Category: CYBER SECURITY

U.S. federal prosecutors in South Carolina have announced that two Venezuelan nationals convicted in an ATM jackpotting scheme will be deported after completing their prison sentences.

The cybercrime group ShinyHunters has claimed responsibility for a wave of ongoing voice phishing attacks targeting single sign-on (SSO) accounts linked to major platforms, including Okta, Microsoft Entra, and Google.

A cyberattack attempt on Poland’s energy infrastructure in late December has been linked to Russian state-backed hackers, according to new findings from a cybersecurity research firm.

Pwn2Own Automotive 2026 has officially come to an end, with security researchers earning a total of $1,047,000 after successfully exploiting 76 previously unknown security vulnerabilities.

149 million login credentials were exposed in an unsecured infostealer database, putting social, financial, and government accounts at serious risk.

LastPass has issued a warning about a new phishing campaign that is targeting its users with fake maintenance emails.

Security researchers made headlines on the first day of the Pwn2Own Automotive 2026 hacking contest after successfully hacking the Tesla Infotainment System using 37 zero-day vulnerabilities.

Security researchers have found a way to trick Google’s AI assistant, Gemini, into leaking private Calendar data using only normal-looking language.

A critical vulnerability has been discovered in the popular WordPress plugin Advanced Custom Fields: Extended (ACF Extended), which is used on more than 100,000 websites.

The U.K. government has warned that Russian-aligned hacktivist groups are continuing to target critical infrastructure and local government organisations using denial-of-service (DDoS) attacks.

A North Korea–linked hacking group has carried out a sophisticated malware distribution campaign by exploiting online advertising systems operated by Naver and Google, according to a report released Monday.

Security researchers have now identified another 17 malicious extensions across the Chrome, Firefox, and Microsoft Edge add-on stores, where they amassed a combined 840,000 installations.

Hackers are actively exploiting a critical security vulnerability in the popular Modular DS WordPress plugin that allows attackers to bypass authentication and gain full admin-level access to affected websites.

Microsoft has announced that it has disrupted RedVDS, a large cybercrime platform connected to more than $40 million in reported losses in the United States since March 2025.

Monroe University has confirmed that hackers stole personal, financial, and health information of more than 320,000 people after breaking into its systems during a cyberattack in December 2024.

South Korean cybersecurity authorities believe that around 9.6 million user accounts may have been affected by a recent cyberattack on Kyowon Group, a major education service provider, according to informed sources on Wednesday.

The University of Hawaii has confirmed that a ransomware gang breached its Cancer Center in August 2025 and stole sensitive data from a research project, including documents dating back to the 1990s that contained Social Security numbers.

Hackers are using fake browser windows to steal Facebook logins, tricking users with realistic popups, phishing emails, and trusted cloud platforms.

Instagram has confirmed that it has fixed a technical issue that allowed an external party to request password reset emails for some users without authorization.