Category: CYBER SECURITY

The U.S. Department of Justice (DOJ) has seized over $225 million in cryptocurrency tied to a global investment fraud and money laundering network, marking the largest crypto seizure in U.S. Secret Service history.

A massive compilation of stolen credentials has resurfaced online, triggering alarmist headlines about a so-called "mother of all breaches."

Satellite communications provider Viasat has become the latest target of the Chinese state-sponsored hacking group known as Salt Typhoon, according to a report from Bloomberg.

The pro-Israel hacking group Predatory Sparrow has claimed responsibility for a major cyberattack on Nobitex, Iran’s largest crypto exchange, stealing and burning over $90 million in cryptocurrency in a politically motivated move.

Privacy-focused email provider Cock.li has confirmed a data breach affecting more than 1 million users, after hackers exploited a flaw in its now-deprecated Roundcube webmail platform.

The UK Information Commissioner’s Office (ICO) has fined genetic testing company 23andMe £2.31 million (approximately USD 3.12 million) for serious security failures that led to a major data breach in 2023, exposing the sensitive personal and genetic information of millions.

Cybersecurity researcher Jeremiah Fowler discovered a non-password-protected database containing over 170,000 sensitive records linked to a real estate investment and management company.

Authorities across Europe have shut down Archetyp Market, the longest-running dark web drug marketplace, in a major joint operation supported by Europol and Eurojust.

The Washington Post has reset all employee logins following a cyberattack that compromised several journalists’ email accounts, according to a report from The Wall Street Journal.

WestJet, Canada’s second-largest airline, is investigating a cybersecurity incident that disrupted access to its internal systems and impacted the WestJet mobile app and website.

This new file-wiping module permanently erases files, making recovery impossible even if the ransom is paid.

Victoria’s Secret has fully restored all critical systems affected by a cybersecurity incident that took place on May 24, 2025.

Security researchers have uncovered a new tactic where hackers are reusing expired or deleted Discord invite links to redirect users to malicious websites.

A sophisticated hacking campaign has targeted over 80,000 Microsoft Entra ID accounts across hundreds of organizations worldwide, according to cybersecurity firm Proofpoint.

Two European journalists were hacked using spyware developed by Israeli surveillance company Paragon, according to new research by digital rights group Citizen Lab.

SentinelOne has revealed new details about a failed supply chain attack linked to Chinese hackers targeting the company through one of its IT and logistics service providers.

A newly discovered critical vulnerability in Roundcube webmail—CVE-2025-49113—has left over 84,000 servers exposed to potential remote code execution (RCE) attacks.

Ohio-based healthcare network Kettering Health has confirmed that it was the target of a ransomware attack carried out by the Interlock group in May, resulting in a major data breach.

A critical vulnerability in the popular open-source Roundcube webmail platform is now being actively exploited in the wild, with hackers selling working remote code execution (RCE) exploits on underground forums.

U.S. authorities have seized over 145 domains linked to BidenCash, a notorious dark web marketplace that trafficked in stolen credit cards, personal data, and server access credentials.