Category: CYBER SECURITY

South Korea's privacy regulator has fined wireless carrier KT Corp. 53.9 billion won (about $37.4 million) after a major data breach exposed the personal information of more than 16,000 mobile users and led to unauthorized financial transactions.

A newly uncovered cyber-espionage campaign has revealed that the Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is exploiting a critical Microsoft Exchange Outlook Web Access (OWA) vulnerability to deploy a powerful new backdoor called OWAReaper.

Anthropic has revealed that its experimental AI model, Claude Mythos Preview, independently helped uncover two new cryptographic attacks, including a complete key-recovery attack against the HAWK-256 digital signature scheme and a significantly faster attack on a reduced version of AES-128.

More than 24,000 internet-connected servers have been found exposing authentication password hashes because of a long-standing weakness in the Intelligent Platform Management Interface (IPMI), a remote management technology introduced more than two decades ago.

JetBrains has patched a critical TeamCity vulnerability that could let attackers execute code remotely without authentication.

The Coca-Cola Company has confirmed that hackers stole data from its dairy subsidiary, Fairlife, during a ransomware attack that disrupted production earlier this month.

Hackers are actively exploiting a critical vulnerability in the FastJson open-source Java library that allows remote code execution without requiring user interaction or elevated privileges.

Cybercriminals are abusing Steam discussion forums to spread a ClickFix social engineering attack that disguises malware as a solution for common gaming and PC issues.

Europol has flagged 4,340 online URLs for removal during a large international operation targeting "The Com," a decentralized network linked to violent extremism, cybercrime, and child exploitation.

An Illinois man has been sentenced to 76 months in federal prison after hacking hundreds of Snapchat accounts to steal private photos and distribute them online.

A Russian state-backed cyber espionage group has been caught exploiting a previously unknown vulnerability in Zimbra's webmail platform to steal sensitive emails and account credentials from government and commercial organizations across Western countries.

Ukraine's Computer Emergency Response Team (CERT-UA) has uncovered a new cyberattack campaign in which threat actors are abusing the legitimate Notepad++ text editor to secretly install malware on Windows systems.

A security vulnerability in the Adobe Acrobat extension for Google Chrome could have allowed attackers to access conversations and other data displayed in WhatsApp Web without requiring authentication.

South Korea has revealed that hackers secretly accessed the National Diplomatic Academy's online education system for nearly 10 months, exposing personal information belonging to current and former employees of the Ministry of Foreign Affairs (MFA), including diplomats stationed overseas.

German and U.S. law enforcement agencies have dismantled the core infrastructure of Kratos, one of the world's largest phishing-as-a-service (PhaaS) platforms, in a coordinated international operation that also led to the arrest of its alleged developer in Indonesia.

OpenAI has revealed that one of its advanced AI models accidentally breached Hugging Face's systems during an internal cybersecurity evaluation, after escaping its intended testing environment and exploiting vulnerabilities to access the broader internet.

The U.S. seized over 1,000 illegal FIFA World Cup 2026 streaming sites in a global anti-piracy operation targeting cybercrime and copyright violations.

Hackers are actively exploiting the critical WordPress wp2shell flaws, allowing full website takeover through unauthenticated remote code execution.