Ukrainian cyber police, in collaboration with U.S. law enforcement agencies, have identified an 18-year-old resident of Odesa who is suspected of operating an infostealer malware campaign that targeted customers of a California-based online retailer. Authorities allege that between 2024…
Tag: CySecurity News – Latest Information Security and Hacking Incidents
GitHub Repo Breach Traced to TanStack NPM Supply-Chain Attack
GitHub has confirmed that a breach of its internal repositories is directly linked to the TanStack npm supply-chain attack, demonstrating how a single compromised developer tool can cascade into a major security incident. The company stated that the intrusion…
UK Post Office Awards £410 Million Contracts to Replace Horizon System After Long-Running Scandal
Now beginning its largest tech overhaul yet, the UK Post Office handed out £410 million in contracts to Accenture and OneView Commerce. This shift follows years of public scrutiny tied to the flawed Horizon system. Known for fueling a…
WordPress Plugin Security Failure Opens Door to Payment Data Theft
Cybercriminals have been actively exploiting a critical flaw in the widely deployed Funnel Builder plugin in order to harvest customer payment information during online transactions in a newly uncovered attack campaign, once again highlighting the security risks that face…
Researchers Show How ChatGPT Summaries Could Be Used for Phishing Attacks
Researchers have identified a technique that could allow malicious content embedded within a web page to appear inside ChatGPT responses, creating an opportunity for phishing, tracking, and social-engineering attacks through a platform users generally regard as trustworthy. The attack…
Enterprise Cyberattacks Accelerate as AI Speeds Threats but Human Errors Remain the Biggest Security Risk
Cyberattacks are hitting businesses more often, fueled by automation and AI that accelerate the exploitation of vulnerabilities. Yet despite increasingly sophisticated techniques, experts say human mistakes, weak passwords, and poor access controls remain the biggest causes of successful breaches.…
AI Is Ruining Bug Bounty Programs with Flood of Fake Reports
For years, tech giants like Google, OpenAI, and T-Mobile have relied on bug bounty programs as a cornerstone of their cybersecurity strategy. These programs pay independent hackers millions of dollars annually to find and report software flaws before cybercriminals…
Microsoft Dismantles Malware-Signing Network Exploiting Azure Artifact Signing Service
Microsoft has announced the disruption of a large-scale malware-signing-as-a-service (MSaaS) operation that exploited its Azure Artifact Signing platform to generate fraudulent code-signing certificates. The operation enabled cybercriminals and ransomware groups to disguise malicious software as trusted applications, increasing the…
Fake APK Apps Fuel 190% Rise in Digital Fraud Across Karnataka
Cybercrime is rapidly changing in Karnataka. Threat actors are increasingly shifting their focus from traditional phishing and investment scams to highly sophisticated APK-based attacks designed specifically for Android platforms. It has been reported by security experts and law enforcement…
Microsoft AI Chief Says White-Collar Jobs Could Face AI Automation Within 18 Months
For decades, university degrees in business, law, finance, and management were widely viewed as reliable pathways to stable office careers and long-term financial security. Throughout much of the late 20th century, white-collar professions became deeply associated with economic mobility,…
Iran-Linked Hackers Targeted US Fuel Tank Systems Through Exposed ATG Networks
A cyber incident linked to suspected Iranian hackers targeted U.S. gas station fuel monitoring systems, exposing weaknesses in critical infrastructure. Internet-connected ATG systems lacking password protection reportedly allowed attackers to gain access without stolen credentials. Though designed to track…
AI Vigilante Sting Catches Alleged Paedophile Ex-Teacher in France
A retired French physical education teacher has been placed in custody after an online sting operation exposed what investigators say was a serious attempt to solicit a minor. The case has drawn wide attention because the “girl” he was…
Africa’s Digital Boom Makes It a Prime Target for Hackers
Africa’s digital boom is reshaping how people bank, work, study, and access public services, but that same progress is creating fresh openings for cybercriminals. As more governments and businesses move services online, attackers are finding more valuable systems to…
Yarbo Robotic Lawnmower Flaw Exposed Thousands of Devices With Shared Passwords
A single password opened thousands of Yarbo’s robot mowers worldwide, leaving owners in over thirty nations vulnerable without knowing it. While testing how these smart devices manage login requests, analyst Andreas Makris spotted the weak point – simple as…
West Pharmaceutical Services Reports Data Breach and Encrypted Systems
West Pharmaceutical Services has confirmed that it suffered a cybersecurity incident that resulted in both data theft and the encryption of parts of its internal network, making it the latest major manufacturing and healthcare-related company to face operational disruption…
Hidden 4GB AI Model Found Downloading Through Google Chrome
In what appeared to be a routine background update within Google Chrome, privacy researchers have raised concerns over a potentially problematic update after reports revealed that the browser may have silently downloaded a nearly 4GB artificial intelligence model onto…
Meta’s New Encrypted AI Chat Strategy Faces Trust Challenges
A significant structural change in consumer chatbot privacy has taken place over the past two years since Meta launched Incognito Chat with Meta AI on 13 May 2026. As a result of this announcement, the architecture Christakis has been…
Your Car Is Spying on You—and It’s About to Get Worse
Cars used to be simple machines that carried people from one place to another. Today, they are rolling computers packed with sensors, microphones, cameras, GPS receivers, and internet connections. That shift has turned the modern vehicle into a powerful…
OpenAI Confirms Employee Devices Hit in TanStack Supply Chain Malware Attack
A recent software supply-chain breach impacted several companies after hackers targeted widely used open-source tools. Among those affected was OpenAI, where compromised employee devices provided limited access to internal systems. At the center of the attack stood TanStack, a…
BWH Hotels Confirms Cyberattack Exposed Customer Reservation Information
BWH Hotels, the parent company of hotel brands including Best Western Hotels & Resorts, WorldHotels, and SureStay Hotels, has disclosed a cybersecurity incident that exposed sensitive guest reservation data. The company recently began notifying affected individuals after detecting unauthorized…