A critical vulnerability in the recently updated Apple macOS has been weaponized by threat actors to mine Monero cryptocurrency, according to the…
Tag: CySecurity News – Latest Information Security and Hacking Incidents
Evooo1Bot Hijacks Linux Routers for Proxying, Credential Theft and DDoS Attacks
A new Linux botnet named Evooo1Bot is turning internet-facing routers and other gateway devices into SOCKS5 traffic relay nodes, giving attackers a way to…
Trezor Data Breach Exposes Personal Information of Nearly 14,000 Customers
Hardware cryptocurrency wallet maker Trezor has disclosed a data breach involving the personal information of nearly 14,000 customers, after an…
Encrypted AI Reasoning Flaw Exposed Secrets Across Major LLM APIs
A newly reported security weakness in the systems used by OpenAI, Anthropic and Google to preserve hidden AI reasoning between API calls has allowed…
Meccha Chameleon Players Urged to Update Game After Malicious Workshop Maps Infect PCs
Players of indie game Meccha Chameleon have been advised to install the latest update and avoid the game’s original Discord community after malicious…
Anthropic AI Discovery Pushes HAWK Out of US Post-Quantum Cryptography Race
A post-quantum cryptography algorithm that was being evaluated for possible adoption as a US standard has been withdrawn after Anthropic’s AI security…
GrapheneOS Foundation Defends Privacy Features Amid US Case Involving User
The US Department of Justice’s recent case against GrapheneOS user Sam Tunick has renewed discussions about mobile privacy, digital security and the…
AI-Assisted Bug Discovery Still Depends on Human Validation
With artificial intelligence, security researchers can identify software vulnerabilities much faster by scanning code, generating payloads, mapping attack…
Apple Warns of Supply Crunch as Demand Surges
Apple’s issue is a supply crunch: strong demand for iPhones and Macs is outpacing the company’s ability to secure key components, especially advanced…
Iran-Linked Hackers Suspected in Cyberattacks Targeting Minnesota Water Systems
Several water systems in Minnesota were under attack from cyber intruders over the weekend. Investigators believe the attacks were launched from an…
Russian Hackers Use Exchange Zero-Day in Email Attacks
Russia-aligned cyberespionage group Laundry Bear, also tracked as Void Blizzard and TA488, is exploiting a Microsoft Exchange Outlook Web Access (OWA)…
Trump Memo Signals New U.S. Push to Disrupt Foreign Cybercrime Groups
The memo from the White House signed by President Donald Trump will increase the role of cybersecurity companies in fighting foreign criminal…
GeoServer Zero Day Being Probed While No Patch Available
A newly found GeoServer zero-day is already receiving active exploitation efforts, while there is no patch ready yet. Firms using the open-source…
Ransomware Attacks Fall as Business Defenses Improve
Ransomware has long been one of the biggest cyber threats to businesses, often forcing victims into costly downtime and data loss. Recently, analysts have…
New Ransomware Targets AI Model Weights but Fails to Collect Ransom
An updated ransomware campaign is targeting an important but often overlooked asset in artificial intelligence environments: trained AI models and their…
AnMed Health Ransomware Attack Highlights Growing Patient Safety Risks in Healthcare
AnMed Health is the latest healthcare organization to be disrupted by a ransomware-related cybersecurity incident after having to cancel procedures and…
OpenAI Discloses AI Agent Breached Hugging Face and Accessed Four Other Services
OpenAI has disclosed that an autonomous AI agent involved in an internal cybersecurity evaluation accessed four accounts across four publicly available…
Lazarus Abuses Zero-Day Exploit to Install a New Backdoor
Lazarus does a zero-day exploitt The North Korean hacking group called Lazarus has been linked to the zero-day compromise of a recently patched…
Hackers Steal 607,000 Records in Cyber-Attack on UK Department for Education
Hackers have stolen around 607,000 records from England’s Department for Education (DfE) after compromising systems used to handle enquiries and…
New York School District Pauses AI Robot Teacher Plan After Privacy and Safety Concerns
A rural school district in upstate New York decided to cancel the plan to bring in a robot after teachers, state officials, and community members raised…