Category: CYBER SECURITY

A newly discovered macOS vulnerability, tracked as CVE 2025 31199, allowed attackers to bypass Apple's Transparency, Consent, and Control security system and access sensitive user data, including content cached by Apple Intelligence and information from other iCloud linked devices.

The data breach affecting the women-only Tea app has escalated, with hackers leaking an additional database containing over 1.1 million private messages exchanged between members, including sensitive conversations about personal relationships, cheating, and abortions.

A newly disclosed zero-day vulnerability in the connected sex toy platform Lovense allows attackers to obtain a user’s private email address simply by knowing their public username, putting millions of users at risk of doxxing and harassment.

More than 200,000 WordPress websites are currently vulnerable to a serious security flaw in the Post SMTP plugin, which could allow attackers to take over administrator accounts.

Allianz Life Insurance Company of North America has confirmed a major data breach that exposed the personal information of most of its 1.4 million customers, along with financial professionals and some employees.

The popular dating safety app Tea, known for allowing women to share anonymous comments about men they’ve dated, has suffered a major data breach.

A 50-year-old woman from Arizona, Christina Marie Chapman, has been sentenced to 102 months in prison for her role in a scheme that helped North Korean IT workers get jobs at more than 300 U.S. companies.

The U.S. government has announced new sanctions against three North Korean nationals and a company for running fake IT job schemes to earn illegal money for North Korea.

Law enforcement agencies have seized the dark web infrastructure of the notorious BlackSuit ransomware gang, which has been responsible for hacking hundreds of organizations worldwide in recent years.

Europol has arrested the suspected administrator of xss.is, one of the most influential Russian-speaking cybercrime forums, marking a breakthrough in the fight against cybercrime.

Just hours after Microsoft confirmed that Chinese state-backed hacking groups exploited a zero-day vulnerability in its SharePoint software, a new report from Bloomberg reveals that the U.S. National Nuclear Security Administration (NNSA) was among the victims.

Apple has notified more than a dozen Iranian users in recent months that their iPhones were targeted with government spyware, according to cybersecurity researchers and a new report by the Miaan Group.

Microsoft has confirmed that several recent cyberattacks targeting SharePoint servers have been linked to Chinese state-affiliated hacking groups.

ExpressVPN has patched a critical flaw in its Windows client that allowed Remote Desktop Protocol (RDP) traffic to bypass the VPN tunnel, potentially exposing users’ real IP addresses.

According to a statement posted on Ring’s Facebook page and status page, the company is “aware of a bug that incorrectly displays prior login dates as May 28, 2025,” due to a recent backend update

Hackers are actively exploiting a zero-day vulnerability in Microsoft SharePoint servers, with early attacks primarily targeting government organizations, according to researchers and recent reports.

Cybersecurity researcher Jeremiah Fowler has uncovered a massive data breach involving an unprotected and unencrypted database containing over 3.5 million records.

A newly rebranded extortion gang known as "World Leaks" has breached one of Dell’s product demonstration platforms and is now attempting to extort the company.

Microsoft has issued a critical alert about active cyberattacks targeting its on-premises SharePoint server software, which is widely used by businesses and government agencies to manage internal documents and facilitate collaboration.