OSS VRP (Open Source Software Vulnerability Rewards Program) has temporarily been suspended after a sharp increase in automated reports that were found to…
Category: CySecurity News – Latest Information Security and Hacking Incidents
Meta’s AI Agent Read 187,000 Private Messages. Now Apple Is Changing the Rules
Apple has announced plans to overhaul one of macOS’s most powerful privacy settings, citing security risks posed by AI agents that have been using it to…
South Korea Orders Financial Sector Probe After Series of Data Breaches
South Korea is gearing up to respond to a string of cyber disruptions that targeted financial institutions, with the President demanding a thorough…
CloudSyncD Backdoor Spread Through Fake Zoom Installer Targeting macOS
Using fake Zoom installers, a macOS malware campaign distributes a backdoor known as CloudSyncD, a backdoor for MacOS. Jamf Threat Labs first identified…
DTU Data Breach Exposes Information of 200,000 People
The Technical University of Denmark (DTU) has disclosed a major data breach that may have exposed personal information belonging to as many as 200,000…
California Court Dismisses El Faro Journalists’ Pegasus Spyware Lawsuit Against NSO Group for Second Time
A California federal judge has once again dismissed a lawsuit brought by journalists from Salvadoran investigative outlet El Faro against NSO Group, the…
China’s Ministry Allegedly Funded Research Involving 100+ Academics
The U.K.’s domestic intelligence agency, MI5, has warned that more than 100 U.K.-linked academics have contributed to research projects allegedly funded…
China-Aligned TA419 Uses Microsoft AitM Phishing Against U.S. AI Policy Experts
A China-linked cyber-espionage group is targeting Microsoft credentials belonging to U.S. policy and regulatory specialists in artificial intelligence,…
Dell Patches Six Critical Flaws in Container Storage Modules, Some Scoring a Perfect 10
Dell has shipped security fixes for six critical vulnerabilities in its Container Storage Modules (CSM) that could allow unauthenticated attackers to…
China Nexus Cyber Espionage Attacks Government Organizations
A China-nexus cyber-espionage campaign is targeting government and policy organizations across Asia with a previously undocumented Windows backdoor called…
ShinyHunters Hacker Reportedly Detained as FBI Seeks Cooperation
The FBI has reportedly detained a suspected ShinyHunters member known online as “Rey” and is cooperating with the government. Jordanian authorities…
Polish Dental Software Firm Hit by Cyberattack
Polish dental software provider FELG Software has confirmed a cybersecurity incident affecting its FELG Dent cloud-based practice management platform. The…
French Tax Data Theft: Threat Actors Steal Password and Remain Undetected
A threat actor used stolen passwords of employees at France’s tax admin to steal tax data on businesses and hundreds of thousands of taxpayers in…
Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Campaigns
Microsoft has warned of a new wave of phishing campaigns that abuse the legitimate MSP360 Remote Monitoring and Management (RMM) software to establish…
Google’s Android 17 Locks Accessibility Services to Verified Apps as Malware Threat Branches Out
Google is tightening restrictions on one of mobile malware’s most persistent entry points. With Android 17, the company is limiting access to its…
AI Turns Into Both Threat and Shield in Supply-Chain Cyberattacks
Artificial intelligence is emerging as both a growing cybersecurity risk and a critical defence tool for supply-chain companies. As warehouses, factories…
Mayor Confirms Ransomware Incident Disrupted Mississippi City Systems
The city of Vicksburg, Mississippi, has taken its computer systems offline after a ransomware attack disrupted several city functions. Mayor Willis…
Microsoft X Account Hijacked to Promote Clippy-Themed Crypto Token
Microsoft’s account on X was hacked and used to promote a cryptocurrency token, turning the technology company’s 13-million-follower social media presence…
CloudSyncD MacOS Backdoor Used Fake Zoom Installer to Steal Passwords
Cybersecurity researchers have identified a new macOS backdoor called CloudSyncD that uses a fake Zoom installer to trick users into providing their…
Most Enterprises Are Unprepared for AI and Quantum Threats, PwC Survey Finds
Most organizations around the world are spending more on cybersecurity than at any point in their history. Very few are spending it on the threats that…