Amazon has announced that its threat intelligence division has intervened in ongoing cyber operations attributed to hackers associated with Russia’s foreign military intelligence service, the GRU. The activity targeted organizations using Amazon’s cloud infrastructure, with attackers attempting to gain…
Category: CySecurity News – Latest Information Security and Hacking Incidents
Hypervisor Ransomware Attacks Surge as Threat Actors Shift Focus to Virtual Infrastructure
Hypervisors have emerged as a highly important, yet insecure, component in modern infrastructural networks, and attackers have understood this to expand the reach of their ransomware attacks. It has been observed by the security community that the modes of…
UK Report Finds Rising Reliance on AI for Emotional Wellbeing
Artificial intelligence (AI) is being used to make more accurate predictions about the future and its effects on these predictions are being documented in new research from the United Kingdom’s AI Security Institute. These findings reveal an extraordinary evolution…
Microsoft Users Warned as Hackers Use Typosquatting to Steal Login Credentials
Microsoft account holders are being urged to stay vigilant as cybercriminals increasingly target them through a deceptive tactic known as typosquatting. Attackers are registering look-alike websites and email addresses that closely resemble legitimate Microsoft domains, with the goal of…
Cellik Android Spyware Exploits Play Store Trust to Steal Data
Recently found in the Android platform, remote access trojan named Cellik has been recognized as a serious mobile threat, using the Google Play integration feature to mask itself within legitimate applications to evade detection by security solutions. Cellik is…
FCC Tightens Rules on Foreign-Made Drones to Address U.S. Security Risks
The U.S. Federal Communications Commission has introduced new restrictions targeting drones and essential drone-related equipment manufactured outside the United States, citing concerns that such technology could pose serious national security and public safety risks. Under this decision, the FCC has…
700Credit Data Breach Exposes Personal Information of Over 5.6 Million Consumers
A massive breach at the credit reporting firm 700Credit has led to the leakage of private details of over 5.6 million people, throwing a new set of concerns on the risk of third-party security in the financial services value…
GhostPairing Attack Puts Millions of WhatsApp Users at Risk
An ongoing campaign that aims to seize control of WhatsApp accounts by manipulating WhatsApp’s own multi-device architecture has been revealed by cybersecurity experts in the wake of an ongoing, highly targeted attack designed to illustrate the increasing complexity of…
Askul Confirms RansomHouse Ransomware Breach Exposed 740,000 Records
Japanese e-commerce giant Askul Corporation confirmed that a ransomware attack carried out by the RansomHouse group led to the theft of about 740,000 customer records in October 2025. Askul, which is a major supplier of office supplies and logistics…
Inside the Hidden Market Where Your ChatGPT and Gemini Chats Are Sold for Profit
Millions of users may have unknowingly exposed their most private conversations with AI tools after cybersecurity researchers uncovered a network of browser extensions quietly harvesting and selling chat data.Here’s a reminder many people forget: an AI assistant is not…
Webrat Malware Targets Students and Junior Security Researchers Through Fake Exploits
In early 2025, security researchers uncovered a new malware family dubbed Webrat, which at that time was predominantly targeting ordinary users through fake distribution methods. The first propagation involved masking malware as cheats for online games-like Rust, Counter-Strike, and…
Telegram-Based Crypto Scam Networks Are Now Larger Than Any Dark Web Market in History
For years, illegal online marketplaces were closely linked to the dark web. These platforms relied on privacy-focused browsers and early cryptocurrencies to sell drugs, weapons, stolen data, and hacking tools while remaining hidden from authorities. At the time, their…
Google and Apple Deploy Rapid Security Fixes Following Zero-Day Attacks
It has been revealed that a set of advanced zero-day vulnerabilities, utilizing which a highly targeted hacking campaign was targeting private individuals, has been leveraged by Apple as an emergency security patch. Several weeks ago, in an official security…
NIST and MITRE Launch $20 Million AI Research Centers to Protect U.S. Manufacturing and Critical Infrastructure
The National Institute of Standards and Technology (NIST) has announced a new partnership with The MITRE Corporation to establish two artificial intelligence–focused research centers under a $20 million initiative. The effort will explore advanced AI applications, with a strong…
PayPal Subscriptions Exploited in Sophisticated Email Scam
Hackers have found a clever way to misuse PayPal’s legitimate email system to send authentic looking phishing scams that are able to bypass security filters and look genuine to the end users. Over the last few weeks, users are complaining…
Shinhan Card Faces Regulatory Review Over Internal Data Sharing Incident
Shinhan Card, one of South Korea’s largest credit card companies, has disclosed a data leak involving the personal information of approximately 192,000 merchants. The company confirmed the incident on Tuesday and said it has notified the Personal Information Protection…
US Justice Department Seizes Web Domain Linked to Large-Scale Bank Account Takeover Fraud
The U.S. Justice Department (DoJ) on Monday revealed that it has taken control of a web domain and its associated database that were allegedly used to support a criminal operation aimed at defrauding Americans through bank account takeover fraud.…
Cookies Explained: Accept or Reject for Online Privacy
Online cookies sit at the centre of a trade-off between convenience and privacy, and those “accept all” or “reject all” pop-ups are how websites ask for your permission to track and personalise your experience.Understanding what each option means helps…
Jaguar Land Rover Confirms Employee Data Theft After August 2025 Cyberattack
British luxury carmaker Jaguar Land Rover has confirmed that a cyberattack uncovered in August 2025 led to the theft of payroll and personal data of thousands of current and former employees. After this disclosure, the company asked the affected…
TSA Cautions Travelers on Public Wi-Fi Security Threats
There are growing concerns about digital safety as global travel surges during one of the busiest mobility windows of the year, and airport advisory boards are increasingly focusing on digital safety. As a result of the renewed warning from…