Category: CYBER SECURITY

Italian authorities have dismantled a major piracy network built around the CINEMAGOAL app, which allegedly gave users illegal access to streaming services including Netflix, Disney+, Spotify, Sky, and DAZN.

Financial crime investigators in the Netherlands have arrested two men and seized 800 servers connected to a web hosting company accused of supporting cyberattacks, disinformation campaigns, and online interference operations.

Cybercriminals are sending fake “Official Court Order” emails posing as Nepal Police and CIB to scare victims into paying fake settlement fees.

U.S. and Canadian authorities have arrested and charged a 23-year-old Canadian man accused of running the KimWolf distributed denial-of-service botnet, which infected nearly two million devices around the world.

Google has accidentally exposed details about an unfixed Chromium security issue that can keep JavaScript running in the background even after the browser is closed, potentially allowing attackers to remotely run code through a malicious webpage.

A Chinese cyber-espionage campaign has been targeting telecommunications providers with newly discovered malware designed for both Linux and Windows systems. The Linux malware has been named Showboat, while the Windows implant is known as JFMBackdoor.

An international law enforcement operation has taken down a virtual private network service called First VPN, which authorities say was used by cybercriminals in ransomware, fraud, and data theft attacks.

Scammers have reportedly been abusing a loophole that lets them send spam emails from an internal Microsoft email address normally used for legitimate account alerts.

GitHub says hackers who accessed about 3,800 internal repositories got in through a malicious version of the Nx Console Visual Studio Code extension, which was compromised during last week’s TanStack npm supply-chain attack.

Microsoft has shared temporary mitigation steps for YellowKey, a newly disclosed Windows BitLocker zero-day vulnerability that could allow attackers to access protected drives.

GitHub has confirmed that around 3,800 of its internal repositories were accessed after one of its employees installed a malicious Visual Studio Code extension.

GitHub is investigating a security breach involving its internal repositories after a hacker group known as TeamPCP claimed it had accessed around 4,000 private repositories containing internal code.

The FBI says Americans lost more than $388 million in 2025 to scams involving cryptocurrency kiosks, also known as crypto ATMs or Bitcoin ATMs.

The Tycoon2FA phishing kit has added support for device-code phishing attacks and is now abusing Trustifi click-tracking URLs to steal access to Microsoft 365 accounts.

Two security vulnerabilities in the Avada Builder plugin for WordPress could allow hackers to read sensitive files from websites and extract private information from their databases.

A critical security flaw in the Funnel Builder plugin for WordPress is being actively exploited by hackers to inject malicious JavaScript into WooCommerce checkout pages and steal customer payment details.

A hotel check-in system used by several hotels in Japan left more than 1 million customer passports, driver’s licenses, and selfie verification photos exposed on the open web after a major security lapse.

Hackers are actively exploiting a critical security flaw in the WordPress plugin Burst Statistics that can allow them to gain admin-level access to vulnerable websites.

The alleged main administrator of Dream Market, once one of the largest dark web marketplaces before it was shut down, has been indicted in the United States on money laundering charges.