Ukraine’s Computer Emergency Response Team (CERT-UA) has issued an advisory after detecting that Russia’s advanced persistent threat (APT) group Sandworm…
Category: CySecurity News – Latest Information Security and Hacking Incidents
Vatican ‘Click to Pray’ App Security Flaw Exposed Data of 700,000 Users
Approximately 700,000 personal data of Vatican users were reportedly exposed due to a critical security vulnerability in Click to Pray, causing concerns…
Phishing and Compromised Identities Replace Software Exploits as Leading Ransomware Entry Ooint, Sophos Reports
Phishing campaigns, malicious emails and compromised credentials have overtaken software vulnerability exploitation as the leading entry points for ransomware attacks, according to Sophos' State of Ransomware 2026 report, signalling that threat actors are placing greater focus on stealing identities than…
US Treasury Sanctions VPN Provider Linked to Ransomware Operations
The United States Department of the Treasury has taken unprecedented steps by sanctioning a virtual private network (VPN) service provider and its administrator for the first time ever. The VPN was used by ransomware groups to disguise their digital…
GitHub Fake Repos Spread Malware in New Infostealer Campaign
Cybersecurity researchers have uncovered a large-scale campaign in which hundreds of GitHub repositories were made to look like legitimate software projects while actually distributing malware. According to the report, the attackers created 292 fake repositories that impersonated security tools, developer…
Browser Memory Becomes New Target in JavaScript Malware Campaign
Security researchers have discovered a large-scale malvertising campaign that uses fake cryptocurrency and trading websites to assemble malware inside the web browser of the victim, making it increasingly difficult to detect using traditional security tools. A security firm named Confiant…
Ostium Confirms $23.75 Million Vault Exploit After Off-Chain Price Feed Compromise
Ostium, a decentralized trading platform built on the Arbitrum blockchain, has confirmed that hackers stole $23.75 million from its liquidity provider vault after compromising the platform’s off-chain price feed infrastructure.In an update shared by the company, Ostium explained that…
Steam Forum Scam Uses ClickFix Technique to Infect Gamers With XMRig Cryptominer
Cybercriminals are targeting Steam users through fraudulent troubleshooting posts that exploit the increasingly common ClickFix social engineering technique, tricking gamers into manually executing malicious PowerShell commands that ultimately install cryptocurrency mining malware on Windows systems. Rather than relying on…
AI Is Fueling a New Wave of Cybercrime
Cybercriminals are increasingly turning to artificial intelligence, and the biggest barriers that once slowed adoption are rapidly disappearing. According to a recent Axios report, restricted access to models, high costs, and limited incentive to change old hacking methods are…
OpenAI Explores a Home Device to Make ChatGPT Part of Daily Life
It has been reported that OpenAI is developing the first consumer hardware product, an AI speaker with no screen to turn ChatGPT into a constantly available household companion. Through the use of advanced artificial intelligence capabilities, the device is…
US Indicts Three Russian Nationals Over Bulletproof Hosting Network Linked to Global Cybercrime
The EU sanctioned nine Russian citizens and four entities for engaging in cyber-espionage campaigns and attacks against the EU, member states, Ukraine, and other countries. The sanctions were imposed by the Council of the European Union and coordinated with…
Ghost Font Exposes a Blind Spot in AI Vision by Hiding Text in Motion-Based Optical Illusions
Artificial intelligence has made significant progress in reading documents, recognizing handwritten text and interpreting low-quality images. However, a new experimental typography project called Ghost Font is revealing an unexpected limitation in how many AI vision systems process visual information.Created by…
Google Fixes Dialogflow CX Flaw That Could Have Exposed AI Chatbot Conversations
Google has patched a security vulnerability in its Dialogflow CX platform that could have allowed attackers to steal sensitive conversations from AI-powered chatbots and deploy phishing attacks by abusing a permissions loophole.The flaw, dubbed "Rogue Agent" by researchers at…
Russian Cyber Spies Exploited Critical Zimbra Flaw to Access Emails and 2FA Codes
Cyber espionage groups backed by the Russian government exploited a previously unknown vulnerability in the Zimbra Collaboration Suite (ZCS) in order to steal emails, browser credentials, and two-factor authentication (2FA) recovery codes from government and commercial organizations throughout the…
Boko Haram Used AI Chatbots to Support Attacks, Cambridge Study Finds
Boko Haram has reportedly exploited mainstream AI chatbots to support terror operations, according to a Cambridge University study cited by the South China Morning Post. The research suggests the group used both US and Chinese AI tools for bomb-making,…
US Sanctions VPN Provider and Malware Service Operator Accused of Supporting Ransomware Campaigns
The US Department of the Treasury's Office of Foreign Assets Control (OFAC) has imposed sanctions on a virtual private network (VPN) provider, its administrator and a Belarusian malware service operator, accusing them of supplying infrastructure and tools that helped…
Claude Mythos Just Caught the Attention of Canada’s Banking Regulator
Canada’s federal banking regulator has privately warned financial institutions that advances in frontier artificial intelligence are shrinking the time available to detect and contain software vulnerabilities, according to an internal email that specifically identified Anthropic’s Claude Mythos, an uncommon…
Digital Banking’s Expanding Ecosystem Creates New Cybersecurity Challenges, Report Warns
The rapid development of digital banking services and financial technologies is resulting in an unprecedented cybersecurity paradigm, which the current security posture is not equipped to handle,” says the report titled ‘Digital Threat Report 2025-26’, complied by the Ministry…
OpenAI Discloses AI-Driven Breach During Cybersecurity Testing
An internal cybersecurity evaluation to evaluate Hugging Face’s offensive cyber capabilities allowed two of the company’s advanced AI models to hack into the organization’s infrastructure autonomously. These models include GPT-5.6 Sol and a more advanced pre-release model. One of the…
YouTube Faces Backlash Over Eating Disorder Recommendations
YouTube is still facing criticism over the way its recommendation system serves harmful eating-disorder content to teenagers, despite stronger online safety rules introduced in the UK. New research cited by the BBC says the platform continues to surface videos…