Category: CYBER SECURITY

A large-scale hacking campaign is targeting WordPress websites that are still using outdated versions of the GutenKit and Hunk Companion plugins.

Hackers are now actively exploiting a major security flaw known as SessionReaper, tracked as CVE-2025-54236, in Adobe Commerce platforms, previously called Magento.

The Russian state-backed hacker group Star Blizzard, also known as ColdRiver, UNC4057, and Callisto, has intensified its cyber-espionage operations with new malware families that evolve rapidly to evade detection.

TP-Link has issued an urgent security advisory warning users of multiple command injection vulnerabilities found in its Omada gateway devices.

China has accused the United States of conducting long-term cyberattacks on its National Time Service Center, claiming that the breaches could have endangered the country’s communication systems, financial networks, power grids, and even the international standard time.

Experian Netherlands has been fined €2.7 million ($3.2 million) by the Dutch Data Protection Authority (AP) for multiple violations of the General Data Protection Regulation (GDPR).

Cybercriminals are now using TikTok to trick users into downloading malware by pretending to share free activation guides for popular software like Windows, Spotify, and Netflix.

North Korean hackers have started using a new method called EtherHiding to hide and deliver malware through blockchain smart contracts.

Microsoft has disrupted a surge of Rhysida ransomware attacks in early October by revoking over 200 certificates used to sign fake Microsoft Teams installers.

Spanish fashion retailer MANGO has begun notifying customers about a data breach involving one of its external marketing service providers.

A 19-year-old college student, Matthew D. Lane from Worcester, Massachusetts, has been sentenced to four years in prison for orchestrating a major cyberattack on PowerSchool in December 2024 that led to a massive data breach.

The UK’s Information Commissioner’s Office (ICO) has fined Capita £14 million ($18.7 million) for a 2023 data breach that exposed the personal information of around 6.6 million people.

The U.S. Department of Justice has seized $15 billion worth of bitcoin from the leader of the Prince Group, a massive criminal network accused of running large-scale cryptocurrency investment scams, often known as “romance baiting” or “pig butchering.”

Oracle has quietly released an out-of-band update that fixes a critical vulnerability in Oracle E-Business Suite tracked as CVE 2025 61884 after a proof of concept exploit was leaked by the ShinyHunters extortion group.

Chinese state-sponsored hackers reportedly went undetected for more than a year by turning a legitimate ArcGIS component into a stealthy web shell, allowing deep access to targeted systems.

5CA, a customer service company that works with Discord, has denied being the source of a recent data breach that may have exposed 70,000 users’ government ID photos.

Microsoft has restricted access to Internet Explorer (IE) mode in its Edge browser after discovering that hackers were exploiting zero-day vulnerabilities in the Chakra JavaScript engine to gain control of users’ devices.

Harvard investigates Clop ransomware claim exploiting Oracle E-Business Suite zero-day with patch applied and limited impact reported

Qantas Airways has confirmed that customer data stolen during a major cyberattack in July has now been published online by cybercriminals.

The FBI and French authorities have seized the BreachForums domain used by the ShinyHunters group in Salesforce data leak extortion attacks, gaining access to forum databases and backend servers.