Category: CYBER SECURITY

France’s data protection authority has fined Hôpital privé de la Loire €500,000 after a security breach exposed sensitive information belonging to more than 727,000 people.

Hackers are actively exploiting a recently patched critical vulnerability in the Elementor Pro WordPress plugin to upload malicious files and execute commands on vulnerable websites.

Thomson Reuters has disclosed a cybersecurity incident involving its C-Track case management platform, which is used by courts to manage digital records. The incident affected court systems across 11 U.S. states, the U.S. Virgin Islands and Canada.

Nearly 40 million user accounts belonging to South Korean streaming platform Tving were compromised in a major data breach linked to a hacking incident reported in June, according to the findings of a joint government and private-sector investigation.

Some Dropbox users had their accounts accessed by an unauthorized attacker after a flaw in Lenovo’s email verification process was used to create fraudulent Lenovo IDs.

A serious security flaw in the All-in-One WP Migration and Backup plugin could allow attackers to take control of vulnerable WordPress websites.

An international operation supported by Europol has disrupted Sality, a long-running peer-to-peer (P2P) botnet that has been used to spread malicious payloads to thousands of infected computers around the world.

A California federal grand jury has indicted a Russian national accused of running a phishing campaign that infected thousands of freelancers with TVRAT and DarkVNC malware.

Dropbox says hackers compromised around 5,000 user accounts last month and were able to view and download files stored on the cloud-storage platform.

X users are being targeted with a wave of unsolicited password reset emails following the launch of X Money, the social media platform’s new payments service.

Attackers are exploiting two recently patched PaperCut vulnerabilities to bypass authentication and steal data from vulnerable print management servers.

Five Venezuelan nationals have pleaded guilty to attempting to steal cash from ATMs using malware in jackpotting attacks across Kansas.

South Korea’s privacy watchdog has fined GS Retail 12.8 billion won after a hacker accessed the personal information of 1.66 million customers through repeated login attempts.

Berlin has confirmed it is facing an extortion attempt after hackers compromised its state administrative network, while forensic investigators continue examining additional data exfiltration.

A 68-year-old man in the U.K. has been sentenced to 6.5 years in prison after operating an illegal IPTV service that generated nearly £1 million and used 80 servers to distribute pirated broadcasts

A maximum-severity GiveWP vulnerability affects versions through 4.16.7.1 and could allow attackers to execute arbitrary commands on vulnerable WordPress servers.

A long-running campaign has compromised 19 browser extensions with cryptocurrency-draining and data-stealing capabilities, potentially affecting thousands of users.

cPanel has released security updates for a critical vulnerability affecting domain parking and addon domains that could allow attackers to create arbitrary files and ultimately execute code as root.