Category: CYBER SECURITY

Scammers have found a new way to bypass spam filters by exploiting Apple’s iCloud Calendar invite system to send callback phishing emails directly from Apple’s own mail servers.

VirusTotal has uncovered a phishing campaign that uses SVG image files to deliver malware by impersonating Colombia’s judicial system.

Chess.com has confirmed a data breach caused by a compromised third-party file transfer application, exposing the personal details of a small portion of its users.

The U.S. Department of State is offering up to $10 million for information about three Russian FSB hackers linked to cyberattacks on U.S. critical infrastructure.

Google has released the September 2025 Android security update, addressing more than 80 vulnerabilities, including two zero-day flaws that are already being exploited in attacks.

Hackers attempted to steal $130 million from Evertec’s Brazilian subsidiary Sinqia S.A. after breaching its systems connected to Pix, Brazil’s real-time payment platform.

A cybersecurity researcher has discovered a large, unprotected backup belonging to Navy Federal Credit Union (NFCU), the largest credit union in the United States with over 14.5 million members and $180.8 billion in assets.

Cloudflare has confirmed that its Salesforce instance was compromised in the recent Salesloft Drift supply-chain attack, which also impacted several major companies, including Palo Alto Networks and Zscaler.

Palo Alto Networks has confirmed a data breach that exposed customer information and support case details after attackers exploited stolen OAuth tokens.

Amazon has disrupted a cyberattack campaign by Russian state-backed hacking group APT29, also known as Midnight Blizzard or Cozy Bear, that was targeting Microsoft 365 users.

WhatsApp has fixed a serious zero-click security flaw that was used to target Apple users with advanced spyware.

Google has removed 77 malicious Android apps from the Play Store after they were found to be spreading malware, including the notorious Joker spyware and the Anatsa banking trojan.

A dangerous new Android malware is spreading by disguising itself as an antivirus app linked to Russia’s Federal Security Service (FSB).

Kidney dialysis provider DaVita has confirmed that a ransomware attack led to the theft of personal and health information belonging to nearly 2.7 million individuals.

The FBI has issued a warning about Russian hackers targeting U.S. critical infrastructure by exploiting old Cisco devices.

An unencrypted and unprotected database containing 957,434 records was found publicly accessible. The database appears to belong to Ohio Medical Alliance LLC (OMA), which operates under the brand Ohio Marijuana Card and provides telemedicine and in-person evaluations to help patients obtain physician-certified medical marijuana cards.

A serious security flaw has been discovered in the popular Redirection for Contact Form 7 plugin, which is used on more than 300,000 WordPress websites.

Insurance company Allianz Life has confirmed a major data breach that exposed the personal information of more than 1.1 million U.S. customers.

Workday, one of the world’s largest human resources software providers, has disclosed a data breach following a social engineering attack that targeted a third-party customer relationship management (CRM) system.

The U.S. Department of Justice (DOJ) has seized more than $2.8 million in cryptocurrency, along with $70,000 in cash and a luxury vehicle, from Ianis Aleksandrovich Antropenko, the alleged operator behind the Zeppelin ransomware.