A massive breach at the credit reporting firm 700Credit has led to the leakage of private details of over 5.6 million people, throwing a new set of concerns on the risk of third-party security in the financial services value…
Tag: CySecurity News – Latest Information Security and Hacking Incidents
GhostPairing Attack Puts Millions of WhatsApp Users at Risk
An ongoing campaign that aims to seize control of WhatsApp accounts by manipulating WhatsApp’s own multi-device architecture has been revealed by cybersecurity experts in the wake of an ongoing, highly targeted attack designed to illustrate the increasing complexity of…
Askul Confirms RansomHouse Ransomware Breach Exposed 740,000 Records
Japanese e-commerce giant Askul Corporation confirmed that a ransomware attack carried out by the RansomHouse group led to the theft of about 740,000 customer records in October 2025. Askul, which is a major supplier of office supplies and logistics…
Inside the Hidden Market Where Your ChatGPT and Gemini Chats Are Sold for Profit
Millions of users may have unknowingly exposed their most private conversations with AI tools after cybersecurity researchers uncovered a network of browser extensions quietly harvesting and selling chat data.Here’s a reminder many people forget: an AI assistant is not…
Webrat Malware Targets Students and Junior Security Researchers Through Fake Exploits
In early 2025, security researchers uncovered a new malware family dubbed Webrat, which at that time was predominantly targeting ordinary users through fake distribution methods. The first propagation involved masking malware as cheats for online games-like Rust, Counter-Strike, and…
Telegram-Based Crypto Scam Networks Are Now Larger Than Any Dark Web Market in History
For years, illegal online marketplaces were closely linked to the dark web. These platforms relied on privacy-focused browsers and early cryptocurrencies to sell drugs, weapons, stolen data, and hacking tools while remaining hidden from authorities. At the time, their…
Google and Apple Deploy Rapid Security Fixes Following Zero-Day Attacks
It has been revealed that a set of advanced zero-day vulnerabilities, utilizing which a highly targeted hacking campaign was targeting private individuals, has been leveraged by Apple as an emergency security patch. Several weeks ago, in an official security…
NIST and MITRE Launch $20 Million AI Research Centers to Protect U.S. Manufacturing and Critical Infrastructure
The National Institute of Standards and Technology (NIST) has announced a new partnership with The MITRE Corporation to establish two artificial intelligence–focused research centers under a $20 million initiative. The effort will explore advanced AI applications, with a strong…
PayPal Subscriptions Exploited in Sophisticated Email Scam
Hackers have found a clever way to misuse PayPal’s legitimate email system to send authentic looking phishing scams that are able to bypass security filters and look genuine to the end users. Over the last few weeks, users are complaining…
Shinhan Card Faces Regulatory Review Over Internal Data Sharing Incident
Shinhan Card, one of South Korea’s largest credit card companies, has disclosed a data leak involving the personal information of approximately 192,000 merchants. The company confirmed the incident on Tuesday and said it has notified the Personal Information Protection…
US Justice Department Seizes Web Domain Linked to Large-Scale Bank Account Takeover Fraud
The U.S. Justice Department (DoJ) on Monday revealed that it has taken control of a web domain and its associated database that were allegedly used to support a criminal operation aimed at defrauding Americans through bank account takeover fraud.…
Cookies Explained: Accept or Reject for Online Privacy
Online cookies sit at the centre of a trade-off between convenience and privacy, and those “accept all” or “reject all” pop-ups are how websites ask for your permission to track and personalise your experience.Understanding what each option means helps…
Jaguar Land Rover Confirms Employee Data Theft After August 2025 Cyberattack
British luxury carmaker Jaguar Land Rover has confirmed that a cyberattack uncovered in August 2025 led to the theft of payroll and personal data of thousands of current and former employees. After this disclosure, the company asked the affected…
TSA Cautions Travelers on Public Wi-Fi Security Threats
There are growing concerns about digital safety as global travel surges during one of the busiest mobility windows of the year, and airport advisory boards are increasingly focusing on digital safety. As a result of the renewed warning from…
U.S. Authorities Shut Down Online Network Selling Fake Identity Templates
United States federal authorities have taken down an online operation accused of supplying tools used in identity fraud across multiple countries. The case centers on a Bangladeshi national who allegedly managed several websites that sold digital templates designed to…
FBI Discovers 630 Million Stolen Passwords in Major Cybercrime Investigation
A newly disclosed trove of stolen credentials has underscored the scale of modern cybercrime after U.S. federal investigators uncovered hundreds of millions of compromised passwords on devices seized from a single suspected hacker. The dataset, comprising approximately 630 million…
Security Flaw Exposes Personal Data on Somalia’s E-Visa System Weeks After Major Breach
A recently uncovered weakness in Somalia’s electronic visa system has triggered fresh alarm over the protection of travelers’ personal information, coming just weeks after authorities admitted to a large-scale data breach affecting tens of thousands of applicants. Findings indicate…
Trend Micro Warns: ‘Vibe Crime’ Ushers in Agentic AI-Driven Cybercrime Era
Trend Micro, a cybersecurity firm, has sounded the alarm over what it calls the rise of “vibe crime”: fully automated cybercriminal operations powered by agentic AI, which marks a fundamental turn away from traditional ransomware and phishing campaigns. The…
Russian Hackers Obtain Sensitive NHS Documents from UK Royal Properties
In a recent cyberattack, a ransomware group affiliated with Russia infiltrated the NHS computer system and retrieved hundreds of thousands of highly sensitive medical records, including those associated with members of the royal family, triggering alarms in several parts…
Why Banks Must Proactively Detect Money Mule Activity
Financial institutions are under increasing pressure to strengthen their response to money mule activity, a growing form of financial crime that enables fraud and money laundering. Money mules are bank account holders who move illegally obtained funds on behalf of…