Category: CYBER SECURITY

Excerpt: Brazil has filed a $97 million lawsuit against Discord, alleging the platform failed to meet legal requirements designed to protect children and teenagers online.

A critical Avada WordPress vulnerability rated 9.8 allows unauthenticated attackers to chain six security flaws and execute arbitrary PHP code on affected websites.

The FBI has seized domains tied to a large botnet allegedly operated for Chinese state-sponsored hackers targeting US government agencies and other organizations.

Cybersecurity researchers have uncovered AnonyMousKIT, a phishing-as-a-service platform that combines fake Apple alerts, phishing pages and AI-powered voice calls to target people whose iPhones have been lost or stolen.

The U.S. Treasury has imposed sanctions on nearly 60 Iran-linked targets, including cyber actors accused of attacking American critical infrastructure and conducting financially motivated cyber operations.

Norway’s shared government digital infrastructure has been hit by a large DDoS attack, causing outages and login problems across several public services.

An eight-month INTERPOL operation involving 22 countries has resulted in 58 arrests and the identification of 263 suspects linked to organized crime, financial fraud, money laundering and sextortion.

Two critical vulnerabilities in the miniOrange SAML SSO WordPress plugin are being targeted in active attacks, potentially allowing hackers to forge SAML responses and gain administrator access.

More than 9,300 AWS access keys publicly exposed over the past four years are still active, with hundreds linked to corporate accounts and some providing full administrative access.

TikTok has agreed to pay $400 million to settle a US Department of Justice lawsuit alleging violations of the Children’s Online Privacy Protection Act.

A critical vulnerability in Elementor Pro could allow unauthenticated attackers to upload malicious PHP files and execute arbitrary code on affected WordPress websites.

Security researchers have uncovered a large cybercrime operation using thousands of compromised WordPress websites to spread malware, steal files and support ransomware attacks.

Sakura Internet says hackers accessed its sales management system, potentially exposing information linked to as many as 1,360,563 member accounts.

Cybersecurity researcher Jeremiah Fowler has uncovered a major data exposure involving millions of facial images from what appears to be a reverse image search service.

Varonis has disclosed three vulnerabilities in Microsoft Copilot Personal that could allow attackers to execute prompts without user interaction, extract data from connected services, and plant persistent instructions in Copilot's memory.

U.S. authorities have expanded charges against 17 alleged members of Iran-based Mabna Institute, accusing the group of hacking hundreds of universities, companies and government organizations to steal research, intellectual property and other sensitive data.

GitLab has released an emergency security update for a critical vulnerability that could allow unauthenticated attackers to remotely modify or delete public projects and user data on affected self-managed installations.

A critical vulnerability in the Forminator Forms WordPress plugin affects more than 600,000 sites and could allow unauthenticated attackers to upload executable PHP files and take complete control of vulnerable websites.

A threat actor known as TheHatman is selling millions of alleged employee records from Fortune 500 companies, claiming they were stolen from Microsoft Azure.