Proton has released Proton Authenticator, an independent, standalone 2-factor authentication (2FA) app for macOS, Windows, Android, Linux, and iOS. 2FA verification applications are offline tools that create time-based OTPs that expire within 20 seconds, and can also be used with…
Category: CySecurity News – Latest Information Security and Hacking Incidents
Hackers Deploy Lookalike PyPI Platform to Lure Python Developers
The Python Package Index (PyPI) website is being used to launch sophisticated phishing campaigns targeting Python developers, highlighting the ongoing threats that open-source ecosystems face. The phishing campaign is utilising a counterfeit version of the website to target Python developers. …
Racing Ahead with AI, Companies Neglect Governance—Leading to Costly Breaches
Organizations are deploying AI at breakneck speed—so rapidly, in fact, that foundational safeguards like governance and access controls are being sidelined. The 2025 IBM Cost of a Data Breach Report, based on data from 600 breached companies, finds that…
Ridgefield Public Schools Faces 2-day Deadline After Hackers Threaten to Leak 90 GB of Stolen Data
Ridgefield Public Schools in Connecticut was hit by a ransomware attack on July 24, 2025, with the SafePay ransomware gang now threatening to release 90 GB of stolen data within two days if ransom demands aren’t met. The school…
Allianz Life Confirms Data Breach Affecting 1.4 Million Customers in North America
Allianz Life Insurance Company of North America has confirmed a significant data breach that compromised the personal information of a majority of its 1.4 million U.S. customers. The breach, discovered in mid-July, involved sensitive data including names, addresses, dates…
DevilsTongue Spyware Attacking Windows System, Linked to Saudi Arabia, Hungary
Cybersecurity experts have discovered a new infrastructure suspected to be used by spyware company Candiru to target computers via Windows malware. DevilsTongue spyware targets Windows systems The research by Recorded Future’s Insikt Group disclosed eight different operational clusters associated with…
Hackers Use 4G-Connected Raspberry Pi to Breach Bank’s ATM Network
A cybercriminal group has used a surprising method to infiltrate a bank’s internal systems, by planting a tiny Raspberry Pi computer inside the bank’s network. The attackers reportedly used the device to gain access to critical parts of the…
UK’S Online Safety Act Faces Criticism, Doesn’t Make Children Safer Online
The implementation of a new law to protect the online safety of children in the UK has caught criticism from digital rights activist groups, politicians, free-speech campaigners, tech companies, content creators, digital rights advocacy groups, and others. The Online Safety…
SafePay Ransomware Threaten Public Disclosure of 3.5 TB Worth of Ingram Micro Files
Ingram Micro, one of the world’s largest IT distributors, is facing a data leak threat from the SafePay ransomware group almost a month after the initial attack. The SafePay group has claimed to have stolen 3.5TB of data from…
Sharp Increase in Ransomware Incidents Hits Energy Sector
The cyber threat landscape is constantly evolving, and ransomware attacks have increased in both scale and sophistication, highlighting how urgent it is for enterprises to take a strategic approach to cybersecurity. A survey conducted by Zscaler in 2025 found…
Veeam Fixes Critical Remote Code Execution Bug in Backup & Replication Software
Veeam has issued new security patches to address multiple vulnerabilities in its Backup & Replication (VBR) software, including a severe remote code execution (RCE) flaw. Identified as CVE-2025-23121, this particular vulnerability was uncovered by researchers from watchTowr and CodeWhite…
Hackers Tamper Govt Portal, Pocket ₹1.4 Lakh in Apprentice Stipends
Bengaluru — A government portal designed to support apprenticeships in India has become the latest target of cybercriminals. Hackers reportedly accessed the site and changed the bank details of several registered candidates, redirecting their stipend payments into unauthorized accounts.…
St. Paul Extends State of Emergency After Devastating Cyberattack
August 5, 2025 | St. Paul, Minnesota The City of St. Paul is in the midst of one of the most disruptive cyber incidents in its history, prompting officials to extend a local state of emergency by 90 days as…
Allianz Life Data Breach Exposes Personal Information of 1.4 Million Customers
Allianz Life Insurance has disclosed a major cybersecurity breach that exposed the personal details of approximately 1.4 million individuals. The breach was detected on July 16, 2025, and the company reported the incident to the Maine Attorney General’s office…
French Defense Shipbuilder Naval Group Probes 1TB Data Breach
France’s state-owned defense firm Naval Group is investigating a major cyberattack after 1TB of allegedly sensitive data was leaked on a well-known hacking forum. The company, which designs and builds naval vessels, described the incident as an attempt at…
Understanding Opera’s Free VPN: Features, Privacy, and Limitations
Over recent years, Virtual Private Networks (VPNs) have surged in popularity as users look to bypass online censorship, secure their data, and access restricted content. Leading names like ProtonVPN, NordVPN, ExpressVPN, and Surfshark are often the go-to tools —…
Cybercriminals Exploit Unprecedented Data Exposure in 141 Million File Leak
Digital transformation has transformed cybersecurity from a technical safeguard to a strategic imperative for business continuity, consumer trust, and national security, particularlyin an era wofrapid digital transformation With the rise of digital infrastructure and the advent of data as the…
Mozilla Alerts Extension Developers About Phishing Scam on Add-ons Platform
Mozilla has issued a warning to developers who publish browser extensions on its official platform, addons.mozilla.org (AMO), about a new phishing campaign targeting their accounts. The attackers are reportedly sending emails that falsely claim to be from the Mozilla…
Open-source Autoswagger Exposes API Authorisation Flaws
Autoswagger is a free, open-source tool designed to scan OpenAPI-documented APIs for broken authorization vulnerabilities. These vulnerabilities remain common, even among organizations with strong security postures, and pose a significant risk as they can be exploited easily. Key features…
Lock Down Your USB Drive: 5 Powerful Ways to Keep Your Data Safe
In a world where we lock our phones, PCs, and even smart fridges, it’s surprising how many people still overlook the security of something as portable and vulnerable as a USB drive. A lost thumbstick can quickly turn into…