Category: CYBER SECURITY

Samsung has released a security update to patch a critical zero-day vulnerability that was actively exploited in attacks against its Android devices.

Apple has warned customers that their devices were targeted in a new wave of mercenary spyware attacks, according to a security advisory published Thursday by CERT-FR, France’s national Computer Emergency Response Team.

Cybersecurity researcher Jeremiah Fowler uncovered an unprotected database belonging to Hello Gym, a Minnesota-based communication and lead management platform for the fitness industry.

The U.S. Department of Justice (DOJ) has charged Ukrainian national Volodymyr Viktorovich Tymoshchuk for his role as an administrator of the LockerGoga, MegaCortex, and Nefilim ransomware operations.

The U.S. Department of the Treasury has sanctioned several large cyber scam networks in Southeast Asia that defrauded Americans of more than $10 billion in 2024.

Calcio, one of the world’s biggest piracy sports streaming platforms, has been shut down following a joint crackdown by the Alliance for Creativity and Entertainment (ACE) and DAZN.

Media streaming platform Plex is warning customers to reset their passwords following a new data breach that exposed user authentication data.

A new phishing campaign is targeting Facebook users with fake security alert emails designed to steal account credentials.

Scammers have found a new way to bypass spam filters by exploiting Apple’s iCloud Calendar invite system to send callback phishing emails directly from Apple’s own mail servers.

VirusTotal has uncovered a phishing campaign that uses SVG image files to deliver malware by impersonating Colombia’s judicial system.

Chess.com has confirmed a data breach caused by a compromised third-party file transfer application, exposing the personal details of a small portion of its users.

The U.S. Department of State is offering up to $10 million for information about three Russian FSB hackers linked to cyberattacks on U.S. critical infrastructure.

Google has released the September 2025 Android security update, addressing more than 80 vulnerabilities, including two zero-day flaws that are already being exploited in attacks.

Hackers attempted to steal $130 million from Evertec’s Brazilian subsidiary Sinqia S.A. after breaching its systems connected to Pix, Brazil’s real-time payment platform.

A cybersecurity researcher has discovered a large, unprotected backup belonging to Navy Federal Credit Union (NFCU), the largest credit union in the United States with over 14.5 million members and $180.8 billion in assets.

Cloudflare has confirmed that its Salesforce instance was compromised in the recent Salesloft Drift supply-chain attack, which also impacted several major companies, including Palo Alto Networks and Zscaler.

Palo Alto Networks has confirmed a data breach that exposed customer information and support case details after attackers exploited stolen OAuth tokens.

Amazon has disrupted a cyberattack campaign by Russian state-backed hacking group APT29, also known as Midnight Blizzard or Cozy Bear, that was targeting Microsoft 365 users.

WhatsApp has fixed a serious zero-click security flaw that was used to target Apple users with advanced spyware.