Security
Hackers are after your router and other network devices, Eclypsium warns
Eclypsium, a supply chain security firm, has seen a sharp spike in attacks against network infrastructure. Juniper routers are at the center of the two major campaigns in 2025.
Read more about Hackers are after your router and other network devices, Eclypsium warns
Critical sandbox escape flaw affects Firefox, Tor on Windows
Following reports on hackers exploiting a dangerous zero-day on Chrome, Mozilla has released a similar fix for its browser. Tor urges users to update "immediately."
Read more about Critical sandbox escape flaw affects Firefox, Tor on Windows
T-Mobile takes a $33 million hit
T-Mobile has to pay $33 million in a case filed in the United States over crypto theft via SIM swapping.
Read more about T-Mobile takes a $33 million hit
French Department of Education sends phishing mail to 2.5 million students
Both schools and students in France are regularly targeted by hackers via their digital workspaces.
Read more about French Department of Education sends phishing mail to 2.5 million students
More "unclassified" data spills under Waltz watch: US officials who use Venmo exposed
Mike Waltz, the United States national security adviser, left his Venmo friend list public, leaving sensitive information open for bad actors to exploit.
Read more about More "unclassified" data spills under Waltz watch: US officials who use Venmo exposed
Privacy disaster as LGBTQ+ and BDSM dating apps leak private photos
BDSM, LGBTQ+, and sugar dating apps have been found exposing users' private images, with some of them even leaking photos shared in private messages.
Read more about Privacy disaster as LGBTQ+ and BDSM dating apps leak private photos
CoffeeLoader pretends to be ASUS software to steal your data
No time to sleep – a new malware family named CoffeeLoader threatens Windows users while remaining invisible to antivirus software.
Read more about CoffeeLoader pretends to be ASUS software to steal your data
Security firm hacks ransomware gang, cripples operations
BlackLock Ransomware, a newly established gang also known as El Dorado, was on track to becoming one of the most prolific cybercrime rings. However, Resecurity, a cybersecurity firm, has found a flaw in its data leak site and hacked into the hackers’ infrastructure.
Read more about Security firm hacks ransomware gang, cripples operations
US gov’t defense contractor fined $4.5M, failed to secure even basic email communications, DOJ says
US Defense Department (DoD) contractor MORSE Corp will have to cough up $4.5 million as part of a settlement announced Wednesday by the feds after failing to meet even the bare minimum security controls required in its US military contracts.
Read more about US gov’t defense contractor fined $4.5M, failed to secure even basic email communications, DOJ says
Hackers behind massive broadband provider WOW! breach, Hudson Rock says
Arkana Security, a new ransomware gang, has claimed responsibility for an alleged massive breach at WideOpenWest (WoW), the eighth-largest cable operator and an internet service provider (ISP) in the US. Threat researchers at Huston Rock say that infostealer infection has led to the systems’ compromise.
Read more about Hackers behind massive broadband provider WOW! breach, Hudson Rock says
Fake DeepSeek ads spotted on Google: all you’ll find are malware infections
Clicking on sponsored results in a Google search can lead to a trojan infection and other scams. In the latest campaign, cybercriminals are impersonating DeepSeek, a popular artificial intelligence model, Malwarebytes researchers warn.
Read more about Fake DeepSeek ads spotted on Google: all you’ll find are malware infections
FacePass security lapse exposes users' identification data
FacePass, a Brazil-focused app used for identification purposes, has leaked over 1.6 million files.
Read more about FacePass security lapse exposes users' identification data
Chrome users under attack: dangerous zero-day discovered
Google has patched a dangerous zero-day vulnerability that has already been exploited by sophisticated threat actors in the wild. According to security researchers, Russian organizations were among the targets.
Read more about Chrome users under attack: dangerous zero-day discovered
Over 20% of commuting Americans say strangers peek at their devices in public
Significant amount of smartphone users involuntarely expose themselves to so-called shoulder surfing phenomenon.
Read more about Over 20% of commuting Americans say strangers peek at their devices in public
Signal head Meredith Whittaker defends messaging app's security after US war plan leak
The president of Signal Meredith Whittaker defended the messaging app's security on Tuesday after top Trump administration officials mistakenly included a journalist in an encrypted chatroom they used to discuss looming US military action against Yemen's Houthis.
Read more about Signal head Meredith Whittaker defends messaging app's security after US war plan leak
Data of 34M+ orders exposed in major Sydney Tools data leak
Sydney Tools, Australia’s Home Depot equivalent, has exposed data on tens of millions of online orders, revealing customer names, home addresses, and other details.
Read more about Data of 34M+ orders exposed in major Sydney Tools data leak
China-linked cybercriminals backdoor telecom provider in an espionage operation
A China-linked threat actor has secretly had access to a major telecom provider in Asia for years without leaving a trace.
Read more about China-linked cybercriminals backdoor telecom provider in an espionage operation
Troy Hunt has been pwned: phishers snatched 16,000 email addresses
Troy Hunt, a security consultant who runs the popular data-breach search service Have I Been Pwned, has disclosed that he’s the victim of a phishing attack that exposed the email addresses of 16,000 subscribers. Here’s what we can learn.
Read more about Troy Hunt has been pwned: phishers snatched 16,000 email addresses
Massive OPSEC oversight: top-secret Yemen war plans sent to journalist on Signal
Two hours before the first bombs started falling on Houthi targets across Yemen, Jeffrey Goldberg, editor-in-chief at the Atlantic, had been accidentally added to a secret Signal group with top Donald Trump cabinet members discussing the upcoming attacks.
Read more about Massive OPSEC oversight: top-secret Yemen war plans sent to journalist on Signal
Russian hackers shut down major Belgian websites
State-sponsored hackers from Russia have attacked several leading Belgian websites, including MyGov.be and the websites of the Walloon parliament and Wallonia-Brussels Federation.
Read more about Russian hackers shut down major Belgian websites
