeastern Europe, according to a new report from Cisco Talos.

A cybercriminal known as Zestix is offering to sell sensitive corporate data stolen from dozens of organizations after allegedly breaking into cloud file-sharing platforms such as ShareFile, Nextcloud, and OwnCloud.

NordVPN has responded to online hacking claims, saying that no real customer or business data was exposed and that the leaked information came from a testing environment containing only dummy data.

Chinese cyberattacks targeting Taiwan’s key infrastructure increased by 6 percent in 2025 compared to the previous year, reaching an average of 2.63 million attacks per day, according to Taiwan’s National Security Bureau.

Covenant Health has significantly revised the scale of a data breach discovered in May 2025, saying that nearly 500,000 people were affected, far more than initially reported.

Trust Wallet has confirmed that hackers managed to publish a malicious update to its Chrome browser extension after it passed the Chrome Web Store review process.