When people think about a cyberattack, they usually picture stolen passwords, malware, ransomware or someone exploiting a vulnerability to break into a…
Category: CySecurity News – Latest Information Security and Hacking Incidents
Amgen Data Breach Exposes Patient Health and Proprietary Cloud Data
Amgen has disclosed a serious cloud-related data breach that exposed patient health information and proprietary company data, highlighting how third-party…
RingCentral Breach Exposes Personal Data of 1.6 Million Accounts
An attack on RingCentral, which was targeted at social engineering, has led to a data breach that could have exposed personal information of around 1.6…
Visa Deploys Mythos to Uncover Vulnerabilities in Its Payment Network
During Anthropic’s Project Glasswing initiative, Visa evaluated Claude Mythos Preview against its global payment processing network. Operating across 200…
SAP Commerce Cloud Vulnerability Targeted After Patch
A maximum-severity vulnerability in SAP Commerce Cloud is reportedly facing exploitation attempts only days after SAP released a security update. Tracked…
Apple macOS Flaw Exploited in the Wild to Install Monero Cryptominers
A critical vulnerability in the recently updated Apple macOS has been weaponized by threat actors to mine Monero cryptocurrency, according to the…
Evooo1Bot Hijacks Linux Routers for Proxying, Credential Theft and DDoS Attacks
A new Linux botnet named Evooo1Bot is turning internet-facing routers and other gateway devices into SOCKS5 traffic relay nodes, giving attackers a way to…
Trezor Data Breach Exposes Personal Information of Nearly 14,000 Customers
Hardware cryptocurrency wallet maker Trezor has disclosed a data breach involving the personal information of nearly 14,000 customers, after an…
Encrypted AI Reasoning Flaw Exposed Secrets Across Major LLM APIs
A newly reported security weakness in the systems used by OpenAI, Anthropic and Google to preserve hidden AI reasoning between API calls has allowed…
Meccha Chameleon Players Urged to Update Game After Malicious Workshop Maps Infect PCs
Players of indie game Meccha Chameleon have been advised to install the latest update and avoid the game’s original Discord community after malicious…
Anthropic AI Discovery Pushes HAWK Out of US Post-Quantum Cryptography Race
A post-quantum cryptography algorithm that was being evaluated for possible adoption as a US standard has been withdrawn after Anthropic’s AI security…
GrapheneOS Foundation Defends Privacy Features Amid US Case Involving User
The US Department of Justice’s recent case against GrapheneOS user Sam Tunick has renewed discussions about mobile privacy, digital security and the…
AI-Assisted Bug Discovery Still Depends on Human Validation
With artificial intelligence, security researchers can identify software vulnerabilities much faster by scanning code, generating payloads, mapping attack…
Apple Warns of Supply Crunch as Demand Surges
Apple’s issue is a supply crunch: strong demand for iPhones and Macs is outpacing the company’s ability to secure key components, especially advanced…
Iran-Linked Hackers Suspected in Cyberattacks Targeting Minnesota Water Systems
Several water systems in Minnesota were under attack from cyber intruders over the weekend. Investigators believe the attacks were launched from an…
Russian Hackers Use Exchange Zero-Day in Email Attacks
Russia-aligned cyberespionage group Laundry Bear, also tracked as Void Blizzard and TA488, is exploiting a Microsoft Exchange Outlook Web Access (OWA)…
Trump Memo Signals New U.S. Push to Disrupt Foreign Cybercrime Groups
The memo from the White House signed by President Donald Trump will increase the role of cybersecurity companies in fighting foreign criminal…
GeoServer Zero Day Being Probed While No Patch Available
A newly found GeoServer zero-day is already receiving active exploitation efforts, while there is no patch ready yet. Firms using the open-source…
Ransomware Attacks Fall as Business Defenses Improve
Ransomware has long been one of the biggest cyber threats to businesses, often forcing victims into costly downtime and data loss. Recently, analysts have…
New Ransomware Targets AI Model Weights but Fails to Collect Ransom
An updated ransomware campaign is targeting an important but often overlooked asset in artificial intelligence environments: trained AI models and their…