Cybersecurity analysts have identified a sophisticated web skimming operation that has been running continuously since early 2022, silently targeting online checkout systems. The campaign focuses on stealing payment card information and is believed to affect businesses that rely on…
Tag: CySecurity News – Latest Information Security and Hacking Incidents
ChatGPT Prepares Cross-Platform Expansion With Project Agora
It appears that OpenAI is quietly setting the foundation for its next significant product evolution, as early technical signals indicate the development of a new cross-platform initiative that is internally codenamed “Agora” and promises to be the next major step…
PHALT#BLYX Malware Campaign Targets European Hotels With Fake Booking Emails
A fresh wave of digital threats emerged just after Christmas 2025, aimed squarely at European lodging spots. Instead of random attacks, it used clever email tricks made to look like they came from Booking.com. Staff members got messages that…
EOCC Hit by Security Breach Due to Contractor’s Unauthorised Access
The Equal Employment Opportunity Commission (EOCC) was hit by an internal security data breach that happened last year. The incident involved a contractor’s employees exploiting sensitive data in an agency’s systems. About the breach The breach happened in EEOC’s Public…
VoidLink Malware Poses Growing Risk to Enterprise Linux Cloud Deployments
A new cybersecurity threat has emerged beneath the surface of the modern digital infrastructure as organizations continue to increase their reliance on cloud computing. Researchers warn that a subtle but dangerous shift is occurring beneath the surface. According to…
Here’s How AI is Revolutionizing Indian Cinema
Indian cinema is setting the pace for the use of AI across the globe, beating Hollywood’s cautious approach to the emergence of the new technology. With the aid of tools like Midjourney and ChatGPT, filmmakers are now able to…
This Built-In Android and iPhone Feature Lets You Share Your Phone Safely
Handing your phone to someone, even briefly, can expose far more than intended. Whether it is to share a photo, allow a quick call, or let a child watch a video, unrestricted access can put personal data at risk.…
Man Sentenced to Seven Years for Hacking Port IT Systems to Enable Drug Imports
A Dutch appeals court has sentenced a 44-year-old man to seven years in prison for his involvement in cyber intrusions targeting major European ports and for using those breaches to support drug trafficking operations. The ruling was issued by…
n8n Supply Chain Attack Exploits Community Nodes In Google Ads Integration to Steal Tokens
Hackers were found uploading a set of eight packages on the npm registry that pretended as integrations attacking the n8n workflow automation platform to steal developers’ OAuth credentials. About the exploit The package is called “n8n-nodes-hfgjf-irtuinvcm-lasdqewriit”, it copies Google Ads…
FBI Flags Kimsuky’s Role in Sophisticated Quishing Attacks
A new warning from the US Federal Bureau of Investigation indicates that spearphishing tactics are being advanced by a cyber espionage group linked to North Korea known as Kimsuky, also known as APT43, in recent months. As the threat…
Anthropic Launches “Claude for Healthcare” to Help Users Better Understand Medical Records
Anthropic has joined the growing list of artificial intelligence companies expanding into digital health, announcing a new set of tools that enable users of its Claude platform to make sense of their personal health data. The initiative, titled Claude…
Google Issues Urgent Privacy Warning for 1.5 Billion Photos Users
Google has issued a critical privacy alert for its 1.5 billion Google Photos users following accusations of using personal images to train AI models without consent. The controversy erupted from privacy-focused rival Proton, which speculated that Google’s advanced Nano…
AsyncRAT Campaign Abuses Cloudflare Services to Hide Malware Operations
Cybercriminals distributing the AsyncRAT remote access trojan are exploiting Cloudflare’s free-tier services and TryCloudflare tunneling domains to conceal malicious infrastructure behind widely trusted platforms. By hosting WebDAV servers through Cloudflare, attackers are able to mask command-and-control activity, making detection…
Instagram Refutes Breach Allegations After Claims of 17 Million User Records Circulating Online
Instagram has firmly denied claims of a new data breach following reports that personal details linked to more than 17 million accounts are being shared across online forums. The company stated that its internal systems were not compromised and…
GoBruteforcer Botnet Targets Linux Servers with Brute-Force Attacks
A dangerous botnet called GoBruteforcer is ramping up brute-force attacks on internet-exposed Linux servers, focusing on services like FTP, MySQL, PostgreSQL, and phpMyAdmin. Check Point Research (CPR) warns that over 50,000 servers remain vulnerable due to weak credentials and…
California Privacy Regulator Fines Datamasters for Selling Sensitive Consumer Data Without Registration
The California Privacy Protection Agency (CalPrivacy) has taken enforcement action against Datamasters, a marketing firm operated by Rickenbacher Data LLC, for unlawfully selling sensitive personal and health-related data without registering as a data broker. The Texas-based company was found…
Europol Cracks Down Gang Responsible for Cyber Crime Worth Billions
Europol’s joint operation to crackdown international gang Europol recently arrested 34 people in Spain who are alleged to have a role in a global criminal gang called Black Axe. The operation was conducted by Spanish National Police and Bavarian State…
BreachForums Database Breach Exposes Details of Over 324K User Accounts
The newest version of the infamous BreachForums cybercrime marketplace has reportedly experienced another security lapse, with its user database table appearing online. BreachForums refers to a succession of underground hacking forums commonly used for buying, selling, and leaking stolen…
APT28 Intensifies Cyber Espionage Targeting Energy Infrastructure and Policy Groups
One of Russia’s most prolific cyber espionage groups has operated largely in the shadows for more than two decades, quietly shaping the global threat landscape by carrying out persistent and highly targeted digital intrusions using techniques that have been…
LangChain Security Issue Puts AI Application Data at Risk
A critical security vulnerability has been identified in LangChain’s core library that could allow attackers to extract sensitive system data from artificial intelligence applications. The flaw, tracked as CVE-2025-68664, affects how the framework processes and reconstructs internal data, creating…