QR codes are already ubiquitous: from restaurant menus to public transportation schedules, everyone wants you to scan theirs. This normalisation of scanning random QR codes is being exploited, resulting in a new cybersecurity threat known as Quishing. What is…
Category: CySecurity News – Latest Information Security and Hacking Incidents
Amazon Faces Lawsuit Over Alleged Secret Collection and Sale of User Location Data
A new class action lawsuit accuses Amazon of secretly gathering and monetizing location data from millions of California residents without their consent. The legal complaint, filed in a U.S. District Court, alleges that Amazon used its Amazon Ads software…
AI and Quantum Computing Revive Search Efforts for Missing Malaysia Airlines Flight MH370
A decade after the mysterious disappearance of Malaysia Airlines Flight MH370, advancements in technology are breathing new life into the search for answers. Despite extensive global investigations, the aircraft’s exact whereabouts remain unknown. However, emerging tools like artificial intelligence…
Hackers Exploit US Government agency’s Cloud System for Cryptojacking
A recent cybersecurity breach has exposed vulnerabilities in government agencies, as hackers infiltrated the U.S. Agency for International Development (USAID) to mine cryptocurrency. The attackers secretly exploited the agency’s Microsoft Azure cloud resources, leading to $500,000 in unauthorized service…
WhatsApp Uncovers Zero-Click Spyware Attack Linked to Israeli Firm Paragon
WhatsApp has uncovered a stealthy spyware attack attributed to Israeli firm Paragon, targeting nearly 100 users worldwide, including journalists and civil society members. This zero-click attack required no user interaction, making it particularly dangerous as it could infiltrate devices…
Gmail Confirms AI Hack: 2.5 Billion Users Warned of Phishing Scam
Gmail has issued a warning to its 2.5 billion users about a sophisticated AI-powered phishing attack. Fraudsters are using caller IDs that seem to originate from Google support, convincing users that their accounts have been compromised. Under the…
Researchers at University of Crete Developes Uncrackable Optical Encryption
An optical encryption technique developed by researchers at the Foundation for Research and Technology Hellas (FORTH) and the University of Crete in Greece is claimed to provide an exceptionally high level of security. According to Optica, the system decodes…
EU Bans AI Systems Deemed ‘Unacceptable Risk’
As outlined in the European Union’s (EU) Artificial Intelligence Act (AI Act), which was first presented in 2023, the AI Act establishes a common regulatory and legal framework for the development and application of artificial intelligence. In April 2021,…
WhatsApp Says Spyware Company Paragon Hacked 90 Users
Attempts to censor opposition voices are not new. Since the advent of new media, few Governments and nations have used spyware to keep tabs on the public, and sometimes target individuals that the government considers a threat. All this is…
Italy Takes Action Against DeepSeek AI Over User Data Risks
Italy’s data protection authority, Garante, has ordered Chinese AI chatbot DeepSeek to halt its operations in the country. The decision comes after the company failed to provide clear answers about how it collects and handles user data. Authorities fear…
DoJ Cracks Down Pakistan Linked Dark Web Forums Impacting 17 Million
The US Department of Justice (DoJ) joined forces with international law enforcement to shut down a few Dark Web cybercrime forums, two operations that impacted underground markets associated with the attacks on millions of victims worldwide. Pakistani dark web forum…
DeepSeek’s Data Use Raises Regulatory Concerns
There have been numerous scandals surrounding this artificial intelligence company which had astonished the world by seemingly rivaling the successful chatbot ChatGPT at a fraction of the cost. However, now, regulators and privacy advocates have raised questions about the…
Here’s The Ultimate Guide to Virtual Credit Card in Safeguarding Online Privacy
Virtual credit cards are digital versions of physical credit cards. They generate a unique credit card number that you can use instead of your physical card number, avoiding the merchant from storing your credit card data and making your…
Emerging Cybersecurity Threats in 2025: Shadow AI, Deepfakes, and Open-Source Risks
Cybersecurity continues to be a growing concern as organizations worldwide face an increasing number of sophisticated attacks. In early 2024, businesses encountered an alarming 1,308 cyberattacks per week—a sharp 28% rise from the previous year. This surge highlights the…
Cybercriminals Entice Insiders with Ransomware Recruitment Ads
Cybercriminals are adopting a new strategy in their ransomware demands—embedding advertisements to recruit insiders willing to leak company data. Threat intelligence researchers at GroupSense recently shared their findings with Dark Reading, highlighting this emerging tactic. According to their analysis,…
Experts Find Hidden Backdoors Inside Chinese Software Stealing Patient Data
Cybersecurity & Infrastructure Security Agency (CISA) in the US rolled out an investigation report concerning three firmware variants used in Contec CMS800, a patient monitoring system used in healthcare facilities and hospitals. CIS finds hidden backdoor in Chinese software Experts…
Ransomware Attack Disrupts New York Blood Center Operations Amid Critical Shortage
The New York Blood Center (NYBC), a major provider of blood products and transfusion services in the U.S., suffered a ransomware attack on Sunday, leading to operational disruptions and the cancellation of some donor appointments. The cyberattack comes at…
New ‘Browser Syncjacking’ Attack Exploits Chrome Extensions for Full Device Takeover
‘Browser Syncjacking,’ which allows threat actors to hijack Google profiles, compromise browsers, and eventually gain full control over a victim’s device—all through a seemingly harmless Chrome extension. This stealthy multi-stage attack requires minimal permissions and almost no user interaction…
Community Health Centre Data Breach Impacts Over 1 Million Patients
Over a million people have been notified of a recent data breach by Community Health Centre, a nonprofit healthcare organisation based in Middletown, Connecticut. On January 2, 2025, unauthorised activity was detected in its computer systems, and external cybersecurity…
Two-Month Cyber Breach at Mizuno USA Under Investigation
Unauthorized access to Mizuno USA’s network has resulted in a compromise of sensitive customer information, which has caused Mizuno USA to notify its customers about the breach. In a letter to affected individuals, the sports gear manufacturer shared information…