Category: CYBER SECURITY

Mozilla has released Firefox 136.0.4 to fix a critical security vulnerability that allows attackers to bypass the browser’s sandbox protections on Windows.

The UK Information Commissioner's Office (ICO) has levied a £3.07 million ($3.95 million) fine against Advanced Computer Software Group Ltd for a ransomware attack in 2022 that exposed the sensitive personal data of 79,404 individuals, including NHS patients.

Despite Oracle denying a breach of its Oracle Cloud federated SSO login servers, evidence suggests that account data for 6 million users may have been compromised.

Google has released a security update to fix a critical Chrome zero-day vulnerability (CVE-2025-2783) that was actively exploited in cyber-espionage attacks.

An Amazon S3 storage instance containing sensitive personal and financial records was found publicly accessible without password protection or encryption.

A cyber threat actor, EncryptHub, has been linked to recent Windows zero-day attacks, exploiting a critical Microsoft Management Console (MMC) vulnerability that Microsoft patched this month.

The FBI is warning internet users about fake online document converters that are being used to steal personal information and, in some cases, deploy ransomware on victims’ devices.

Oracle has denied allegations of a security breach after a threat actor claimed to be selling six million data records allegedly stolen from Oracle Cloud’s federated SSO login servers.

Researchers have identified Coinbase as the main target in a GitHub Actions supply chain attack that exposed secrets in hundreds of repositories.

Valve has pulled the game "Sniper: Phantom’s Resolution" from Steam after multiple users reported that its demo installer contained information-stealing malware.

WhatsApp has patched a zero-click, zero-day vulnerability that was exploited to install Paragon’s Graphite spyware following reports from security researchers at the University of Toronto’s Citizen Lab.

A long-running malware operation known as DollyWay has been compromising WordPress sites since 2016, infecting over 20,000 websites worldwide.

A major data breach has exposed the records of nearly two million users linked to the consumer-grade spyware operation SpyX.

Cybersecurity researcher Yohanes Nugroho has developed a free decryptor for the Linux variant of Akira ransomware.

The Cybersecurity and Infrastructure Security Agency (CISA) has revealed that the Medusa ransomware operation has impacted over 300 organizations in critical infrastructure sectors across the U.S. as of last month.

According to cybersecurity firm Lookout, hackers linked to the North Korean government secretly uploaded Android spyware to the Google Play Store, tricking users into downloading it.

The ransomware group Hunters International has published stolen data from Tata Technologies, weeks after the Indian company confirmed a ransomware attack that disrupted some services.

Security researchers have identified six malicious npm packages linked to the North Korean hacking group Lazarus, designed to steal credentials, deploy backdoors, and extract cryptocurrency data.

Cybersecurity researcher Jeremiah Fowler has discovered a major data breach involving ESHYFT, a health tech company based in New Jersey.

Elon Musk on Tuesday hinted at Ukraine’s link with the cyberattack on X that led to a massive global outage on his social media platform.