Category: CYBER SECURITY

WinRAR has patched a high-severity directory traversal vulnerability—CVE-2025-6218—that could allow malware to execute after extracting specially crafted archives.

The U.S. Department of Justice has charged a 25-year-old British national, Kai West, known online as "IntelBroker", for stealing and selling sensitive data from government agencies, private companies, and critical infrastructure worldwide.

A newly discovered piece of mobile malware called SparkKitty has been found lurking in apps on both Google Play and the Apple App Store, stealing images from users’ photo galleries, with a strong focus on cryptocurrency wallet seed phrases.

Four members of the infamous REvil ransomware gang have been released from custody in Russia after pleading guilty and being sentenced to time served.

A notorious Russian state-sponsored hacking group known as APT28 is reportedly using Signal, the popular encrypted messaging app, to deliver malware in targeted cyberattacks against Ukrainian government officials.

The Canadian government and the FBI have confirmed that Chinese state-backed hackers have breached at least one Canadian telecommunications company, part of a broader cyber-espionage campaign linked to the group Salt Typhoon.

Oxford City Council has confirmed a data breach after threat actors accessed personally identifiable information (PII) stored on legacy systems, affecting past and present Council staff.

Popular cryptocurrency price tracker CoinMarketCap suffered a website supply chain attack that exposed site visitors to a malicious wallet drainer campaign, resulting in over $43,000 stolen from unsuspecting users.

Russian state-sponsored hackers have found a new way to bypass Google’s two-factor authentication by exploiting a legitimate feature known as app-specific passwords.

Taiwanese cryptocurrency exchange BitoPro has attributed a recent $11 million cyber heist to the notorious North Korean hacking group Lazarus, following a sophisticated breach of its systems on May 8, 2025.

The U.S. Department of Justice (DOJ) has seized over $225 million in cryptocurrency tied to a global investment fraud and money laundering network, marking the largest crypto seizure in U.S. Secret Service history.

A massive compilation of stolen credentials has resurfaced online, triggering alarmist headlines about a so-called "mother of all breaches."

Satellite communications provider Viasat has become the latest target of the Chinese state-sponsored hacking group known as Salt Typhoon, according to a report from Bloomberg.

The pro-Israel hacking group Predatory Sparrow has claimed responsibility for a major cyberattack on Nobitex, Iran’s largest crypto exchange, stealing and burning over $90 million in cryptocurrency in a politically motivated move.

Privacy-focused email provider Cock.li has confirmed a data breach affecting more than 1 million users, after hackers exploited a flaw in its now-deprecated Roundcube webmail platform.

The UK Information Commissioner’s Office (ICO) has fined genetic testing company 23andMe £2.31 million (approximately USD 3.12 million) for serious security failures that led to a major data breach in 2023, exposing the sensitive personal and genetic information of millions.

Cybersecurity researcher Jeremiah Fowler discovered a non-password-protected database containing over 170,000 sensitive records linked to a real estate investment and management company.

Authorities across Europe have shut down Archetyp Market, the longest-running dark web drug marketplace, in a major joint operation supported by Europol and Eurojust.

The Washington Post has reset all employee logins following a cyberattack that compromised several journalists’ email accounts, according to a report from The Wall Street Journal.