Category: CYBER SECURITY

The latest version of the BreachForums hacking forum has suffered a data breach, with a database containing hundreds of thousands of user records leaked online.

Many users say they received password reset messages they never requested, raising concerns about a new phishing campaign targeting Instagram accounts.

The Illinois Department of Human Services (IDHS) has disclosed a major data breach that exposed the personal and health-related information of nearly 700,000 Illinois residents due to incorrect privacy settings on an online mapping platform.

The FBI has issued a flash alert warning that the North Korea–backed hacking group Kimsuky (APT43) is using malicious QR codes in spearphishing campaigns to target organizations across the United States.

A sophisticated China-linked threat actor known as UAT-7290 has expanded its cyber-espionage operations beyond South Asia, now targeting telecommunications providers and organizations in Southeastern Europe, according to a new report from Cisco Talos.

A cybercriminal known as Zestix is offering to sell sensitive corporate data stolen from dozens of organizations after allegedly breaking into cloud file-sharing platforms such as ShareFile, Nextcloud, and OwnCloud.

NordVPN has responded to online hacking claims, saying that no real customer or business data was exposed and that the leaked information came from a testing environment containing only dummy data.

Chinese cyberattacks targeting Taiwan’s key infrastructure increased by 6 percent in 2025 compared to the previous year, reaching an average of 2.63 million attacks per day, according to Taiwan’s National Security Bureau.

Covenant Health has significantly revised the scale of a data breach discovered in May 2025, saying that nearly 500,000 people were affected, far more than initially reported.

Trust Wallet has confirmed that hackers managed to publish a malicious update to its Chrome browser extension after it passed the Chrome Web Store review process.

xAI’s chatbot Grok is facing backlash after users began using it to alter photos of people on X without their permission.

IBM has warned customers to urgently patch a critical security flaw in its API Connect platform that could let attackers access applications without logging in.

Zoom Stealer malware infected 2.2M users via browser extensions, stealing Zoom and Teams meeting links, IDs, and corporate intelligence.

The European Space Agency (ESA) has confirmed a cybersecurity breach involving servers located outside its corporate network, following claims by a threat actor on the BreachForums hacking forum.

Two U.S.-based cybersecurity professionals have pleaded guilty to their role in ransomware attacks linked to the notorious ALPHV, also known as BlackCat.

A Lithuanian citizen has been arrested for allegedly spreading malware to millions of computers by disguising it as KMSAuto, a well-known illegal tool used to activate Windows and Microsoft Office without a license.

Fortinet has warned customers that hackers are still actively exploiting a serious security flaw in FortiOS that allows them to bypass two-factor authentication on vulnerable FortiGate firewalls.

A hacker has claimed responsibility for breaching Condé Nast and leaking an alleged WIRED database containing more than 2.3 million subscriber records, according to reporting by BleepingComputer.