Category: CySecurity News – Latest Information Security and Hacking Incidents

Retailer Secures Website After Customer Data Leak Risk Identified

  Express has quietly fixed a security flaw that permitted unauthorized access to customer order data following a significant lapse in web application security. This vulnerability exposed sensitive information ranging from customer names, emails, telephone numbers, shipping details, and partial…

Bank of America Bets Big on Risky Anthropic AI

  Bank of America is aggressively expanding its use of Anthropic’s advanced AI technology, even as U.S. regulators issue stark cybersecurity warnings. The bank’s commitment highlights a broader trend where nearly 70% of financial institutions integrate AI into operations, prioritizing…

Fake CAPTCHA Lures Power IRSF Fraud and Crypto Theft Campaigns

  Research by Infoblox reveals a new fraud operation that combines routine web security practices with telecom billing abuse, resulting in unauthorized mobile activity by using counterfeit CAPTCHA interfaces.  In this scheme, familiar human verification prompts are repurposed as covert…

PhantomCore Exploits TrueConf Flaws to Breach Russian Networks

  A pro-Ukrainian hacktivist group known as PhantomCore has been exploiting vulnerabilities in TrueConf video conferencing software to infiltrate Russian networks since September 2025. According to a Positive Technologies report, the attackers chained three undisclosed flaws in TrueConf Server, allowing…

The Shift from Cyber Defense to Recovery-Driven Security

  There has been a structural recalibration of cybersecurity strategies as organizations recognize that breaches impact operations, finances, and reputation in ways that extend far beyond the moment of intrusion.  Incidents that once remained within the domain of IT are…

UAE Businesses Warned of Escalating AI‑Powered Cyber Threats

  UAE businesses are being urgently warned about a sharp rise in AI‑powered cyber threats that can compromise systems within hours, and sometimes even minutes, if organisations remain unprepared. Cybercriminals are increasingly using artificial intelligence to craft highly realistic phishing…

AI-Driven Hack Breach Hits Government Agencies

  A lone attacker reportedly used Claude and GPT-4.1 to breach nine Mexican government agencies, exposing data tied to 195 million citizens and showing how generative AI can accelerate cybercrime. The incident, which ran from December 2025 to February 2026,…