Browsers at risk The latest information-stealing malware, made in the Rust programming language, has surfaced as a major danger to users of Chromium-based browsers such as Microsoft Edge, Google Chrome, and others. Known as “RustStealer” by cybersecurity experts, this advanced…
Tag: CySecurity News – Latest Information Security and Hacking Incidents
Unimed AI Chatbot Exposes Millions of Patient Messages in Major Data Leak
iA significant data exposure involving Unimed, one of the world’s largest healthcare cooperatives, has come to light after cybersecurity researchers discovered an unsecured database containing millions of sensitive patient-doctor communications. The discovery was made by cybersecurity experts at Cybernews,…
Critical Bug in E-commerce Website, Over 10000 Customers Impacted
WordPress plugin exploit Cybersecurity experts have found a critical unpatched security vulnerability impacting the TI WooCommerce Wishlist plugin for WordPress that unauthorized threat actors could abuse to upload arbitrary files. TI WooCommerce Wishlist has more than 100,000 active installations. It…
TSA Advises Against Using Airport USB Ports to Charge Your Phone
So-called juice jacking is the most controversial topic in cybersecurity circles. In most years, when a new alert is issued by a government agency before the holidays, it creates new headlines. Stories are written and cyber eyebrows are raised…
US Sanctions Philippines-Based Web Host Tied to $200 Million Crypto Scam Network
In a significant move against online fraud, the US Treasury Department has sanctioned a Philippines-based web hosting company accused of enabling massive cryptocurrency scams. The sanctions, announced Thursday, target Funnull Technology and its administrator, Chinese national Liu Lizhi, for…
AI Agents Raise Cybersecurity Concerns Amid Rapid Enterprise Adoption
A growing number of organizations are adopting autonomous AI agents despite widespread concerns about the cybersecurity risks they pose. According to a new global report released by identity security firm SailPoint, this accelerated deployment is happening in a largely…
AI Fraud Emerges as a Growing Threat to Consumer Technology
With the advent of generative AI, a paradigm shift has been ushered in the field of cybersecurity, transforming the tactics, techniques, and procedures that malicious actors have been using for a very long time. As threat actors no longer…
APT41 Exploits Google Calendar in Stealthy Cyberattack; Google Shuts It Down
Chinese state-backed threat actor APT41 has been discovered leveraging Google Calendar as a command-and-control (C2) channel in a sophisticated cyber campaign, according to Google’s Threat Intelligence Group (TIG). The team has since dismantled the infrastructure and implemented defenses to…
How Biometric Data Collection Affects Workers
Modern workplaces are beginning to track more than just employee hours or tasks. Today, many employers are collecting very personal information about workers’ bodies and behaviors. This includes data like fingerprints, eye scans, heart rates, sleeping patterns, and even…
Want to Leave Facebook? Do this.
Confused about leaving Facebook? Many people are changing their social media habits and opting out of many services. Facebook has witnessed a large exodus of users deserting the platform after the announcement in March that Meta was terminating the independent…
WhatsApp Launches First Dedicated iPad App with Full Multitasking and Calling Features
After years of anticipation, WhatsApp has finally rolled out a dedicated iPad app, allowing users to enjoy the platform’s messaging capabilities natively on Apple’s tablet. Available now for download via the App Store, this new version is built to…
Adidas Confirms Data Leak After User Service Provider Hack
Adidas confirmed that a third-party customer service provider’s vulnerability allowed a threat actor to steal company data. Contact details of customers who have previously dealt with the Adidas customer service help desk are among the impacted data. However, passwords,…
North Korea’s Innovative Laptop Farm Scam Alarms Cybersecurity Experts
A group of software engineers, many of whom secretly work on behalf of North Korea, has infiltrated major U.S. companies, many of which are Fortune 500 companies, by masquerading as American developers to obtain money from them. This has…
PumaBot: A New Malware That Sneaks into Smart Devices Using Weak Passwords
A recently found malware called PumaBot is putting many internet-connected devices at risk. This malicious software is designed to attack smart systems like surveillance cameras, especially those that use the Linux operating system. It sneaks in by guessing weak…
Cerebras Unveils World’s Fastest AI Chip, Beating Nvidia in Inference Speed
In a move that could redefine AI infrastructure, Cerebras Systems showcased its record-breaking Wafer Scale Engine (WSE) chip at Web Summit Vancouver, claiming it now holds the title of the world’s fastest AI inference engine. Roughly the size of…
Thousands of ASUS Routers Affected by Stealthy Persistent Backdoor
It seems like someone, possibly nation-state hackers, is building a botnet out of thousands of Asus routers that can withstand firmware patches and reboots. Researchers report that about 9,000 routers have been infiltrated, and the figure is still rising. …
New Self-Spreading Malware Hijacks Docker Servers to Secretly Mine Cryptocurrency
A newly uncovered malware campaign is exploiting unsecured Docker environments across the globe, silently enrolling them into a decentralized cryptojacking network that mines the privacy-focused cryptocurrency, Dero. Cybersecurity firm Kaspersky reports that the attack initiates by targeting exposed Docker…
DragonForce Targets MSPs Using SimpleHelp Exploit, Expands Ransomware Reach
The DragonForce ransomware group has breached a managed service provider (MSP) and leveraged its SimpleHelp remote monitoring and management (RMM) tool to exfiltrate data and launch ransomware attacks on downstream clients. Cybersecurity firm Sophos, which was brought in to…
X Temporarily Disables Encrypted DMs to Launch New Messaging Features
X, formerly known as Twitter, has announced a temporary suspension of its encrypted direct messaging (DM) feature as it works on major upgrades to its messaging infrastructure. In a recent update, the platform confirmed that users will still be…
Vanta Customer Data Exposed Due to Code Bug at Compliance Firm
It was discovered today that Vanta, one of the leading providers of compliance automation solutions, had experienced a critical security lapse that resulted in the unauthorised exposure of confidential customer data, which resulted from a software malfunction. An inadvertent…
NPM Developers Targeted: Fake Packages Secretly Collecting Personal Data
Security experts are warning people who use NPM — a platform where developers share code — to be careful after finding several fake software packages that secretly collect information from users’ computers. The cybersecurity company Socket found around 60…
TCS Investigates Possible Link to M&S Cyberattack
Tata Consultancy Services (TCS), a leading Indian IT services firm under the Tata Group umbrella, is reportedly investigating whether its systems played any role in the recent ransomware attack that disrupted operations at British retail giant Marks & Spencer…
MathWorks Hit by Ransomware Attack Affecting Over 5 Million Clients
The renowned MATLAB programming language and numeric computing environment’s developer has reported a ransomware attack on its IT systems. MathWorks, based in Massachusetts, sent an update to users after initially reporting issues on May 18, stating that the company…
$400Million Coinbase Breach Linked to Customer Data Leak from India
Coinbase data breach linked to India A Reuters investigation revealed that cryptocurrency exchange Coinbase knew in January about a breach affecting outsourced customer support agents in India. Six people who knew about the incident said Coinbase was aware of sensitive…
TSA Cautions Passengers Against Plugging Into Public USB Charging Stations
Despite the Transportation Security Administration’s (TSA) widespread recognition for its role in ensuring air travel security through rigorous passenger screening procedures, the agency is now drawing attention to a lesser-known, yet equally concerning, cybersecurity threat faced by airport travellers.…
FBI Warns of Silent Ransom Group Using Phishing and Vishing to Target U.S. Law Firms
The FBI has issued a warning about a sophisticated cybercriminal group known as the Silent Ransom Group (SRG), also referred to by aliases like Luna Moth, Chatty Spider, and UNC3753. This group has been actively targeting U.S.-based law firms…
OpenAI’s o3 Model Allegedly Alters Shutdown Script in AI Alignment Tests
In a new and potentially alarming development, OpenAI’s latest AI model, o3, has reportedly exhibited behavior suggesting it may be resisting shutdown commands under certain conditions. According to a report published by Palisade Research, a firm that investigates the…
Ransomware Attack Exposes Private Data of Over 280,000 Nova Scotia Power Customers
A major cybersecurity incident has affected Nova Scotia Power, the province’s electricity provider. The company recently confirmed it was hit by a ransomware attack that led to a massive data leak, although electricity services were not disrupted. The cyberattack…
Google Researcher Claims Quantum Computing Could Break Bitcoin-like Encryption Easier Than Thought
Craig Gidney, a Google Quantum AI researcher, has published a new study that suggests cracking popular RSA encryption would take 20 times less quantum resources than previously believed. Bitcoin, and other cryptocurrencies were not specifically mentioned in the study;…
Automatic e-ZERO FIR Filing Introduced for High-Value Cyber Crimes
There has been a significant increase in cybercrime incidents in India recently, and the government of India has responded by launching the e-Zero FIR facility, a landmark initiative that will strengthen the nation’s cybersecurity framework and expedite the investigation…
Undercover Operation Shuts Down Website Helping Hackers Internationally
Hackers used AVCheck to see malware efficiency International police action has shut down AVCheck, an anti-virus scanning website used by threat actors to check whether their malware was detected by mainstream antivirus before using it in the attacks. The official…
WhatsApp Image Scam Uses Steganography to Steal User Data and Money
With over three billion users globally, including around 500 million in India, WhatsApp has become one of the most widely used communication platforms. While this immense popularity makes it convenient for users to stay connected, it also provides fertile…
AI Adoption Accelerates Despite Growing Security Concerns: Report
Businesses worldwide are rapidly embracing artificial intelligence (AI), yet a significant number remain deeply concerned about its security implications, according to the 2025 Thales Data Threat Report. Drawing insights from over 3,100 IT and cybersecurity professionals across 20 countries…
FBI Cracks Down on Dark Web Drug Dealers
A major criminal network operating on the dark web has been disrupted in a large international operation led by the FBI. Over 270 individuals have been arrested for their involvement in the online trade of dangerous illegal drugs such…
Hackers Use Popular Anime Titles to Lure Gen Z into Malware Traps, Warns Kaspersky
Cybercriminals are increasingly camouflaging malware as anime content to exploit the growing global fascination with Japanese animation, according to cybersecurity firm Kaspersky. Their recent analysis of phishing incidents between Q2 2024 and Q1 2025 revealed over 250,000 attacks leveraging…
EU Sanctions Actors Involved in Russian Hybrid Warfare
EU takes action against Russian propaganda The European Union (EU) announced sweeping new sanctions against 21 individuals and 6 entities involved in Russia’s destabilizing activities abroad, marking a significant escalation in the bloc’s response to hybrid warfare threats. European Union…
Vietnam Blocks Telegram Messaging App
Vietnam’s technology ministry has ordered telecommunications service providers to ban the messaging app Telegram for failing to cooperate in the investigation of alleged crimes committed by its users, a move Telegram described as shocking. In a document dated May…
Hackers Tricking Employees with Fake IT Calls and Email Floods in New Ransomware Scam
A growing number of cyberattacks are being carried out by a group linked to the 3AM ransomware. These attackers are using a combination of spam emails and fake phone calls pretending to be a company’s tech support team. Their…
Balancing Consumer Autonomy and Accessibility in the Age of Universal Opt-Outs
The Universal Opt-Out Mechanism (UOOM) has emerged as a crucial tool that streamlines consumers’ data rights exercise in a time when digital privacy concerns continue to rise. Through the use of this mechanism, individuals can express their preferences regarding…
FBI Busts 270 in Operation RapTor to Disrupt Dark Web Drug Trade
Efforts to dismantle the criminal networks operating on the dark web are always welcome, especially when those networks serve as hubs for stolen credentials, ransomware brokers, and cybercrime gangs. However, the dangers extend far beyond digital crime. A substantial…
Governments Release New Regulatory AI Policy
Regulatory AI Policy The CISA, NSA, and FBI teamed with cybersecurity agencies from the UK, Australia, and New Zealand to make a best-practices policy for safe AI development. The principles laid down in this document offer a strong foundation for…
Technology Meets Therapy as AI Enters the Conversation
Several studies show that artificial intelligence has become an integral part of mental health care, changing the way practitioners deliver, document, and conceptualise therapy over the years, as well as how professionals are implementing, documenting, and even conceptualising it.…
Coinbase Offers $20m Bounty to Take Down Perpetrators Behind Social Engineering Attack
Coinbase, a renowned cryptocurrency exchange, is offering a $20 million prize to anyone who can assist identify and bring down the culprits of a recent cyber-attack, rather than fulfilling their ransom demands. On May 15, Coinbase said that attackers…
CBI Uncovers Tech Support Scam Targeting Japanese Nationals in Multi-State Operation
The Central Bureau of Investigation (CBI) has uncovered a major international scam targeting Japanese citizens through fake tech support schemes. As part of its nationwide anti-cybercrime initiative, Operation Chakra V, the CBI arrested six individuals and shut down two…
Hackers Are Fooling IT Help Desks — Here’s How You Can Stay Protected
IT support teams, also known as service desks, are usually the first people we call when something goes wrong with our computers or accounts. They’re there to help fix issues, unlock accounts, and reset passwords. But this helpfulness is…
Remote Work and AI Scams Are Making Companies Easier Targets for Hackers
Experts are warning that working from home is making businesses more open to cyberattacks, especially as hackers use new tools like artificial intelligence (AI) to trick people. Since many employees now work remotely, scammers are taking advantage of weaker…
ESXi Environment Infiltrated Through Malicious KeePass Installer
Research by cybersecurity researchers has revealed that threat actors have been using tampered versions of KeePass password manager software to break into enterprise networks for several months. Researchers have discovered that this campaign has been sophisticated and ongoing for several…
Foxconn’s Chairman Warns AI and Robotics Will Replace Low-End Manufacturing Jobs
Foxconn chairman Young Liu has issued a stark warning about the future of low-end manufacturing jobs, suggesting that generative AI and robotics will eventually eliminate many of these roles. Speaking at the Computex conference in Taiwan, Liu emphasized that…
Ransomware Attack Disrupts Kettering Health Network, Elective Procedures Canceled Across 14 Ohio Facilities
A ransomware incident has caused a significant “system-wide technology outage” at a network of over a dozen medical centers in Ohio, resulting in the cancellation of both inpatient and outpatient elective procedures. This information comes from a statement released…
British supermarkets’ Supplier of Refrigerated Goods Hit by a Ransomware Attack
Peter Green Chilled, a logistics firm, has announced that it has been attacked by a ransomware attack, interrupting deliveries of refrigerated goods to some of the country’s top supermarkets. Customers — largely smaller producers who provide food to regional…
Google Unveils AI With Deep Reasoning and Creative Video Capabilities
This week, Google, as part of its annual Google Marketing Live 2025 event, unveiled a comprehensive suite of artificial intelligence-powered tools to help the company cement its position at the forefront of digital commerce and advertising on Wednesday, May…
Google’s AI Virtual Try-On Tool Redefines Online Shopping Experience
At the latest Google I/O developers conference, the tech giant introduced an unexpected innovation in online shopping: an AI-powered virtual try-on tool. This new feature lets users upload a photo of themselves and see how clothing items would appear…
Reports Indicate Social Engineering Attacks on Binance and Kraken
As a result of sophisticated social engineering attacks mimicking a recent attempt to breach Coinbase Global Inc., Binance and Kraken exchanges have both been able to thwart such attacks. In the report by Bloomberg, sources familiar with the matter…
M&S Faces Multi-million Lawsuit Following Major Data Breach
Following the cyberattack that affected the retailer for a month, Marks & Spencer is reportedly facing a multimillion-pound lawsuit over the loss of customer data. It acknowledged earlier this month that customer information, including names, email addresses, postal addresses,…
Brushing Scam Targets Amazon Customers with Unsolicited Packages and Hidden Cyber Threats
Ray Simmons was confused when he received an unexpected Amazon package containing beet chews. Initially, he thought it might be a joke from someone encouraging him to eat healthier. However, it turned out to be part of a broader…
China Launches Advanced Quantum Security Network Said to Be “Unhackable”
A major Chinese telecom company has launched what it claims is the first commercial security system that can protect digital communication from even the most powerful future hackers — including those using quantum computers. China Telecom Quantum, a state-owned…
Malware Discovered in Procolored Printer Software, Users Advised to Update Immediately
For at least six months, the official software bundled with Procolored printers reportedly included malicious code, including a remote access trojan (RAT) and a cryptocurrency-stealing malware. Procolored, a Shenzhen-based manufacturer known for its affordable Direct-to-Film (DTF), UV DTF, UV,…
Crypto Crime Shocker: DOJ Charges 27 In $263 Million Crypto Theft
A multi-national cryptocurrency fraud ring that allegedly defrauded victims worldwide over a quarter of a billion dollars has come under increased scrutiny from the US Department of Justice (DOJ). The case now has 27 defendants in total after the…
Klarna Scales Back AI-Led Customer Service Strategy, Resumes Human Support Hiring
Klarna Group Plc, the Sweden-based fintech company, is reassessing its heavy reliance on artificial intelligence (AI) in customer service after admitting the approach led to a decline in service quality. CEO and co-founder Sebastian Siemiatkowski acknowledged that cost-cutting took…
Surge in Skitnet Usage Highlights Evolving Ransomware Tactics
Today’s cyber threat landscape is rapidly evolving, making it increasingly difficult for adversaries to tell the difference between traditional malware families, as adversaries combine their capabilities to maximise their impact. Skitnet, an advanced multistage post-exploitation toolkit, is one of…
Cybercriminals Are Dividing Tasks — Why That’s a Big Problem for Cybersecurity Teams
Cyberattacks aren’t what they used to be. Instead of one group planning and carrying out an entire attack, today’s hackers are breaking the process into parts and handing each step to different teams. This method, often seen in cybercrime…
Microsoft Uncover Password Stealer Malware on 4 lakh Windows PCs
Microsoft’s Digital Crimes Unit (DCU) and global partners have halted Lumma Stealer, one of cybercriminals’ most common info-stealing malware tools. On May 13, Microsoft and law enforcement agencies seized nearly 2,300 domains that comprise Lumma’s infrastructure, inflicting a significant…
Global Surveillance Campaign Targets Government Webmail Through XSS Exploits
Amid the ongoing conflict between Russia and Ukraine, the digital battlefield remains just as active as the one on the ground. Researchers have identified a sophisticated and ongoing global hacking campaign known as “Operation RoundPress” as a disturbing escalation…
Cyberattack Forces Nucor to Halt Some Operations Amid Ongoing Investigation
Nucor, the largest steel manufacturer and recycler in North America, has disclosed a cybersecurity incident that forced the company to temporarily shut down some of its production operations. The Charlotte, North Carolina-based firm confirmed the event in a recent…
Generative AI May Handle 40% of Workload, Financial Experts Predict
Almost half of bank executives polled recently by KPMG believe that generative AI will be able to manage 21% to 40% of their teams’ regular tasks by the end of the year. Heavy investment Despite economic uncertainty, six…
Quantum Computing Could Deliver Business Value by 2028 with 100 Logical Qubits
Quantum computing may soon move from theory to commercial reality, as experts predict that machines with 100 logical qubits could start delivering tangible business value by 2028—particularly in areas like material science. Speaking at the Commercialising Quantum Computing conference…
Dior Confirms Hack: Personal Data Stolen, Here’s What to Do
Christian Dior, the well-known luxury fashion brand, recently experienced a cyberattack that may have exposed customer information. The brand, owned by the French company LVMH, announced that an outsider had managed to break into part of its customer database. This…
Tech Executives Lead the Charge in Agentic AI Deployment
As it turns out, what was once considered a futuristic concept has quickly become a business imperative. As a result, artificial intelligence is now being integrated into the core of enterprise operations in increasingly autonomous ways – and it…
Ransomware Hackers Target SAP Servers Through Critical Flaw
A newly discovered security hole in SAP’s NetWeaver platform is now being misused by cybercriminals, including ransomware gangs. This flaw allows attackers to run harmful commands on vulnerable systems from a distance—without even needing to log in. SAP issued…
Pen Test Partners Uncovers Major Vulnerability in Microsoft Copilot AI for SharePoint
Pen Test Partners, a renowned cybersecurity and penetration testing firm, recently exposed a critical vulnerability in Microsoft’s Copilot AI for SharePoint. Known for simulating real-world hacking scenarios, the company’s redteam specialists investigate how systems can be breached just like…
Here’s How to Safeguard Your Smartphone Against Zero-Click Attacks
Spyware tools have been discovered on the phones of politicians, journalists, and activists on numerous occasions over the past decade. This has prompted worries regarding the lack of protections in the tech industry and an unprecedented expansion of spyware…
AI Can Create Deepfake Videos of Children Using Just 20 Images, Expert Warns
Parents are being urged to rethink how much they share about their children online, as experts warn that criminals can now generate realistic deepfake videos using as few as 20 images. This alarming development highlights the growing risks of…
India’s Cyber Scams Create International Turmoil
It has been reported that the number of high-value cyber fraud cases in India has increased dramatically in the financial year 2024, which has increased more than fourfold and has resulted in losses totalling more than $20 million, according…
Google Claims Attackers That Hit UK Firms Now Targeting American Stores
Hackers responsible for a series of destructive, financially driven assaults on some of the United Kingdom’s leading retailers are now targeting major American firms, Google noted earlier this week. “Major American retailers have already been targeted,” John Hultquist, the…
Spain Investigates Cybersecurity of Power Suppliers After Widespread Grid Outage
Spain is investigating the cybersecurity practices of its power suppliers following a major power outage that affected much of the Iberian Peninsula at the end of April. While initial assessments by Spanish and Portuguese grid operators ruled out a…
Cyberattackers Use JPG Files to Deploy Ransomware Undetected
Several cybersecurity experts have recently identified a worrying evolution in ransomware tactics. These actors are now concealing and deploying fully undetectable ransomware payloads using JPEG images, resulting in an outbreak of completely undetectable ransomware. It is a major advance…
Ransomware May Soon Target the Brain of Your Computer — Here’s What You Need to Know
Cyberattacks are evolving fast, and one of the biggest threats on the horizon is ransomware that doesn’t just take over your files but could directly attack your computer’s processor. Usually, ransomware blocks access to your files or system until…
Cybercriminals Employ Fake AI tools to Propagate the Infostealer Noodlophile
A new family of malware that steals information, dubbed ‘Noodlophile,’ is being spread using fake AI-powered video generating tools that pose as generated media content. The websites are promoted on Facebook groups with a high level of visibility and…
Two Factor Authentication Under Threat as Sim Swap Fraud Escalates Sharply
It has been estimated that SIM-swap fraud has increased by more than 1,000% in the United Kingdom in just a year, a shocking increase that has resulted from the recent surge in reported cases. Using newly released data from…
AI in Cybersecurity Market Sees Rapid Growth as Network Security Leads 2024 Expansion
The integration of artificial intelligence into cybersecurity solutions has accelerated dramatically, driving the global market to an estimated value of $32.5 billion in 2024. This surge—an annual growth rate of 23%—reflects organizations’ urgent need to defend against increasingly sophisticated cyber…
Florida Scraps Controversial Law That Threatened Online Privacy
A proposed law in Florida that raised concerns about online privacy has now been officially dropped. The bill, called “Social Media Use by Minors,” aimed to place tighter controls on how children use social media. While it was introduced…
North Korean Operatives Posing as Remote IT Workers Infiltrate U.S. Tech Firms
A rising number of top-tier tech companies in the U.S. have unknowingly employed North Korean cyber agents disguised as remote IT professionals, with the operatives channeling lucrative tech salaries back to Pyongyang to support the regime’s weapons program. Cybersecurity…
Global Data Breach Uncovers 23 Million Stolen Credentials
As a consequence of the fact that a single set of login credentials can essentially unlock an individual’s financial, professional, and personal life, the exposure of billions of passwords represents more than just a routine cybersecurity concern today- it…
Beware iPhone Users: Indian Government Issues Urgent Advisory Over Data Theft Risk
The Indian government has issued an urgent security warning to iPhone and iPad users, citing major flaws in Apple’s iOS and iPadOS software. If not addressed, these vulnerabilities could allow cybercriminals to access sensitive user data or make devices…
Scattered Spider Cyberattack Cripples M&S, Co-op: DragonForce Ransomware Causes Weeks-Long Disruption
Weeks after a significant cyberattack disrupted operations at major British retailers, companies like Marks & Spencer (M&S) and Co-op are still struggling to restore full functionality. Despite public reassurances, the scope of the attack is proving more serious than…
Türkiye-Linked Hackers Exploit Zero-Day in Messaging App to Target Kurdish Military
A Türkiye-aligned cyberespionage group, Marbled Dust, has exploited a previously unknown zero-day vulnerability to launch attacks on users of Output Messenger — specifically those associated with the Kurdish military in Iraq, according to a report from Microsoft Threat…
Report Reveals Serious Security Issues in Common Browser Extensions
Modern digital workflows have become increasingly dependent on browser extensions, supporting a variety of tasks ranging from grammar correction, password management, and advanced AI integrations into everyday tasks. Browser extensions have become widely used across both personal and corporate…
Malicious Chrome Extensions Spoof Password Managers in Novel Polymorphic Attack
Cybersecurity experts have uncovered a novel technique for a malicious web browser extension to spoof any installed add-on. “The polymorphic extensions create a pixel perfect replica of the target’s icon, HTML popup, workflows and even temporarily disables the legitimate…
Lostkeys Malware: Russian Group Coldriver Targets Western Officials in Espionage Campaign
A new wave of cyber espionage has emerged, with Russian hackers deploying a sophisticated malware strain known as “Lostkeys” to infiltrate the systems of Western officials, journalists, and NGOs. According to researchers from Google’s Threat Intelligence Group, the malware…
Bangladesh’s Deepfake Challenge: Why New Laws Aren’t Enough
Bangladesh has taken a big step to protect its people online by introducing the Cyber Security Ordinance 2025. This law updates the country’s approach to digital threats, replacing the older and often criticized 2023 act. One of its most…
New AI Video Tool Scam Delivers Noodlophile Malware to Steal Your Data
Cybercriminals are using fake AI-powered video generation tools to spread a newly discovered malware strain called ‘Noodlophile’, disguised as downloadable media content. Fraudulent websites with names like “Dream Machine” are being promoted in high-visibility Facebook groups, pretending to be…
Safeguarding Personal Privacy in the Age of AI Image Generators
A growing trend of artificial intelligence-powered image creation tools has revolutionised the way users interact with digital creativity, providing visually captivating transformations in just a matter of clicks. The ChatGPT and Grok 3 platforms, which use artificial intelligence, offer…
Understanding Cybersquatting: How Malicious Domains Threaten Brands and Individuals
Cybersquatting remains a persistent threat in the digital landscape, targeting businesses, individuals, and public figures alike. This deceptive practice involves registering domain names that closely resemble those of legitimate brands or individuals, often with malicious intent. Despite rising awareness…
Here’s Why Websites Are Offering “Ad-Lite” Premium Subscriptions
Some websites allow you to totally remove adverts after subscribing, while others now offer “ad-lite” memberships. However, when you subscribe to ad-supported streaming services, you do not get the best value. Not removing all ads Ads are a significant…
Employee Monitoring Tool Kickidler Targeted in Ransomware Attacks
Cybersecurity researchers have discovered that cybercriminals are misusing a legitimate employee monitoring tool called Kickidler to execute targeted ransomware attacks. Originally developed to help businesses track productivity and ensure compliance, Kickidler offers features like real-time screen monitoring, keystroke logging,…
Cybercriminals Employ Display Fake Login Pages in Your Browser
Cofense Intelligence cybersecurity researchers have discovered a new and increasingly successful technique that attackers are using to deliver credential phishing pages straight to users’ email inboxes. This technique, which first surfaced in mid-2022, makes use of “blob URIs” (binary…
Hackers Resurface with PowerSchool Data, Target Schools Again with New Threats
Hackers behind the 2024 cyberattack on PowerSchool have returned, this time going after individual schools. They’re now threatening to leak private data unless schools pay them ransom. PowerSchool is a major digital platform used in the education sector. It…
How to Check If a Downloaded File Is Safe to Use
It is no longer a secret that downloading software is becoming an integral part of everyday computing in today’s digitally based environment. It is used to enhance productivity, explore new tools, and stay connected to an ever-increasing online world,…
Google to Pay Texas $1.4 Billion For Collecting Personal Data
The state of Texas has declared victory after reaching a $1 billion-plus settlement from Google parent firm Alphabet over charges that it illegally tracked user activity and collected private data. Texas Attorney General Ken Paxton announced the state’s highest…
Child Abuse Detection Efforts Face Setbacks Due to End-to-End Encryption
Technology has advanced dramatically in the last few decades, and data has been exchanged across devices, networks, and borders at a rapid pace. It is imperative to safeguard sensitive information today, as it has never been more important-or more…