The researchers at the National Cyber Security Agency have identified a sophisticated campaign that involved malicious actors uploading more than 67 deceptive repositories to GitHub, masquerading as legitimate Python-based security and hacking tools. In truth, these repositories actually serve…
Tag: CySecurity News – Latest Information Security and Hacking Incidents
Lazarus Group Suspected in $11M Crypto Heist Targeting Taiwan’s BitoPro Exchange
Taiwanese cryptocurrency platform BitoPro has blamed North Korea’s Lazarus Group for a cyberattack that resulted in $11 million in stolen digital assets. The breach occurred on May 8, 2025, during an upgrade to the exchange’s hot wallet system. According…
U.S. Senators Propose New Task Force to Tackle AI-Based Financial Scams
In response to the rising threat of artificial intelligence being used for financial fraud, U.S. lawmakers have introduced a new bipartisan Senate bill aimed at curbing deepfake-related scams. The bill, called the Preventing Deep Fake Scams Act, has been…
The Rise in IT Helpdesk Scams: What Can Users Do?
Over 37,500 complaints concerning phoney tech-support scams were filed in the United States last year alone, resulting in losses of over $924 million, according to the latest FBI’s Internet Crime Report. In this piece, we’ll look at how these…
WhatsApp Ads Delayed in EU as Meta Faces Privacy Concerns
Meta recently introduced in-app advertisements within WhatsApp for users across the globe, marking the first time ads have appeared on the messaging platform. However, this change won’t affect users in the European Union just yet. According to the Irish…
Krispy Kreme Confirms Cyberattack Affected Over 160,000 People
Popular U.S.-based doughnut chain Krispy Kreme has confirmed that a cyberattack last year compromised the personal data of more than 160,000 individuals. According to a notification filed with the Maine Attorney General’s Office, the company stated that the breach…
DanaBot Malware Enables Data Breaches and Russian Espionage
The United States has taken decisive action to eliminate one of the most persistent cybercrime threats in history by joining forces with international law enforcement bodies and several private cybersecurity companies to dismantle the infrastructure behind the notorious malware…
UBS Acknowledges Employee Data Leak Following Third-Party Cyberattack
Swiss financial institution UBS has confirmed that some of its employee data was compromised and leaked online due to a cybersecurity breach at one of its external service providers. The incident did not impact client information, according to the…
Keylogger Injection Targets Microsoft Exchange Servers
Keylogging malware is a particularly dangerous as it is often designed to steal login passwords or other sensitive information from victims. When you add a compromised Exchange server to the mix, it makes things significantly worse for any organisation. …
Unwanted Emails Are Annoying But Unsubscribing Can Be Riskier
A growing number of Gmail users consider the “unsubscribe” button to be a straightforward means of decluttering their overflowing inboxes, but cybersecurity experts are warning that a growing and mostly ignored threat is posing a serious threat. The unsubscribe…
Meta.ai Privacy Lapse Exposes User Chats in Public Feed
Meta’s new AI-driven chatbot platform, Meta.ai, launched recently with much fanfare, offering features like text and voice chats, image generation, and video restyling. Designed to rival platforms like ChatGPT, the app also includes a Discover feed, a space intended…
Meta Introduces Advanced AI Tools to Help Businesses Create Smarter Ads
Meta has rolled out a fresh set of AI-powered tools aimed at helping advertisers design more engaging and personalized promotional content. These new features include the ability to turn images into short videos, brand-focused image generation, AI-powered chat assistants, and…
Massive Data Leak Exposes 16 Billion Login Records from Major Online Services
A recent investigation by Cybernews has uncovered a staggering 30 separate online datasets containing approximately 16 billion stolen login credentials from services including Apple, Google, and Facebook. These data dumps, discovered through open sources, appear to be the result…
Researchers Advise Caution as Veeam Releases Patch to Fix Critical Vulnerability
Following Veeam Backup & Replication’s Tuesday patch release to patch a critical remote code execution vulnerability, researchers are advising customers to ensure their systems are completely upgraded to the latest version. An authorised domain user can execute code on…
Israel Iran Crisis Fuels Surge in State Backed Cyberattacks
As Israeli and Iranian forces engaged in a conventional military exchange on June 13, 2025, the conflict has rapidly escalated into a far more complex and multi-faceted conflict that is increasingly involving a slew of coordinated cyberattacks against a…
Air India Express Flight Returns Mid-Air After Suspected GPS Spoofing Near Jammu Border
In an unusual and concerning incident, an Air India Express flight en route from Delhi to Jammu was forced to return to Indira Gandhi International Airport on Monday due to suspected GPS spoofing near India’s border region. Carrying 160…
Jailbroken Mistral And Grok Tools Are Used by Attackers to Build Powerful Malware
The latest findings by Cato Networks suggests that a number of jailbroken and uncensored AI tool variations marketed on hacker forums were probably created using well-known commercial large language models like Mistral AI and X’s Grok. A parallel underground…
CISA Warns of Renewed Exploits Targeting TP-Link Routers with Critical Flaws
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has raised fresh concerns about several outdated TP-Link router models that are being actively exploited by cybercriminals. Despite the flaw being identified years ago, it has re-emerged in recent attack campaigns,…
Scania Targeted in Extortion Attempt Following Data Breach
An alarm is triggered in both the automotive and financial industries when Scania Financial Services, based in Sweden, confirms that a cybersecurity incident has compromised sensitive company data, which has raised concerns in the industry. The breach was reportedly…
New Malicious Python Package Found Stealing Cloud Credentials
A dangerous piece of malware has been discovered hidden inside a Python software package, raising serious concerns about the security of open-source tools often used by developers. Security experts at JFrog recently found a harmful package uploaded to the…