Category: CYBER SECURITY

The debate over digital security in education has grown stronger after Instructure, the company behind the widely used Canvas learning platform, reached an agreement with hackers following a major cyberattack that disrupted thousands of universities and colleges worldwide.

Hackers are actively targeting WordPress websites using a vulnerable version of the WP Maps Pro plugin, a critical security flaw that can let attackers create rogue administrator accounts without logging in.

Microsoft is facing criticism over how it is handling publicly disclosed zero-day exploits, after a security researcher using the name Nightmare Eclipse began posting proof-of-concept exploit code online.

California Attorney General Rob Bonta has filed a lawsuit against 23andMe, now known as Chrome Holding Co., accusing the company of failing to protect customers’ sensitive genetic and personal information properly.

Google says its Chrome Device Bound Session Credentials security feature is now generally available and is rolling out to users to help prevent account takeovers caused by stolen session cookies.

Threat actors are abusing ChatGPT’s content-sharing feature to show fake OpenAI outage pages that trick users into downloading malware disguised as the ChatGPT desktop app.

A North Carolina man has been sentenced to more than 10 years in prison for selling the personal information of over 7 million elderly Americans to scammers based in Jamaica.

The ShinyHunters extortion gang stole personal information from 4.9 million accounts after hacking U.S. telecom giant Charter Communications in early April, according to data breach notification service Have I Been Pwned.

The FBI is warning football fans about fake websites pretending to be FIFA ahead of the 2026 World Cup.

A new unpatched zero-day vulnerability in the Gogs self-hosted Git service can let attackers remotely execute code on exposed servers.

Hackers are targeting Signal users in a new phishing campaign that tries to steal their chat backup recovery keys, according to TechCrunch.

Temu has been fined €200 million, or about $232 million, by the European Commission after regulators found that shoppers are very likely to come across illegal products on the Chinese e-commerce platform.

Carnival Corporation has confirmed a major data breach affecting nearly 6 million people after threat actors gained access to part of its IT systems through a social engineering attack.

A Google employee has been charged with fraud after prosecutors said he allegedly used confidential company information to win about $1.2 million through Polymarket bets tied to Google Search trends.

The FBI has warned that the Silent Ransom Group, also known as SRG, is now targeting law firms in the United States using a mix of phone-based social engineering, phishing emails, and even in-person data theft attempts.

Security researchers have linked a March cyberattack on the Los Angeles County Metropolitan Transportation Authority to Iranian-backed hackers.

A website called UK Visa Portal has reportedly exposed passport copies and selfie photos of people who used the platform to apply for a U.K. immigration visa.

The U.S. Cybersecurity and Infrastructure Security Agency has ordered federal agencies to secure their servers against a serious SQL injection vulnerability in the Drupal content management system that is already being exploited in attacks.

The ShinyHunters extortion group has leaked personal information belonging to more than 185,000 people after breaching systems connected to convenience store giant 7-Eleven, according to data breach notification service Have I Been Pwned.

The FBI has warned about a phishing-as-a-service platform called Kali365 that is being used to hijack Microsoft 365 accounts by abusing OAuth device code authentication.