Cybercrime outfits now reshape supply chain intrusions into sprawling, linked assaults – spinning out data leaks, stolen login details, and ransomware in relentless loops, says fresh research by Group-IB. With each trend report, the security group highlights how standalone…
Tag: CySecurity News – Latest Information Security and Hacking Incidents
Russia Blocks WhatsApp, Pushes State Surveillance App
Russia has effectively erased WhatsApp from its internet, impacting up to 100 million users in a bold move by regulator Roskomnadzor. On Wednesday, the app was removed from the national directory, severing access without prior slowdown warnings, as reported…
Darktrace Flags Surge in Phishing as Identity-Based Attacks Redefine 2025 Threat Landscape
More than 32 million high-confidence phishing emails were identified in 2025, signaling a sharp rise in identity-focused cyberattacks, according to new findings from Darktrace. The cybersecurity firm analyzed incidents across its global customer network, revealing a year marked by…
Google Observes Threat Actors Deploying AI During Live Network Breaches
As synthetic intelligence has become a staple in modern organizations, the field has transformed how they analyze data, make automated decisions, and defend their digital perimeters, moving from experimental labs to the operational bloodstream. However, with the incorporation of…
Is Spyware Secretly Hiding on Your Phone? How to Detect It, Remove It, and Prevent It
If your phone has started behaving in ways you cannot explain, such as draining power unusually fast, heating up during minimal use, crashing, or displaying unfamiliar apps, it may be more than a routine technical fault. In some cases,…
Google Expands Privacy Tools With Automated ID Detection and Deepfake Image Removal
Years of relying on users to report privacy issues have shaped Google’s approach so far. Lately, automated tools began taking a bigger role in spotting private details online. One shift involves how quickly artificial visuals get flagged across search…
Enterprise Monitoring Tool Misused by Ransomware Gang to Target Businesses
Increasingly, enterprise networks are characterized by tools designed to enhance visibility and oversight applications purchased in the name of enhancing productivity, compliance, and efficiency. However, the same software entrusted with safeguarding workflow transparency is currently being quietly redirected toward far…
Claude Code Bugs Enable Remote Code Execution and API Key Theft
Claude Code, the coding assistant developed by Anthropic, is in the news after three major vulnerabilities were discovered, which can allow remote code execution and the theft of API keys if the developer opens an untrusted project. The vulnerabilities,…
Google Disrupts China-Linked UNC2814 Cyber Espionage Network Targeting 70+ Countries
Google on Wednesday revealed that it collaborated with industry partners to dismantle the digital infrastructure of a suspected China-aligned cyber espionage group known as UNC2814, which compromised at least 53 organizations spanning 42 countries. “This prolific, elusive actor has…
New IT Rules Mandate Three Hour Deadline for Deepfake Takedowns
For the first time in India’s digital governance landscape, the Union government has formally placed artificial intelligence-generated content within an enforceable regulatory framework, including deepfake videos, synthetic audio fabrications, and digitally altered visuals. It has been announced through a Gazette…
North Korean Hackers Deploy New macOS Malware in Crypto Theft Campaign
North Korean hackers, tracked as UNC1069 by Google’s Mandiant, have deployed sophisticated new macOS malware in targeted cryptocurrency theft campaigns. These attacks leverage AI-generated deepfake videos and social engineering via Telegram to trick victims into executing malicious commands. The…
APT28’s Operation MacroMaze Targets Western Europe With Stealthy Macro-Based Attacks
A fresh wave of digital intrusions, tied to Russian operatives known as APT28, emerges through findings uncovered by S2 Grupo’s LAB52 analysts. Throughout late 2025 into early 2026, these efforts quietly unfolded across Western and Central European institutions. Dubbed…
GitHub Fixes AI Flaw That Could Have Exposed Private Repository Tokens
A now-patched security weakness in GitHub Codespaces revealed how artificial intelligence tools embedded in developer environments can be manipulated to expose sensitive credentials. The issue, discovered by cloud security firm Orca Security and named RoguePilot, involved GitHub Copilot, the…
How Poorly Secured Endpoints Are Expanding Risk in LLM Infrastructure
As organizations build and host their own Large Language Models, they also create a network of supporting services and APIs to keep those systems running. The growing danger does not usually originate from the model’s intelligence itself, but from…
Millions of Chrome, Safari, and Edge Users at Risk from New Browser Exploit
A critical security vulnerability is threatening millions of users of popular web browsers including Google Chrome, Apple Safari, and Microsoft Edge. Security researchers have uncovered a sophisticated exploit that allows attackers to hijack sessions and steal sensitive data directly…
Bithumb Error Sends 620,000 Bitcoins to Users, Triggers Regulatory Scrutiny in South Korea
A huge glitch at Bithumb, South Korea’s second-biggest digital currency platform, triggered chaos when users suddenly found themselves holding vast quantities of bitcoin due to a flawed promotion. Instead of issuing minor monetary rewards, a technical oversight allowed 620,000…
ZeroDayRAT Marks Significant Shift in Cross Platform Mobile Surveillance
It is widely recognized that mobile devices serve as modern life vaults, containing conversations, credentials, financial records, and fragments of professional strategy behind polished glass screens. But this sense of contained security is increasingly being tested. A new cross-platform…
EC-Council Introduces AI Training Programs as Demand for Skilled Professionals Grows
As artificial intelligence becomes embedded in daily business functions, concerns are growing over whether the workforce is adequately prepared to manage its risks and responsibilities. EC-Council has announced the launch of four new AI-focused certifications along with an updated…
PayPal Alerts Users to Data Exposure Linked to Loan App Software Glitch
PayPal has informed customers about a data exposure incident caused by a software error in its loan application platform, which left sensitive personal information visible for nearly six months in 2025. The issue involved the company’s PayPal Working Capital…
AI Powered Attacks Target Hundreds of Fortinet Firewalls in Weeks
Cybercrime sophistication is no longer primarily determined by technical mastery but by the ability to industrialize opportunities as well. An anonymous, Russian-speaking threat actor quietly orchestrated a campaign over five weeks ago that compromised more than 600 FortiGate devices…