Category: CYBER SECURITY

A former infrastructure engineer at a New Jersey-based industrial company has been sentenced to 32 months in prison after launching a ransomware-style attack that locked thousands of devices on his former employer’s network.

Japanese publishing giant Nikkei has disclosed two recent security incidents in which attackers compromised employee email accounts and used them to send phishing messages.

Microsoft has released out-of-band security updates to address a high-severity vulnerability in Microsoft Exchange Server that could allow authenticated attackers to escalate their privileges under certain conditions.

Dell is urging customers to update its System Update (DSU) software after disclosing a critical vulnerability that could allow unauthenticated attackers to execute arbitrary code with root privileges on vulnerable systems.

A threat actor known as “Marx” claims to have access to millions of records allegedly linked to major companies, including Airbnb, Uber, PayPal, Booking.com, and Google.

Denmark is investigating a major CPR data breach after unauthorized individuals accessed names, addresses and CPR numbers belonging to about 8.8 million people.

A suspected member of the ShinyHunters cyber extortion group has allegedly been detained in Jordan and is cooperating with U.S. authorities, according to Reuters, which cited three people familiar with the matter.

A new WordPress backdoor uses files, databases, shared memory and multiple plugin copies to survive cleanup and regain control of infected sites.

European law enforcement has seized the infrastructure of the KillSec ransomware group following an international investigation into around 1,000 suspected cyberattacks worldwide.

Researchers published the first public proof-of-concept for Apple's CVE-2026-86950, a CoreGraphics flaw triggered by a malicious PDF.

Bitget says attackers exploited a zero-day in third-party security products to steal $387 million in cryptocurrency from its wallets.

Remote access software company TeamViewer has warned customers to immediately update its client and host software after disclosing five high-severity vulnerabilities affecting TeamViewer Full Client and Host on Windows, Linux and macOS.

AI coding agents exposed more than 13,000 internal screenshots from over 300 organizations through public GitHub repositories, Glow reports.

Hackers are abusing ChatGPT Custom GPTs and fake Google Sites pages to spread malware through ClickFix-style attacks, Huntress reports.

Meta has denied a journalist’s claim that its Muse AI agent accessed private Mac messages without permission, saying multiple permissions are required before Muse can read Messages content.

The U.S. government is reportedly notifying millions of current and former military service members and staff that their personal information was stolen during a months-long breach involving Pentagon personnel records.

TikTok has accepted a £12.7 million UK fine over children’s data, ending its appeal and allowing the ICO to continue its investigation into the platform.

Virginia man Malachi Morgan Thomas has been sentenced to 40 years in prison after exploiting 41 girls through Snapchat and possessing CSAM.

A Proton study found that popular free Google Play games contain multiple trackers and share user data with entities in China, Russia, Israel and Five Eyes countries.