A new wave of AI tools developed with no ethical restrictions is allowing hackers to detect and exploit software vulnerabilities faster than ever before. As these “evil AI” platforms advance quickly, cybersecurity experts fear that traditional defences will fail…
Tag: CySecurity News – Latest Information Security and Hacking Incidents
Cobb County Suffers Alleged Data Breach by Russian Hackers
The recent cyber attacks against local governments have been concerning, with Cobb County in Georgia being targeted in March 2025 by a sophisticated ransomware attack. In an attempt to gain an edge over their competitors, the cybercriminals known as…
New AI System Lets Self-Driving Cars Share Road Experiences Like a Social Network
A new type of artificial intelligence (AI) has been designed to help self-driving cars share useful road data with each other, even if they aren’t connected to the internet. This could make future roads safer and help driverless vehicles…
Multiplatform Malware Campaign Uses PDF Invoices to Deploy Java-Based RAT
A new wave of cyberattacks is sweeping across digital infrastructures globally, leveraging weaponised PDF invoices to infiltrate systems with a sophisticated Java-based Remote Access Trojan (RAT). Security researchers from Fortinet have identified a multi-stage, evasive malware campaign targeting Windows,…
Your Home Address Might be Available Online — Here’s How to Remove It
In today’s hyper-connected world, your address isn’t just a piece of contact info; it’s a data point that companies can sell and exploit. Whenever you move or update your address, that information often gets picked up and distributed by…
EU Fines TikTok $600 Million for Data Transfers to China
Regulators said that the EU has fined TikTok 530 million euros (around $600 million). Chinese tech giant ByteDance owns TikTok, which has been found guilty of illegally sending the private data of EU users to China and lack of compliance…
M&S Hackers Conned IT Help Desk Workers Into Accessing Firm Systems
Hackers who attacked Marks & Spencer and the Co-op duped IT professionals into giving them access to their companies’ networks, according to a report. The “social engineering” attack on the Co-op allowed fraudsters to reset an employee’s password before…
Co-op Hack Triggers Widespread Scam Risk for Consumers
Several cyberattacks on major British retailers including Marks & Spencer, the Co-op Group, and others have been attributed to social engineering, the practice of deceiving internal support teams by impersonating legitimate employees to deceive internal support teams. It has…
Magento Extension Supply Chain Attack Backdoors Hundreds of E-Commerce Sites
A coordinated supply chain attack has compromised between 500 and 1,000 Magento-based e-commerce websites through 21 backdoored extensions, according to new research from cybersecurity firm Sansec. The breach affected sites globally, including the one being operated by a multinational…
Japanese Logistics Firm KWE Faces Ransomware Attack, Causing Service Delays
Kintetsu World Express (KWE), a large logistics and freight company based in Japan, recently experienced a ransomware attack that caused trouble with some of its systems. As a result, certain customers are facing interruptions in service. The company has…
Google to Launch Gemini AI for Children Under 13
Google plans to roll out its Gemini artificial intelligence chatbot next week for children younger than 13 with parent-managed Google accounts, as tech companies vie to attract young users with AI products. Google will launch its Gemini AI chatbot soon…
Global Cybercrime Crackdown Dismantles Major Phishing-as-a-Service Platform ‘LabHost’
In a major international crackdown, a law enforcement operation spearheaded by the London Metropolitan Police and coordinated by Europol has successfully taken down LabHost, one of the most notorious phishing-as-a-service (PhaaS) platforms used by cybercriminals worldwide. Between April 14…
AI Bots Fuel 57% of Holiday Shopping Traffic, Study Finds
Radware’s 2025 E-commerce Bot Threat Report reveals that automated bots generated 57% of online shopping website traffic during the 2024 holiday season, rather than human buyers. According to Radware’s analytics, this is the first time non-DDoS generating bots have…
UK Retail Sector Hit by String of Cyberattacks, NCSC Warns of Wake-Up Call
The United Kingdom’s National Cyber Security Centre (NCSC) has issued a stark warning following a wave of cyberattacks targeting some of the country’s most prominent retail chains. Calling the incidents a “wake-up call,” the agency urged organisations to strengthen…
Russian Hacktivists Disrupt Dutch Institutions with DDoS Attacks
Several Dutch public and private organizations have experienced significant service outages this week following a wave of distributed denial-of-service (DDoS) attacks linked to pro-Russian hacktivists. The Netherlands’ National Cyber Security Center (NCSC), part of the Ministry of Justice, confirmed…
NullBulge Admits to Stealing Internal Slack Data from Disney
Earlier this week, Ryan Mitchell Kramer, 25, of Santa Clarita, pleaded guilty in Los Angeles County Superior Court to hacking the personal device of an employee of The Walt Disney Company in 2024. Kramer managed to obtain login information…
“They’re Just People—But Dangerous Ones”: Trellix’s John Fokker Unpacks the Blurred Battlefield of Cybercrime at RSA 2025
At the RSA Conference 2025, John Fokker, head of threat intelligence at the Trellix Advanced Research Center, issued a stark reminder to the cybersecurity community that the behind of every cyberattack is a human being and the boundaries between…
Chinese Hackers Exploit IPv6 Network Features to Hack Software Updates
China-linked group attacks ESET discovered both SpellBinder and WizardNet, tools used by Chinese hackers. A China-based APT group, “The Wizards,” has been linked to a lateral movement tool, Spellbinder, which allows adversary-in-the-middle (AitM) attacks. It does so via IPv6 stateless…
Harmful WordPress Plugin Posing as Security Tool Grants Hackers Full Access
A newly discovered cyberattack is targeting WordPress websites by using a plugin that pretends to improve security but actually opens a backdoor for criminals. This fake plugin secretly gives attackers full control of affected sites. How the Infection Begins…
Push-Bombing: The Silent Threat Undermining Multi-Factor Authentication
In the ever-evolving landscape of cybersecurity, Multi-Factor Authentication (MFA) has emerged as a robust defense mechanism, adding layers of security beyond traditional passwords. However, a deceptive tactic known as “push-bombing” is undermining this very safeguard, posing significant risks to…