Category: CYBER SECURITY

Bybit has suffered the largest crypto theft in history, with hackers stealing $1.46 billion from the exchange earlier today.

Microsoft has issued a security alert regarding a high-severity elevation of privilege vulnerability in Power Pages, which hackers exploited as a zero-day attack.

Health Net Federal Services (HNFS) and its parent company, Centene Corporation, have agreed to pay $11.25 million to settle allegations of falsely certifying compliance with cybersecurity requirements under their Defense Health Agency (DHA) TRICARE contract.

HCRG Care Group, one of the largest independent healthcare providers in the U.K., has confirmed it is investigating a cybersecurity breach after a ransomware gang claimed to have stolen a vast amount of sensitive data.

The Cybersecurity and Infrastructure Security Agency (CISA) and the FBI warned about the widespread impact of Ghost ransomware, which has breached victims across more than 70 countries.

Over 1.6 million clinical research records containing personally identifiable information (PII) and sensitive patient medical data have been exposed in a massive data breach.

A threat group, likely linked to Russia, is targeting Microsoft 365 accounts by exploiting a process called device code phishing.

Chinese state-backed hackers, known as Salt Typhoon (also tracked as RedMike), continue to target global telecommunications networks, exploiting unpatched Cisco IOS XE devices.

Security researchers have discovered a flaw in Amazon Web Services (AWS) that could allow unauthorized access to an AWS account simply by publishing an Amazon Machine Image (AMI) with a cleverly chosen name.

The Dutch Police (Politie) have dismantled the ZServers/XHost bulletproof hosting operation, taking down 127 servers that were allegedly used for illegal activities.

Google has patched two serious security flaws that, when exploited together, could have revealed the email addresses of YouTube users—posing a major privacy risk, especially for those who rely on anonymity.

Decentralized finance (DeFi) platform zkLend has fallen victim to a major cyberattack, with hackers exploiting a flaw in its smart contract to steal 3,600 Ethereum—worth approximately $9.5 million at the time of the breach.

Cybersecurity Researcher Jeremiah Fowler uncovered a non-password-protected database that contained nearly 2.7 billion records belonging to Mars Hydro.

Law enforcement agencies across France, Spain, and Israel arrested six suspects in the early hours of January 27, 2025.

Microsoft has released its February 2025 Patch Tuesday updates, addressing 55 security vulnerabilities, including four zero-day flaws, with two actively exploited in real-world attacks.

A Russian military cyber-espionage group known as Sandworm is attacking Windows users in Ukraine by spreading malware through trojanized Microsoft Key Management Service (KMS) activators and fake Windows updates.

The United States, United Kingdom, and Australia have sanctioned Zservers, a Russia-based bulletproof hosting (BPH) provider, for supplying key infrastructure to the LockBit ransomware gang.

Apple and Google have removed 20 apps from their stores after researchers discovered they contained malware stealing user data for nearly a year.

Eric Council Jr., 25, pleaded guilty to hacking the SEC’s X account in January 2024.

A sweeping brute force assault is currently in progress, with nearly 2.8 million unique IP addresses being used daily to guess login credentials for a wide array of networking devices—including those manufactured by Palo Alto Networks, Ivanti, and SonicWall.