Category: CYBER SECURITY

Europol has taken down a criminal group that tricked over 100 people and stole more than €3 million through a fake online investment platform.

U.K. retail giant Marks & Spencer has confirmed that hackers stole customer personal data during a cyberattack last month.

Cybersecurity researcher Jeremiah Fowler discovered an unprotected database containing 3,154,239 records linked to PrepHero, a platform that helps high school athletes secure college sports scholarships.

Genetic testing company 23andMe has filed for Chapter 11 bankruptcy and is now alerting millions of customers that they may be eligible to file claims for losses.

Germany’s Federal Criminal Police Office (BKA) has seized the server infrastructure of the cryptocurrency exchange eXch, accusing it of facilitating large-scale money laundering through illicit crypto transactions.

Google is adding a powerful new AI-based security feature to Chrome that uses its on-device Gemini Nano model to detect and block tech support scams.

Ascension has confirmed that sensitive personal and health information belonging to over 437,000 patients was exposed in a data breach linked to a former business partner.

Hackers are actively exploiting a critical vulnerability in the OttoKit WordPress plugin, allowing them to create rogue administrator accounts on targeted websites.

A new phishing kit called CoGUI has been used to send over 580 million emails between January and April 2025 in an attempt to steal account credentials and payment information from users.

The LockBit ransomware gang has been hacked. Their dark web admin panels were defaced, and hackers leaked their internal database containing sensitive info like Bitcoin addresses, chat logs, and plaintext passwords.

Polish authorities have arrested four individuals accused of running a network of websites that allowed users to launch cyberattacks for a small fee.

Google has rolled out the May 2025 Android security updates, addressing 45 vulnerabilities, including a high-severity, actively exploited zero-click flaw in the FreeType font rendering library.

A U.S. federal jury in California has ordered Israeli spyware firm NSO Group to pay Meta $167.25 million for hacking 1,400 WhatsApp users using its notorious Pegasus software.

Darcula, a phishing-as-a-service (PhaaS) platform, has stolen over 884,000 credit cards through 13 million malicious link clicks over seven months between 2023 and 2024.

A hacker has exploited a vulnerability in TeleMessage, a service that provides modified versions of secure messaging apps like Signal, Telegram, and WhatsApp.

SK Telecom said on Sunday that nearly 20 million subscribers have signed up for its USIM Protection Service following a large-scale data breach.

A critical security lapse in the popular dating app Raw exposed sensitive user data, including names, birthdates, sexual preferences, and precise location information.

A dangerous new malware campaign is targeting WordPress websites by disguising itself as a harmless security plugin. Once installed, it silently gives hackers full control of the site while remaining hidden from the admin dashboard.