Council of the European Union, in response to the escalation of state-linked cyber intrusions, has tightened its defensive posture by imposing targeted sanctions on a cluster of entities and individuals allegedly engaged in sophisticated digital attacks against European interests…
Category: CySecurity News – Latest Information Security and Hacking Incidents
How a Brute-Force Attack Exposed a Wider Ransomware Ecosystem
What initially appeared to be a routine brute-force alert ultimately revealed a far more complex ransomware-linked infrastructure, demonstrating how even low-level signals can expose deeper cybercriminal operations. According to analysis by Huntress, an investigation that began with a single…
AI Boom Turns Browsers into Enterprise Security’s Biggest Blind Spot
Telemetry data from the 2026 State of Browser Security Report reveals that, while the browser has become the de facto operating system for work in the enterprise, it remains one of the least secured segments in the overall security…
Cisco Warns of Actively Exploited SD-WAN Vulnerabilities Affecting Catalyst Network Systems
Cisco warns of several security holes in its Catalyst SD-WAN Manager, noting hackers have begun using at least one in live operations. Updates exist – applying them quickly reduces risk exposure. Exploitation is underway; delayed patching increases danger. Systems…
AkzoNobel Confirms Cyberattack at U.S. Site Following Anubis Ransomware Data Leak
kDutch multinational paints and coatings company AkzoNobel has confirmed that a cyberattack impacted one of its facilities in the United States, according to a statement shared with BleepingComputer. The incident came to light after the Anubis ransomware gang published…
Global Crackdown Dismantles LeakBase Data Breach Forum, Dozens Targeted in Europol Operation
A large-scale international law enforcement effort has reportedly led to multiple arrests as authorities moved to shut down a well-known underground data leak marketplace. Europol revealed details of a coordinated operation that successfully dismantled LeakBase, a platform it described…
Microsoft Releases Hotpatch to Fix Windows 11 RRAS Remote Code Flaw
Microsoft has issued an out-of-band (OOB) security update to remediate critical vulnerabilities affecting a specific subset of Windows 11 Enterprise systems that rely on hotpatch updates instead of the conventional monthly Patch Tuesday cumulative updates. The update, identified as KB5084597,…
Google Faces Wrongful Death Lawsuit Over Gemini AI in Alleged User Suicide Case
A lawsuit alleging wrongful death has been filed in the U.S. against Google, following the passing of a 36-year-old man from Florida. It suggests his interaction with the firm’s AI-powered tool, Gemini, influenced his decision to take his own…
TikTok Rejects Controversial Privacy Tech for DMs, Citing User Safety Risks
TikTok has firmly rejected implementing end-to-end encryption (E2EE) for direct messages (DMs), arguing that the technology could endanger users by limiting content moderation. In a recent statement to lawmakers and regulators, the platform emphasized that forgoing full encryption allows…
Royal Bahrain Hospital Faces Alleged Breach by Payload Ransomware
Several ransomware outfits have recently surfaced, claiming responsibility for significant breaches at Royal Bahrain Hospital, raising fresh concerns about healthcare cybersecurity. The group claims that it has penetrated the hospital’s digital infrastructure and exfiltrated a considerable amount of sensitive…
Deepfake Fraud Expands as Synthetic Media Targets Online Identity Verification Systems
Beyond spreading false stories or fueling viral jokes, deepfakes are shifting into sharper, more dangerous forms. Security analysts point out how fake videos and audio clips now play a growing role in trickier scams – ones aimed at breaking…
US Military Reportedly Used Anthropic’s Claude AI in Iran Strikes Hours After Trump Ordered Ban
The United States military reportedly relied on Claude, the artificial intelligence model developed by Anthropic, during its strikes on Iran—even though former President Donald Trump had ordered federal agencies to stop using the company’s technology just hours earlier. Reports…
Chrome Gemini Live Bug Highlighted Serious Privacy Risks for Users
As long as modern web browsers have been around, they have emphasized a strict separation principle, where extensions, web pages, and system-level capabilities operate within carefully defined boundaries. Recently, a vulnerability was disclosed in the “Live in Chrome” panel of…
Hackers Abuse OAuth Flaws for Microsoft Malware Delivery
Microsoft has warned that hackers are weaponizing OAuth error flows to redirect users from trusted Microsoft login pages to malicious sites that deliver malware. The campaigns, observed by Microsoft Defender researchers, primarily target government and public-sector organizations using phishing…
Experts Warn of “Silent Failures” in AI Systems That Could Quietly Disrupt Business Operations
As companies rapidly integrate artificial intelligence into everyday operations, cybersecurity and technology experts are warning about a growing risk that is less dramatic than system crashes but potentially far more damaging. The concern is that AI systems may quietly produce…
Cyberattacks Reported Across Iran Following Joint US-Israeli Strike on Strategic Targets
A fresh bout of online actions emerged overnight Friday into Saturday, running parallel to air assaults carried out jointly by U.S. and Israeli forces against sites inside Iran, security researchers noted. The timing suggests the virtual maneuvers were linked…
Hackers Exploit OpenClaw Bug to Control AI Agent
Cybersecurity experts have discovered a high-severity flaw named “ClawJacked” in the famous AI agent OpenClaw that allowed a malicious site bruteforce access silently to a locally running instance and take control. Oasis Security found the issue and informed OpenClaw, a…
GlassWorm Abuses 72 Open VSX Extensions in Bold Supply-Chain Assault
GlassWorm has resurfaced with a more aggressive supply‑chain campaign, this time weaponizing the Open VSX registry at scale to target developers. Security researchers say the latest wave represents a significant escalation in both scope and stealth compared to earlier…
Security Specialists Warn That Full Photo Access Can Expose Personal Data
Mobile devices have become silent archives of modern life, storing everything from personal family moments to copies of identification documents and work files. However, their convenience has also made them a very attractive target for cyber-espionage activities. The Google…
Meta to Discontinue End-to-End Encrypted Chats on Instagram Come May 2026
Meta Platforms has confirmed that it will remove support for end-to-end encrypted messaging in Instagram direct messages beginning May 8, 2026. After this date, conversations that previously relied on this encryption feature will no longer be protected by the…