Security
Hackers claim Canada Goose breach but researchers reveal data is “several years old”
Canada Goose, a major luxury winter clothing maker, has been targeted by hackers. The company’s data was shared on a popular data-leak forum, but Cybernews researchers believe it is several years old.
Read more about Hackers claim Canada Goose breach but researchers reveal data is “several years old”
Barron's top investment advisors threatened with 48-hour ultimatum "don't be the next headline”
ShinyHunters, an infamous extortion gang, is giving two elite US investment advisors 48 hours before it dumps millions of allegedly sensitive client records online.
Read more about Barron's top investment advisors threatened with 48-hour ultimatum "don't be the next headline”
Palo Alto sets a dangerous precedent: are we now so scared of China?
Some are calling out cowardice, others say it’s all very pathetic. One thing is clear, though: Palo Alto’s decision not to tie Beijing to a hacking campaign for fear of retaliation shows how firm China’s grip is. Is the West now so scared of angering the Chinese government?
Read more about Palo Alto sets a dangerous precedent: are we now so scared of China?
Shelly to release firmware update to address flaw in smart home devices
Smart home manufacturer Shelly says it will release a firmware update next week to automatically disable unsecured setup access points on its Gen 4 devices, following scrutiny from security researchers, who still believe this amounts to a “flaw.”
Read more about Shelly to release firmware update to address flaw in smart home devices
Developer drops tool for spying on neighbors’ Bluetooth signals
One privacy enthusiast has built a tool to monitor your neighbors' nearby Bluetooth signals, demonstrating how easily everyday convenience can be exploited for covert spying. Having Bluetooth enabled is like constantly broadcasting your name to anyone within roughly 50 meters.
Read more about Developer drops tool for spying on neighbors’ Bluetooth signals
Lapsus$ gang claims Adidas breach, company confirms investigation
The Lapsus$ hacking gang claims to have breached Adidas Extranet, accessing data such as user names, passwords, and extensive technical information. The threat actor also said that “something bigger” is coming soon. Adidas confirmed it was investigating the incident.
Read more about Lapsus$ gang claims Adidas breach, company confirms investigation
Odido hackers pretended to be an IT employee to breach corporate system
The attackers who stole the personal data of 6.2 million Odido customers used social engineering and phishing attacks to gain access to the company’s relationship management system, according to anonymous sources.
Read more about Odido hackers pretended to be an IT employee to breach corporate system
Chrome browsers under attack as Google releases emergency patch for zero-day exploit
Google has released an emergency fix for a Chrome vulnerability that has already been exploited in the wild — the first of its kind to be reported this year.
Read more about Chrome browsers under attack as Google releases emergency patch for zero-day exploit
Bitwarden announces Cupid Vault secure password-sharing feature for free users
Password manager Bitwarden has announced a new feature to share passwords with trusted people: Cupid Vault.
Read more about Bitwarden announces Cupid Vault secure password-sharing feature for free users
El Paso airspace lockdown sparks UFO speculation and Reddit frenzy
El Paso airspace lockdown sparks UFO speculation and Reddit frenzy This week, The Cosmic Report rounds up three convergent stories detailing El Paso airspace lockdowns, Soviet space-age enigmas, and legendary UAP encounters.
Read more about El Paso airspace lockdown sparks UFO speculation and Reddit frenzy
Heartbreaking trend rocks Arizona: people in search of love losing $44M yearly
Today, you might receive a love message, but it could leave you more miserable than getting nothing at all.
Read more about Heartbreaking trend rocks Arizona: people in search of love losing $44M yearly
Millions of smart homes at risk as Shelly flaw lets hackers open doors and garages
Ethical hackers have uncovered a flaw in a new generation of popular smart-home devices that could allow someone standing outside a property to open the owners’ doors, garages, or gates via WiFi.
Read more about Millions of smart homes at risk as Shelly flaw lets hackers open doors and garages
Hefty sanctions against Louis Vuitton, Christian Dior and Tiffany: luxury brands fined billions for massive data leaks
South Korea has fined the local units of three luxury brands 36 billion won ($24.9 million), warning that convenience must not come at the expense of personal data protection.
Read more about Hefty sanctions against Louis Vuitton, Christian Dior and Tiffany: luxury brands fined billions for massive data leaks
AI getting vindictive: OpenClaw agent attacks developer who rejected its code
An engineer has learned what happens when you reject code proposed by a random OpenClaw AI agent on GitHub. The rogue AI didn’t take it lightly – it lashed out at the developer, published a blog post, called him “gatekeeper,” and blackmailed him to accept the code.
Read more about AI getting vindictive: OpenClaw agent attacks developer who rejected its code
IcedID malware creator fakes own death to escape FBI, still gets busted
Sensing that law enforcement was onto him, a Ukrainian suspect who developed and managed the IcedID malware botnet faked his own death in an attempt to escape extradition to the US. It worked, but only for a while.
Read more about IcedID malware creator fakes own death to escape FBI, still gets busted
23 victims freed from scam slavery: death and organ harvesting for missed quotas
They were promised scholarships and tech jobs. Instead, these young people ended up in scam factories in Southeast Asia, where they were forced to defraud strangers or face torture.
Read more about 23 victims freed from scam slavery: death and organ harvesting for missed quotas
Personal data of 6.2M Odido customers breached
The Dutch branch of Odido has been hit by a cyberattack, exposing personal information of over 6.2 million customers
Read more about Personal data of 6.2M Odido customers breached
Security experts warn Discord age checks create "identity honey pot" as teens find bypasses
Red teamers warn that Discord’s push toward stricter safety controls is colliding with a familiar truth: when platforms build barriers, users look for ways around them, and attackers look for ways in.
Read more about Security experts warn Discord age checks create "identity honey pot" as teens find bypasses
Claude AI assistant is one calendar invite away from total system compromise
Hacking now is as simple as sending a calendar invite. Security researchers have discovered a critical vulnerability in Claude Desktop Extensions that allows attackers to take over the system without any user interaction.
Read more about Claude AI assistant is one calendar invite away from total system compromise
Europe's risky reliance on US tech
Europe loves to talk about digital autonomy. But a quick look at its infrastructure tells a very different story. A significant chunk of Europe's digital economy, from cloud platforms and productivity software to data services, runs on technology owned, operated, and ultimately governed in the US.
Read more about Europe's risky reliance on US tech
