Two malicious Chrome extensions named Phantom Shuttle have been discovered to have acted as proxies and network test tools while stealing internet browsing and private information from people’s browsers without their knowledge. According to security researchers from Socket, these…
Category: CySecurity News – Latest Information Security and Hacking Incidents
Spotify Data Scraping Incident Raises Questions on Copyright, Security, and Digital Preservation
A large collection of data reportedly taken from Spotify has surfaced online, drawing attention to serious issues around copyright protection, digital security, and large-scale data misuse. The dataset, which is estimated to be close to 300 terabytes in size,…
Government Flags WhatsApp Account Bans as Indian Number Misuse Raises Cyber Fraud Concerns
The Indian government has expressed concern over WhatsApp banning an average of nearly 9.8 million Indian accounts every month until October, amid fears that Indian mobile numbers are being widely misused for scams and cybercrime. Officials familiar with the…
FIR in Bengaluru Targets Social Media Accounts Spreading Obscene URLs
The Bengaluru Central Cyber Crime unit has taken legal steps to investigate allegations that explicit content was being distributed across the mainstream social media platforms in coordinated fashion, showing the ever-evolving challenges in the transformation of police work in…
High Severity Flaw In Open WebUI Can Leak User Conversations and Data
A high-severity security bug impacting Open WebUI has been found by experts. It may expose users to account takeover (ATO) and, in some incidents, cause full server compromise. Talking about WebUI, Cato researchers said, “When a platform of this size…
Amazon Busts DPRK Hacker on Tiny Typing Delay
Amazon recently uncovered a North Korean IT worker infiltrating its corporate network by tracking a tiny 110ms delay in keystrokes, highlighting a growing threat in remote hiring and cybersecurity. The anomaly, revealed by Amazon’s Chief Security Officer Stephen Schmidt,…
Spotify Flags Unauthorised Access to Music Catalogue
Spotify reported that a third party had scraped parts of its music catalogue after a pirate activist group claimed it had released metadata and audio files linked to hundreds of millions of tracks. The streaming company said an investigation…
How Gender Politics Are Reshaping Data Privacy and Personal Information
The contemporary legal and administrative actions in the United States are revamping how personal data is recorded, shared, and accessed by government systems. For transgender and gender diverse individuals, these changes carry heightened risks, as identity records and healthcare information…
Eurostar’s AI Chatbot Exposed to Security Flaws, Experts Warn of Growing Cyber Risks
Eurostar’s newly launched AI-driven customer support chatbot has come under scrutiny after cybersecurity specialists identified several vulnerabilities that could have exposed the system to serious risks. Security researchers from Pen Test Partners found that the chatbot only validated the…
University of Phoenix Data Breach Exposes Records of Nearly 3.5 Million Individuals
The University of Phoenix has confirmed a major cybersecurity incident that exposed the financial and personal information of nearly 3.5 million current and former students, employees, faculty members, and suppliers. The breach is believed to be linked to the…
Romanian Water Authority Hit by BitLocker Ransomware, 1,000 Systems Disrupted
Romanian Waters, the country’s national water management authority, was targeted by a significant ransomware attack over the weekend, affecting approximately 1,000 computer systems across its headquarters and 10 of its 11 regional offices. The breach disrupted servers running geographic…
New US Proposal Allows Users to Sue AI Companies Over Unauthorised Data Use
US AI developers would be subject to data privacy obligations applicable in federal court under a wide legislative proposal disclosed recently by the US senate Marsha Blackburn, R-Tenn. About the proposal Beside this, the proposal will create a federal right…
3.5 Million Students Impacted in US College Data Breach
Several significant cyber security breaches have prompted a growing data security crisis for one of the largest private higher education institutions in the United States. University of Phoenix, an established for-profit university located in Phoenix, Arizona, has suffered an extensive…
San Francisco Power Outage Brings Waymo Robotaxi Services to a Halt
A large power outage across San Francisco during the weekend disrupted daily life in the city and temporarily halted the operations of Waymo’s self-driving taxi service. The outage occurred on Saturday afternoon after a fire caused serious damage at…
Chinese Robotaxis May Launch UK Trials in 2026 as Uber and Lyft Partner With Baidu
Chinese autonomous taxis could begin operating on UK roads by 2026 after Uber and Lyft announced plans to partner with Chinese technology company Baidu to trial driverless vehicles in London. Both companies are seeking government approval to test Baidu’s…
India Steps Up AI Adoption Across Governance and Public Services
India is making bold moves to embed artificial intelligence (AI) in governance, with ministries utilizing AI instruments to deliver better public services and boost operational efficiency. From weather prediction and disease diagnosis to automated court document translation and meeting transcription, AI…
India’s Fintech Will Focus More on AI & Compliance in 2026
India’s Fintech industry enters the new year 2026 with a new set of goals. The industry focused on rapid expansion through digital payments and aggressive customer acquisition in the beginning, but the sector is now focusing more towards sustainable growth,…
Nissan Says Customer Data Exposed After Breach at Red Hat Systems
Nissan Motor Co Ltd said that personal information of thousands of customers was exposed following a cyber breach at Red Hat, the US based software company it had engaged to develop customer management systems. The Japanese automaker said it…
Malicious NPM Package Masquerading as WhatsApp Web API Steals Messages and Account Access
A harmful package hosted on the Node Package Manager (NPM) registry has been found impersonating a genuine WhatsApp Web API library, with the intent to spy on user activity. Disguised as a legitimate developer tool, the package is designed…
Ransomware Profits Shrink Forcing Criminal Gangs to Innovate
Ransomware networks are increasingly using unconventional recruitment channels to recruit new operators. Using blatant job-style announcements online, these networks are enlisting young, inexperienced operators with all sorts of job experience in order to increase their payouts. There is a…