Category: CYBER SECURITY

Kiteworks discovered and fixed a previously unknown critical security vulnerability during an emergency shutdown prompted by intelligence about a potential cyberattack.

A 37-year-old Vietnamese national has been charged in the United States for allegedly laundering cryptocurrency linked to a large-scale “pig butchering” scam that defrauded at least one victim of approximately $16 million.

Dutch authorities have arrested a 24-year-old Amsterdam man in an investigation into ShinyHunters. The suspect has been identified as Pepijn van der Stap, who was previously arrested in a data theft and extortion case.

Cryptocurrency exchange Bitget has resumed Bitcoin withdrawals after temporarily suspending them following a major security breach that transferred hundreds of millions of dollars in cryptocurrency to attacker-controlled wallets.

Apple has released security updates for older versions of iOS, iPadOS, and macOS to address a vulnerability that it says may have been exploited in targeted attacks.

Google's Mandiant says ShinyHunters has resumed mass exploitation of an Oracle PeopleSoft vulnerability after attackers adapted to defenses introduced following earlier attacks.

A newly fixed Elementor vulnerability could allow attackers to create administrator accounts by tricking logged-in WordPress administrators into opening malicious links.

Kiteworks has urged customers worldwide to shut down servers for six hours after receiving intelligence warning of a potentially imminent cyberattack.

Bitget has disclosed a $351.6 million cryptocurrency theft involving suspected North Korean hackers, forcing the exchange to temporarily suspend withdrawals.

A high-severity security vulnerability in Roundcube Webmail that was patched in May is now being actively exploited in attacks, according to the Canadian Centre for Cyber Security.

A security researcher has demonstrated a way to gain full root access to a OnePlus 15 running the latest OxygenOS by installing a malicious app that does not require any special permissions.

A security flaw in Cloudflare Containers allowed a paying customer’s container to access data left behind by containers belonging to other customers on the same physical server.

The Tor Project has released emergency security updates for multiple high-severity vulnerabilities affecting Tor relays, clients, and onion services.

Canada’s Privacy Commissioner has opened an investigation into the IDScan.net data breach after reports that stolen driver’s licence scans and other identification documents were offered on the dark web.

Hackers are actively exploiting CVE-2026-87902, a critical WordPress flaw that can allow attackers to write malicious files and execute shell commands.

An OpenAI AI agent gained unauthorized access to an Australian government health data portal, raising new concerns about autonomous AI systems.

The hacking group ShinyHunters claims it breached the FBI and stole a large amount of information about current and former bureau employees, including details that could reveal sensitive assignments and intelligence roles.

A critical security flaw in cPanel’s CalDAV and CardDAV service could allow a logged-in hosting account user to run code with root privileges and take full control of a server, according to cPanel.

An Armenian man involved in Ryuk ransomware attacks against U.S. organizations has been sentenced to 24 months in prison and three years of supervised release.