Category: CYBER SECURITY

Data from around 20 asset management firms in South Korea were compromised in a hacking attack earlier this month, industry sources revealed on Monday.

The Royal Canadian Mounted Police (RCMP) has shut down the TradeOgre cryptocurrency exchange and seized more than $40 million believed to originate from criminal activities.

The FBI has issued a warning about cybercriminals impersonating its Internet Crime Complaint Center (IC3) website in what it describes as “possible malicious activity.”

Security researchers have demonstrated how ChatGPT can be tricked into stealing sensitive Gmail data, highlighting new risks tied to agentic AI systems.

Google has released emergency security updates to patch another actively exploited Chrome zero-day vulnerability—the sixth so far in 2025.

Lotte Card Co., South Korea’s fifth-largest card issuer, confirmed on Thursday that the personal data of roughly 3 million customers was compromised in a hacking incident last month.

Microsoft and Cloudflare have successfully disrupted RaccoonO365, a large-scale Phishing-as-a-Service (PhaaS) operation that enabled cybercriminals to steal thousands of Microsoft 365 credentials worldwide.

The notorious ShinyHunters extortion group claims to have stolen over 1.5 billion Salesforce records from more than 760 companies by exploiting compromised OAuth tokens from Salesloft Drift.

Microsoft has taken down nearly 340 websites tied to Raccoon0365, a fast-growing Nigerian-based phishing service that helped cybercriminals steal at least 5,000 Microsoft user credentials.

The FBI has issued a FLASH alert warning about UNC6040 and UNC6395 targeting Salesforce platforms to steal corporate data and extort victims.

Samsung has released a security update to patch a critical zero-day vulnerability that was actively exploited in attacks against its Android devices.

Apple has warned customers that their devices were targeted in a new wave of mercenary spyware attacks, according to a security advisory published Thursday by CERT-FR, France’s national Computer Emergency Response Team.

Cybersecurity researcher Jeremiah Fowler uncovered an unprotected database belonging to Hello Gym, a Minnesota-based communication and lead management platform for the fitness industry.

The U.S. Department of Justice (DOJ) has charged Ukrainian national Volodymyr Viktorovich Tymoshchuk for his role as an administrator of the LockerGoga, MegaCortex, and Nefilim ransomware operations.

The U.S. Department of the Treasury has sanctioned several large cyber scam networks in Southeast Asia that defrauded Americans of more than $10 billion in 2024.

Calcio, one of the world’s biggest piracy sports streaming platforms, has been shut down following a joint crackdown by the Alliance for Creativity and Entertainment (ACE) and DAZN.

Media streaming platform Plex is warning customers to reset their passwords following a new data breach that exposed user authentication data.

A new phishing campaign is targeting Facebook users with fake security alert emails designed to steal account credentials.