Category: CYBER SECURITY

Foxconn, the electronics manufacturing giant that produces devices and components for major tech companies, including Apple, Google, Nvidia, Sony, and others, has confirmed that it was recently hit by a cyberattack that may have affected some of its factories.

More than 1,000 fake IPL-related domains are being used to run online scams and malware attacks against cricket fans during the ongoing Indian Premier League season, according to a new report.

The UK Information Commissioner’s Office has fined South Staffordshire Water Plc and its parent company South Staffordshire Plc £963,900, or about $1.3 million, after a cyberattack exposed the personal data of 663,887 customers and employees.

Instructure, the education technology company behind the popular Canvas learning management system, has reached an “agreement” with the ShinyHunters extortion group to stop stolen data from a recent breach from being leaked online.

What separates defense contractors who pass their CMMC assessment on the first attempt from those who struggle is rarely the sophistication of their technology.

Google says it has discovered and stopped what it believes is the first zero-day exploit developed with the help of AI.

Attackers are abusing Google Ads and legitimate Claude.ai shared chats in a new malvertising campaign that targets Mac users looking for Claude downloads.

German authorities have shut down a relaunched version of the criminal marketplace Crimenetwork and arrested the man suspected of running it.

The official website of JDownloader was hacked earlier this week in a supply chain attack that exposed Windows and Linux users to malicious installers.

NVIDIA has confirmed that user information linked to GeForce NOW was exposed in a recent data breach, but says the incident only affected systems operated by a regional partner in Armenia and did not impact NVIDIA’s own network.

Hackers who accessed databases linked to Zara stole data belonging to more than 197,000 customers, according to data breach notification service Have I Been Pwned.

A 34-year-old Virginia man has been found guilty of conspiring to destroy dozens of government databases after he was fired from his job as a federal contractor.

fA new Linux zero-day vulnerability called Dirty Frag can allow local attackers to gain root privileges on most major Linux distributions using just a single command.

Canvas went down after its parent company, Instructure, recently confirmed a major data breach affecting student names, email addresses, ID numbers, and messages.

A new phishing campaign is using Google-sponsored search results to steal login credentials from ManageWP users, putting large numbers of WordPress websites at risk.

A U.S. court has sentenced Latvian hacker Deniss Zolotarjovs to more than eight years in prison after he was convicted for his role in ransomware attacks.

Security researcher Alexander Hanff, also known as “That Privacy Guy,” has published a new analysis claiming that Google Chrome is silently downloading a large on-device AI model to some users’ computers without clear notice or consent.

Palo Alto Networks has warned customers about a critical unpatched zero-day vulnerability in its PAN-OS User-ID Authentication Portal that is already being exploited in real-world attacks.

The ShinyHunters extortion group has claimed responsibility for a data breach affecting Vimeo, with leaked data reportedly exposing personal information belonging to more than 119,000 people.

Education technology company Instructure says it is investigating a cyberattack after hackers claimed they stole 280 million records linked to students, teachers, and staff across thousands of schools and universities.