Category: CYBER SECURITY

Spanish fashion retailer MANGO has begun notifying customers about a data breach involving one of its external marketing service providers.

A 19-year-old college student, Matthew D. Lane from Worcester, Massachusetts, has been sentenced to four years in prison for orchestrating a major cyberattack on PowerSchool in December 2024 that led to a massive data breach.

The UK’s Information Commissioner’s Office (ICO) has fined Capita £14 million ($18.7 million) for a 2023 data breach that exposed the personal information of around 6.6 million people.

The U.S. Department of Justice has seized $15 billion worth of bitcoin from the leader of the Prince Group, a massive criminal network accused of running large-scale cryptocurrency investment scams, often known as “romance baiting” or “pig butchering.”

Oracle has quietly released an out-of-band update that fixes a critical vulnerability in Oracle E-Business Suite tracked as CVE 2025 61884 after a proof of concept exploit was leaked by the ShinyHunters extortion group.

Chinese state-sponsored hackers reportedly went undetected for more than a year by turning a legitimate ArcGIS component into a stealthy web shell, allowing deep access to targeted systems.

5CA, a customer service company that works with Discord, has denied being the source of a recent data breach that may have exposed 70,000 users’ government ID photos.

Microsoft has restricted access to Internet Explorer (IE) mode in its Edge browser after discovering that hackers were exploiting zero-day vulnerabilities in the Chakra JavaScript engine to gain control of users’ devices.

Harvard investigates Clop ransomware claim exploiting Oracle E-Business Suite zero-day with patch applied and limited impact reported

Qantas Airways has confirmed that customer data stolen during a major cyberattack in July has now been published online by cybercriminals.

The FBI and French authorities have seized the BreachForums domain used by the ShinyHunters group in Salesforce data leak extortion attacks, gaining access to forum databases and backend servers.

Discord has revealed that about 70,000 users may have had sensitive information exposed after hackers breached a third-party vendor used for age-related appeals.

Hackers are actively exploiting a critical vulnerability in the Service Finder WordPress theme, allowing them to bypass authentication and log in as administrators.

Discord has confirmed that around 70,000 users may have had their government ID photos exposed following a data breach involving one of its third-party service providers.

North Korean hackers have stolen an estimated two billion dollars worth of cryptocurrency assets in 2025, making it the largest annual total on record.

Salesforce has confirmed that it will not negotiate with or pay a ransom to the hackers behind a series of large-scale data theft attacks that affected several of its customers this year.

LinkedIn has filed a lawsuit against Delaware-based company ProAPIs Inc. and its founder and CTO, Rehmat Alam, accusing them of scraping data from the platform using more than a million fake accounts.

Google has launched a new reward program dedicated to uncovering security vulnerabilities in its artificial intelligence products, expanding its long-running bug bounty efforts into the fast-evolving world of AI safety.

The database was left exposed online without password protection or encryption and included more than 85,000 files detailing pet insurance claims, veterinary bills, and customer communications.

New variants of the XWorm remote access trojan (RAT) are being distributed in phishing campaigns after its original developer, known as XCoder, abandoned the project last year.