Category: CYBER SECURITY

Suspected Chinese state-backed hackers have been linked to long-term espionage operations against U.S. organizations in the technology and legal sectors, according to a new report by Google’s Threat Intelligence Group (GTIG).

The UK’s National Crime Agency (NCA) has arrested a man in West Sussex in connection with the ransomware attack that disrupted airport operations and caused widespread flight delays across Europe last week.

Law enforcement authorities in Europe have arrested five suspects linked to a massive cryptocurrency investment fraud ring that stole more than €100 million ($118 million) from over 100 victims.

SolarWinds has released a hotfix for a critical security flaw in its Web Help Desk (WHD) product that allows remote code execution (RCE) without authentication.

LastPass has issued a warning about a new campaign targeting macOS users with malicious software disguised as popular apps, delivered through fraudulent GitHub repositories.

Automotive giant Stellantis has confirmed that attackers gained access to some of its North American customers’ data after breaching a third-party service provider’s platform.

Several major European airports faced widespread disruptions over the weekend after a ransomware attack targeted the check-in and boarding systems provided by Collins Aerospace.

A gamer seeking financial support for cancer treatment has fallen victim to a major cryptocurrency theft after downloading a verified Steam game called Block Blasters.

A critical Entra ID flaw combining legacy actor tokens and a Graph API bug (CVE-2025-55241) could have given attackers Global Admin access to any tenant.

Data from around 20 asset management firms in South Korea were compromised in a hacking attack earlier this month, industry sources revealed on Monday.

The Royal Canadian Mounted Police (RCMP) has shut down the TradeOgre cryptocurrency exchange and seized more than $40 million believed to originate from criminal activities.

The FBI has issued a warning about cybercriminals impersonating its Internet Crime Complaint Center (IC3) website in what it describes as “possible malicious activity.”

Security researchers have demonstrated how ChatGPT can be tricked into stealing sensitive Gmail data, highlighting new risks tied to agentic AI systems.

Google has released emergency security updates to patch another actively exploited Chrome zero-day vulnerability—the sixth so far in 2025.

Lotte Card Co., South Korea’s fifth-largest card issuer, confirmed on Thursday that the personal data of roughly 3 million customers was compromised in a hacking incident last month.

Microsoft and Cloudflare have successfully disrupted RaccoonO365, a large-scale Phishing-as-a-Service (PhaaS) operation that enabled cybercriminals to steal thousands of Microsoft 365 credentials worldwide.

The notorious ShinyHunters extortion group claims to have stolen over 1.5 billion Salesforce records from more than 760 companies by exploiting compromised OAuth tokens from Salesloft Drift.

Microsoft has taken down nearly 340 websites tied to Raccoon0365, a fast-growing Nigerian-based phishing service that helped cybercriminals steal at least 5,000 Microsoft user credentials.

The FBI has issued a FLASH alert warning about UNC6040 and UNC6395 targeting Salesforce platforms to steal corporate data and extort victims.