Researchers have discovered a zero-day vulnerability in Gogs, the widely used self-hosted Git repository management platform, that may allow authenticated users to escalate their privileges on vulnerable servers by leveraging this vulnerability to execute remote code. In addition to…
Tag: CySecurity News – Latest Information Security and Hacking Incidents
WhatsApp to Roll Out Username Feature, No Mobile Number Required
WhatsApp will launch a new feature where users can opt for usernames and connect with others without putting mobile numbers. The feature is similar to the famous messaging app Telegram and also Instagram. The new update will allow users to…
Signal and Other Firms Oppose Canada’s Proposed Surveillance Law
A developing number of technology companies are raising concerns over Canada’s proposed lawful access legislation, arguing that some provisions could force them to choose between complying with government requirements and maintaining the privacy standards promised to users. The debate…
Fraudsters Exploit Hotel Reservation Records to Deceive Travelers
For years, phishing campaigns have relied on urgency, deception, and impersonation to lure victims into surrendering sensitive information. A newly observed threat, however, demonstrates how cybercriminals are increasingly enhancing those tactics with stolen or exposed real-world data. Security researchers…
Deno Releases Open-Source Firewall to Limit AI Agent Access to Sensitive Data
Deno has introduced an open-source security framework called Claw Patrol, a tool designed to help organizations control how AI agents interact with databases, business applications, cloud services, and other external systems. The release comes as companies increasingly deploy AI agents…
School Buses Could Become Surveillance Vehicles for Government in The US
In the US, school buses may soon become surveillance vehicles, according to 404 media’s report. A review of leaked documents revealed plans to deploy buses with automatic license plate readers (ALPR). The data will be allegedly given to government agencies.…
AI Era Ignites Bug-Hunting Arms Race as Exploits Accelerate Faster Than Patches
The AI era has triggered a new cybersecurity arms race in which attackers and defenders are both using machine learning to find and exploit software vulnerabilities faster than ever. According to security experts, attackers are ramping up AI-powered exploit…
Americans Back Surveillance Pricing Ban Amid Growing Privacy and Consumer Cost Concerns
Ahead of schedule, more people in the U.S. resist price tracking based on private information – details like where they shop, what they buy, or how often they spend. Because companies gather these patterns, each customer might face different…
Hackers Exploit FortiClient EMS Flaw to Deploy EKZ Credential-Stealing Malware
Cybersecurity researchers have uncovered active attacks exploiting a critical vulnerability in FortiClient Enterprise Management Server (EMS) to distribute a previously undocumented credential-stealing malware known as EKZ Infostealer. The attacks leverage CVE-2026-35616, an authentication bypass flaw in FortiClient EMS that…
MyPillow Hit by Ransomware Attack as Cyber Threats Intensify
MyPillow, a Minnesota-based bedding manufacturer founded by Mike Lindell, has been targeted by a ransomware group. This adds the company to a growing list of organizations that are currently under cyber extortion threats. As a result of the unauthorized…
Nottingham Attacks Survivors Left Out in Data Breach Inquiry as NHS Trust Apologizes
Nottingham University Hospitals NHS Trust has issued an apology after a public inquiry revealed that survivors of the Nottingham attacks were not properly considered when a major data breach investigation began. Medical director Manjeet Shehmar acknowledged that the trust’s…
Trump Mobile Data Leak Exposes Customer Information as Questions Grow Around T1 Smartphone
Following confirmation by Trump Mobile, fresh attention has turned toward the company over a breach affecting its T1 smartphone users. Sensitive data – such as contact numbers, residential locations, emails, and additional private records – appeared publicly online, sources…
FROST Attack: Websites Can Now Spy on Users Via SSDs
Websites have always tried to spy on user activity through browsing histories, mouse clicks and keystrokes, and device fingerprints. Even Yandex and Meta were caught spying on users recently. Hackers exploiting SSDs These days, hackers are exploiting SSDs to spy…
Android Spyware ‘Asin’ Uses Fake News and Utility Apps to Target Arabic-Speaking Users
Researchers at ESET have identified a previously undocumented Android spyware strain called Asin that is being distributed through fraudulent websites aimed at Arabic-speaking users. According to the security company, the activity was first observed in early 2025 and involved several…
Microsoft Adds Automated Endpoint Isolation to Strengthen Cyber Defense
Microsoft is advancing its automated cyber defence strategy with the release of Microsoft Defender for Endpoints, which is capable of isolating compromised devices as soon as malicious activity is detected. The feature was introduced as a preview and has been…
Carnival Confirms Breach Affecting Nearly 6 Million Travelers
Carnival Cruise has confirmed a significant data breach that affected nearly 6 million people, exposing a wide range of personal information after attackers gained access to part of its IT systems through social engineering. The company began notifying 5,995,277…
Hackers Use Phone Location Data to Attack US Military Personnel
Threat actors are targeting U.S. military personnel deployed in active war zones, exploiting commercially available location data. This shows how the global surveillance economy (digital targeted advertising) affects battlefield security. Location data exposing military location The US Central Command (Centcom)…
Google Employee Charged After Allegedly Using Confidential Search Data to Win $1.2 Million on Polymarket
A person working at Google stands charged with misusing private internal data to make winning predictions online – profits reportedly surpassing $1.2 million. In Manhattan, federal authorities say access to unreleased insights about what people search was leveraged improperly;…
Researchers Show How Android Notifications Could Be Used to Manipulate Google Gemini
Security researchers have disclosed a now-remediated flaw that could have allowed specially crafted notifications from common messaging and social networking applications to influence the behavior of Google Gemini on Android devices. The research was conducted by SafeBreach researcher Or…
GTA 6 Pre-Order Hype Triggers Wave of Scams and Malware Attacks on Fans
The excitement around Grand Theft Auto 6 is creating a fresh opportunity for online scammers and hackers. As users search for pre-order news, fake offers are beginning to appear across websites, social platforms, and shady download pages, all designed…