Category: CYBER SECURITY

The FBI is warning football fans about fake websites pretending to be FIFA ahead of the 2026 World Cup.

A new unpatched zero-day vulnerability in the Gogs self-hosted Git service can let attackers remotely execute code on exposed servers.

Hackers are targeting Signal users in a new phishing campaign that tries to steal their chat backup recovery keys, according to TechCrunch.

Temu has been fined €200 million, or about $232 million, by the European Commission after regulators found that shoppers are very likely to come across illegal products on the Chinese e-commerce platform.

Carnival Corporation has confirmed a major data breach affecting nearly 6 million people after threat actors gained access to part of its IT systems through a social engineering attack.

A Google employee has been charged with fraud after prosecutors said he allegedly used confidential company information to win about $1.2 million through Polymarket bets tied to Google Search trends.

The FBI has warned that the Silent Ransom Group, also known as SRG, is now targeting law firms in the United States using a mix of phone-based social engineering, phishing emails, and even in-person data theft attempts.

Security researchers have linked a March cyberattack on the Los Angeles County Metropolitan Transportation Authority to Iranian-backed hackers.

A website called UK Visa Portal has reportedly exposed passport copies and selfie photos of people who used the platform to apply for a U.K. immigration visa.

The U.S. Cybersecurity and Infrastructure Security Agency has ordered federal agencies to secure their servers against a serious SQL injection vulnerability in the Drupal content management system that is already being exploited in attacks.

The ShinyHunters extortion group has leaked personal information belonging to more than 185,000 people after breaching systems connected to convenience store giant 7-Eleven, according to data breach notification service Have I Been Pwned.

The FBI has warned about a phishing-as-a-service platform called Kali365 that is being used to hijack Microsoft 365 accounts by abusing OAuth device code authentication.

Italian authorities have dismantled a major piracy network built around the CINEMAGOAL app, which allegedly gave users illegal access to streaming services including Netflix, Disney+, Spotify, Sky, and DAZN.

Financial crime investigators in the Netherlands have arrested two men and seized 800 servers connected to a web hosting company accused of supporting cyberattacks, disinformation campaigns, and online interference operations.

Cybercriminals are sending fake “Official Court Order” emails posing as Nepal Police and CIB to scare victims into paying fake settlement fees.

U.S. and Canadian authorities have arrested and charged a 23-year-old Canadian man accused of running the KimWolf distributed denial-of-service botnet, which infected nearly two million devices around the world.

Google has accidentally exposed details about an unfixed Chromium security issue that can keep JavaScript running in the background even after the browser is closed, potentially allowing attackers to remotely run code through a malicious webpage.

A Chinese cyber-espionage campaign has been targeting telecommunications providers with newly discovered malware designed for both Linux and Windows systems. The Linux malware has been named Showboat, while the Windows implant is known as JFMBackdoor.

An international law enforcement operation has taken down a virtual private network service called First VPN, which authorities say was used by cybercriminals in ransomware, fraud, and data theft attacks.

Scammers have reportedly been abusing a loophole that lets them send spam emails from an internal Microsoft email address normally used for legitimate account alerts.