Category: CYBER SECURITY

Abacus Market, the largest Western darknet marketplace supporting Bitcoin payments, has suddenly gone offline in a suspected exit scam.

Meta has fixed a serious security flaw that allowed users of its Meta AI chatbot to access private prompts and AI responses belonging to other users.

The UK’s National Cyber Security Centre (NCSC) has launched a new Vulnerability Research Initiative (VRI) aimed at enhancing collaboration with external cybersecurity researchers to improve the discovery and understanding of software and hardware vulnerabilities.

More than 240 Gigabyte motherboard models are vulnerable to critical security flaws in their UEFI firmware that could allow attackers to install stealthy bootkit malware.

Medical billing company Episource is alerting more than 5.4 million individuals across the U.S. after their personal and health information was stolen in a cyberattack earlier this year, making it one of 2025’s largest healthcare breaches so far.

Security researchers have discovered a new way hackers can manipulate Google Gemini for Workspace to display fake warnings in email summaries, without using any links or attachments.

Hackers have begun exploiting a severe remote code execution (RCE) vulnerability in Wing FTP Server (CVE-2025-47812) just a day after its technical details were made public by security researcher Julien Ahrens.

NVIDIA has issued a security warning urging users to enable System-Level Error-Correcting Code (ECC) on GPUs with GDDR6 memory to protect against Rowhammer attacks, a hardware-based vulnerability that can corrupt memory and compromise system stability.

A major supply-chain attack has compromised the popular Gravity Forms WordPress plugin, affecting manual downloads from the official website.

A critical vulnerability in McHire, McDonald’s chatbot-based job application platform, exposed the personal data and chat transcripts of over 64 million U.S. job applicants.

PCA Cyber Security researchers have uncovered a set of critical vulnerabilities in the widely used Blue SDK Bluetooth stack, exposing millions of vehicles and smart devices to serious privacy and safety threats.

Nearly a dozen Chrome extensions with a combined 1.7 million downloads have been found secretly tracking user activity, stealing browser data, and redirecting users to unsafe websites, according to researchers at Koi Security.

The Anatsa banking trojan has resurfaced on the Google Play Store, this time hiding inside a fake PDF viewer app called “Document Viewer – File Reader”, published by Hybrid Cars Simulator, Drift & Racing.

Microsoft has released its July 2025 Patch Tuesday updates, addressing a total of 137 security flaws, including a publicly disclosed zero-day vulnerability in Microsoft SQL Server and 14 rated as critical.

A cybersecurity researcher has discovered an unprotected database containing sensitive personal data of nearly 246,000 people, possibly linked to a Texas-based company called Rockerbox.

A Chinese citizen has been arrested in Milan, Italy, for allegedly being involved with a state-sponsored hacking group known for targeting U.S. organizations and government agencies.

Australian airline Qantas has confirmed it is being extorted following a recent cyberattack that may have exposed the personal data of up to 6 million customers.

Hackers have stolen nearly $140 million from six major banks in Brazil by exploiting insider access at C&M, a company that provides financial connectivity services.

U.S. tech distribution giant Ingram Micro confirmed on Monday that a ransomware attack is behind an ongoing outage that has disrupted its global operations since last Thursday.