Category: CYBER SECURITY

Education technology company Instructure says it is investigating a cyberattack after hackers claimed they stole 280 million records linked to students, teachers, and staff across thousands of schools and universities.

The Amazon Simple Email Service, known as Amazon SES, is increasingly being misused by attackers to send highly convincing phishing emails that can slip past standard security filters and reputation-based protections.

A Latvian hacker linked to a major Russia-based ransomware gang has been sentenced to 102 months in prison after helping orchestrate attacks on more than 54 companies worldwide.

Cybersecurity authorities have raised a serious alarm after a newly disclosed Linux vulnerability, known as “Copy Fail,” is now being actively exploited in real-world attacks just a day after its public disclosure.

China-aligned hackers have reportedly targeted government and defence organisations across South, East and Southeast Asia, along with one NATO member in Europe, in a new cyber espionage campaign.

A newly disclosed cPanel security flaw is now being mass-exploited by hackers to breach websites and encrypt data in “Sorry” ransomware attacks.

Ubuntu’s web infrastructure has gone offline following a major distributed denial-of-service (DDoS) attack, leaving users unable to access updates and essential services at a critical time.

Cybersecurity researcher Jeremiah Fowler has uncovered a serious data leak involving stalkerware that exposed more than 86,000 private images from a victim’s device.

A critical security vulnerability tracked as CVE-2026-41940 has been discovered in most versions of cPanel and WebHost Manager (WHM), potentially allowing attackers to access hosting control panels without authentication.

Authorities in Austria and Albania have dismantled a major cryptocurrency investment fraud network accused of stealing more than €50 million from victims around the world.

A widely used WordPress plugin called Quick Page/Post Redirect, installed on more than 70,000 websites, was found to contain a hidden backdoor that could allow attackers to inject arbitrary code.

Sri Lanka is investigating a suspected cyberattack after a payment of about $625,000 meant for the United States Postal Service went missing for several weeks.

GitHub employees moved quickly last month to patch a serious remote code execution vulnerability that could have exposed millions of public and private code repositories.

A 19-year-old dual citizen of the United States and Estonia has been arrested in Finland and is now facing federal charges in the U.S. for allegedly being a key member of the notorious Scattered Spider group.

Vimeo has confirmed that some customer and user data was accessed without authorization after the recent cyberattack involving Anodot.

Canadian authorities have arrested three men accused of operating an “SMS blaster” device that pretended to be a real mobile tower to send phishing text messages directly to nearby phones.

Robinhood customers were targeted in a phishing campaign after attackers abused the company’s account creation process to insert fake security warnings into legitimate emails.

A man accused of carrying out cyberattacks for the Chinese government has been extradited to the United States and could face more than a decade in prison if convicted.

Americans lost a massive $2.1 billion to scams that started on social media in 2025, according to a new report from the Federal Trade Commission.

Hackers are actively exploiting a critical vulnerability in the Breeze Cache plugin for WordPress that allows attackers to upload arbitrary files to a server without authentication.