Security
Shipping labels reveal addresses in major fashion leak
Apparel Group, a fashion and lifestyle titan distributing Adidas, Asics, Levi‘s, and other world-renowned brands, has leaked several million shipping labels.
Read more about Shipping labels reveal addresses in major fashion leak
Shape-shifting Chrome extensions target wallets, no fix in sight
Malicious browser extensions have the ability to change into legitimate-looking password managers and digital wallets, stealing valuable user information.
Read more about Shape-shifting Chrome extensions target wallets, no fix in sight
Mass federal layoffs will have a "devastating" impact on cybersecurity, former top US security official says
The mass culling of workers from federal payrolls will have a "devastating" impact on cybersecurity and national security, a top former National Security Agency official said on Wednesday.
Read more about Mass federal layoffs will have a "devastating" impact on cybersecurity, former top US security official says
Massive exposure: 42K machines running VMware ESXi affected by exploited zero-days
Hackers are already exploiting three critical zero-days affecting VMware ESXi virtualization software. Public scans reveal that as of March 5th, 2025, at least 41,450 servers and systems were exposed, leaving businesses worldwide vulnerable.
Read more about Massive exposure: 42K machines running VMware ESXi affected by exploited zero-days
Top security CEOs warn your voicemail greeting is the latest target for cybercriminals
Several of the country’s top cybersecurity CEOs say the biggest threat to personal security today is the voicemail greeting recorded on your smartphone.
Read more about Top security CEOs warn your voicemail greeting is the latest target for cybercriminals
Dozen China-backed US Treasury hackers indicted by US disrupting years-long cyber campaign
A dozen Chinese nationals are indicted by the US Department of Justice (DoJ) on Wednesday for a years-long hacking campaign targeting critical infrastructure – including on US Treasury – and then selling the data, all with the backing of the Chinese government.
Read more about Dozen China-backed US Treasury hackers indicted by US disrupting years-long cyber campaign
Pre-installed Android malware BADBOX gets a 2.0 update, infects 1M devices
The infamous botnet BADBOX has received a major upgrade. Malware version 2.0 now affects over one million consumer devices, phoning to China and waiting for attack instructions. This malware comes preinstalled with cheap, off-brand Android devices.
Read more about Pre-installed Android malware BADBOX gets a 2.0 update, infects 1M devices
Could Europe's Eutelsat help to replace Starlink in Ukraine?
Suggestions that Ukraine could lose access to Elon Musk's Starlink satellite internet system, which has been vital in maintaining its military communications as it fights Russia's invasion, have focused investor interest on Starlink's smaller European rival Eutelsat.
Read more about Could Europe's Eutelsat help to replace Starlink in Ukraine?
¡appa! app leak puts million Argentinians at risk
Over a million shoppers in Argentina were left exposed and vulnerable to fraud when the ¡appa! app leaked their private purchase information.
Read more about ¡appa! app leak puts million Argentinians at risk
Broadcom urges clients to update software in response to 3 zero-days
Three critical VMware zero-days could let attackers escape virtual machines and seize control – raising alarms of cyber espionage and deep infiltration.
Read more about Broadcom urges clients to update software in response to 3 zero-days
Thales warns governments over reliance on Starlink-type systems
The head of one of Europe's largest satellite manufacturers, France-based Thales, has highlighted the risks to governments of relying too heavily on private satellite constellations in an apparent warning over Elon Musk's Starlink.
Read more about Thales warns governments over reliance on Starlink-type systems
LinkedIn email scam runs undetected for months: fake invitations hide a trojan
Cybercriminals are spoofing LinkedIn email notifications with fake invitations, bypassing existing security measures. If users choose to reply to convincing opportunities, they’ll be served a ConnectWise remote access trojan (RAT) installer.
Read more about LinkedIn email scam runs undetected for months: fake invitations hide a trojan
Devs beware: fake Golang packages target Mac users
An active malware campaign has infiltrated the Golang ecosystem, targeting financial sector developers who prefer to code using Linux or macOS.
Read more about Devs beware: fake Golang packages target Mac users
YouTube confirms what Redditors have been saying all along – scammers are exploiting private videos to hack creators
Hackers have been sending fake emails that include deepfake videos of YouTube’s CEO to announce fake changes to YouTube’s monetization – only to hack into creators’ accounts.
Read more about YouTube confirms what Redditors have been saying all along – scammers are exploiting private videos to hack creators
Eleven11bot botnet is nearly three times bigger than initial estimates
Security cameras, network video recorders, and other IoT devices are part of a newly discovered global botnet that attacks telecoms and online forums.
Read more about Eleven11bot botnet is nearly three times bigger than initial estimates
Hackers spam GitHub with fake cracks, mods, and cheats that deliver infostealers
Cybercriminals are exploiting GitHub in a large-scale scam operation, generating thousands of similar-looking fraudulent repositories. The hackers disguise them as cracked software, game aimbots, mods, or other “free downloads” just to infect users with infostealers and hijack sensitive credentials and crypto.
Read more about Hackers spam GitHub with fake cracks, mods, and cheats that deliver infostealers
AI learning from bad code: DeepSeek training data contains 12,000 live credentials
Security researchers have scanned a massive dataset used to train DeepSeek and other AI models and found almost 12,000 live secret credentials, exposing their respective services.
Read more about AI learning from bad code: DeepSeek training data contains 12,000 live credentials
Democrats question pause in offensive US cyber ops against Russia
Democratic lawmakers are demanding an explanation from the Pentagon over an order to pause offensive cyber operations against Russia during negotiations aimed at ending the war in Ukraine.
Read more about Democrats question pause in offensive US cyber ops against Russia
Lost luggage leaked data: nearly a million private records exposed
When luggage goes missing, it’s not just an inconvenience – it could be a gateway for cybercriminals to steal your identity.
Read more about Lost luggage leaked data: nearly a million private records exposed
They hack to sell: the gateway to your corporate network could already be on the dark web
Cybercriminals’ tactics are evolving faster than organizations can adapt, keeping them stuck in a “breach, apologize, repeat” cycle, a security expert says.
Read more about They hack to sell: the gateway to your corporate network could already be on the dark web
