Category: CYBER SECURITY

A ransomware gang has taken its attacks on law firms to a more aggressive level by sending fake IT workers directly to victims’ offices, where they steal data from computers using USB drives or help other gang members connect to systems remotely, according to Google...

A former IBM cybersecurity executive has accused the company of being hacked multiple times by foreign governments over the past decade and then covering up the incidents.

A Chinese-speaking cybercrime group has expanded its operations into Europe, using newly discovered malware and the Atlas backdoor in a wave of financially motivated attacks.

The U.S. Treasury’s Office of Foreign Assets Control has announced sanctions against Nobitex, Iran’s largest cryptocurrency exchange, accusing the platform of helping process payments linked to terrorist activities, sanctions evasion, and transactions connected to the Islamic Revolutionary Guard Corps.

A widespread Instagram hacking campaign that used Meta’s AI support chatbot to take over accounts appears to have continued even after the company said the issue had been fixed.

Acer has confirmed that it is working on fixes for two maximum-severity zero-day vulnerabilities affecting its Wave 7 mesh routers.

Europol has taken part in a major international crackdown on criminal networks making millions from illegal access to premium sports broadcasts, films, and TV channels.

A security researcher has released proof-of-concept exploit code for an unpatched Visual Studio Code zero-day vulnerability that could allow attackers to steal GitHub authentication tokens by tricking users into clicking a malicious link.

A large malware campaign known as WeedHack is targeting Minecraft players through fake mods, clients, cheats, and utilities, infecting more than 116,000 systems since January.

Hackers are actively exploiting a critical privilege escalation flaw in the Kirki plugin for WordPress that can let attackers take over any user account, including administrator accounts.

Dashlane says hackers stole at least a dozen encrypted password vaults belonging to customers during a cyberattack over the weekend, after attackers managed to break through the company’s two-factor authentication protections.

Google has released the June 2026 Android security updates, fixing 124 vulnerabilities, including one zero-day flaw that has already been exploited in targeted attacks.

The U.S. Cybersecurity and Infrastructure Security Agency has ordered federal agencies to secure their systems against a high-severity Oracle WebLogic Server vulnerability that was patched two years ago but is now being actively exploited in attacks.

Spanish National Police have arrested a person accused of leaking sensitive personal information linked to members of several major state organizations, including Spain’s National Cybersecurity Institute, known as INCIBE.

Several Dashlane users were temporarily locked out of their accounts after the password manager detected brute-force login attempts from unfamiliar devices and distant locations.

Nearly 2,000 WordPress websites have been infected with malware that uses Steam Community profile comments to hide command-and-control data, according to GoDaddy security researchers.

A threat actor tracked as DriveSurge has been running large-scale malware distribution campaigns by abusing compromised websites and using ClickFix and FakeUpdates tactics to infect visitors.

Atlas Menu, a cheat service used for the popular online game Grand Theft Auto V, has been hacked, exposing data from almost 64,000 accounts, according to the breach notification website Have I Been Pwned.