Security

Swinging into trouble – leak exposes personal data of 60,000 golfers

Security gaffe left tens of thousands of golf enthusiasts’ data up for grabs, sparking serious security concerns.
Read more about Swinging into trouble – leak exposes personal data of 60,000 golfers

Smart bed Eight Sleep tracks sleepers and has a secret backdoor allowing for remote connections

Some smart home products are extra icky cybersecurity-wise. Security researchers found that a smart bed from Eight Sleep allows remote access and can run arbitrary code while also beaming data to storage on Amazon Web Services (AWS).
Read more about Smart bed Eight Sleep tracks sleepers and has a secret backdoor allowing for remote connections

Criminals now using GitHub to spread crypto-stealing malware

On the developer platform GitHub, cybersecurity specialists have discovered an active campaign that has been targeting users' computers for several years in an attempt to steal their crypto assets.
Read more about Criminals now using GitHub to spread crypto-stealing malware

Orange Group confirms data breach, hacker claims he stole over 12,000 files

French telecommunications provider Orange Group has admitted that a hacker has stolen thousands of internal documents with user records and employee data.
Read more about Orange Group confirms data breach, hacker claims he stole over 12,000 files

Apple to patch embarrassing dictation bug

People who dictated messages on their phones in recent days and used the word “racist,” briefly saw the word “Trump” appear on screen.
Read more about Apple to patch embarrassing dictation bug

AI-generated code is serving up serious security risks, say researchers

The explosive growth of AI-generated coding is leaving businesses with serious security risks due to coding errors and the lack of manpower to police them.
Read more about AI-generated code is serving up serious security risks, say researchers

Work in social media? Congrats, a new spear phishing campaign was created just for you

From Meta to Coca-Cola to Balenciago, hackers posing as recruiters from Fortune 500 companies looking for their next star employee are targeting the social media and marketing industry as part of a new spear phishing campaign, new research finds.
Read more about Work in social media? Congrats, a new spear phishing campaign was created just for you

This malware takes everything: from crypto to your Apple notes

An infectious job interview might leave you without a job and your crypto say researchers, who have identified a new malware campaign targeting job seekers.
Read more about This malware takes everything: from crypto to your Apple notes

DeepSeek fame hijacked to empty wallets

Crafty scammers are setting up Captchas on Deepseek look-alike sites to steal access to digital wallets.
Read more about DeepSeek fame hijacked to empty wallets

LockBit ransom gang claims to have stolen information that could "destroy" FBI

In a birthday shout-out to Trump's newly appointed Director of the Federal Bureau of Investigations (FBI) Kash Patel, the supposed head of the LockBit ransomware cartel claims to have stolen data that could “destroy” the structure of the FBI.
Read more about LockBit ransom gang claims to have stolen information that could "destroy" FBI

With AI and automation, hackers are stealing data at unprecedented speeds

Upon gaining initial access to a network, malicious hackers spend an average of 48 minutes finding and accessing critical assets. A few more hours, and they will be gone with stolen data, and they rarely bother to encrypt it, an Annual Cyber-Threat report by ReliaQuest has found.
Read more about With AI and automation, hackers are stealing data at unprecedented speeds

One wrong SMS can wipe your savings, thanks to this Android Trojan

A sophisticated new malware campaign is preying on Android devices to steal money, an investigation has shown.
Read more about One wrong SMS can wipe your savings, thanks to this Android Trojan

No password, no protection – Movistar security lapse leaves customers at risk

Movistar Costa Rica, a major telecommunications company, leaked hundreds of thousands of IDs, creating a potential goldmine for cybercriminals. However, the company states there is no evidence data was downloaded.
Read more about No password, no protection – Movistar security lapse leaves customers at risk

Detroit PBS TV station hacked, Qilin ransomware takes responsibility

Detroit PBS, a community-based local TV station serving a diverse range of programs, has disclosed a cyberattack during which “an unauthorized actor” exfiltrated sensitive information. Qilin ransomware has claimed the breach and released 345 gigabytes of files.
Read more about Detroit PBS TV station hacked, Qilin ransomware takes responsibility

Australia bans Kaspersky antivirus software on all government systems

The Secretary of the Department of Home Affairs has prohibited the use of antivirus software and other products from Kaspersky on all government systems and devices.
Read more about Australia bans Kaspersky antivirus software on all government systems

Spylend malware downloaded from Google Play over 100,000 times

The malicious Finance Simplified app was available for download on Monday but was later removed from the Play Store by Google.
Read more about Spylend malware downloaded from Google Play over 100,000 times

Microsoft 365 at risk: massive botnet targeting users in password spraying attacks

The attacks are likely carried out by an advanced Chinese-affiliated group, with Strike researchers hinting at Volt Typhoon or Salt Typhoon.
Read more about Microsoft 365 at risk: massive botnet targeting users in password spraying attacks

Cybersecurity wrap-up: surprising data risks and breaches of the week

Discover surprising data risks in this week's cybersecurity wrap-up.
Read more about Cybersecurity wrap-up: surprising data risks and breaches of the week

How cybercriminals weaponize artificial intelligence: AI malware pioneers

Leveraging AI in malware attacks is a relatively new phonemenon, as it was not widely known before the release of generative AI.
Read more about How cybercriminals weaponize artificial intelligence: AI malware pioneers

Black Basta ransomware dissected: 1M leaked internal messages fed to chatbot

Black Basta, one of the most vile ransomware gangs, has imploded, and its internal messages have been leaked. Now, anyone can dissect how the ransomware ring operates just by prompting a chatbot.
Read more about Black Basta ransomware dissected: 1M leaked internal messages fed to chatbot