Security
Adult site Frivol.com data leak reveals users registered using work emails
The user-made adult content website accidentally left a private database open, spilling 479,000 unique user emails. While leaking email addresses is typically low on the cybersecurity risk scale, adult sites play by different rules.
Read more about Adult site Frivol.com data leak reveals users registered using work emails
Odido telecom hackers threaten to leak 21M user records
Odido, the largest mobile phone company in the Netherlands, may soon see sensitive data from millions of its customers leaked online, the ShinyHunters attacker group claims on the dark web.
Read more about Odido telecom hackers threaten to leak 21M user records
ShinyHunters reveals +5M records after Wall Street ignores "final warning"
After giving a 48-hour ultimatum, ShinyHunters, an infamous extortion gang, dumped millions of records tied to two Wall Street powerhouses onto the dark web. The leaked data includes contracts and clients’ personal data.
Read more about ShinyHunters reveals +5M records after Wall Street ignores "final warning"
Amateur attacker uses AI toolkits, including Claude and Deepseek, to hack Fortinet firewalls
Commercial AI services are enabling even unsophisticated threat actors to conduct cyberattacks at scale. This time, a Russian-speaking threat actor leveraged AI tools to compromise more than 600 Fortinet firewalls in a single month.
Read more about Amateur attacker uses AI toolkits, including Claude and Deepseek, to hack Fortinet firewalls
Microsoft: ‘OpenClaw unsuited to run on standard personal or enterprise workstation’
Microsoft’s AI assistant OpenClaw should not be operated on a standard personal or enterprise workstation, as it has limited built-in security controls. Therefore, it should only be deployed in a fully isolated environment.
Read more about Microsoft: ‘OpenClaw unsuited to run on standard personal or enterprise workstation’
ICO wins court of appeal battle: “Organizations must protect all personal data they process, regardless of how it might be used by hackers”
The UK’s data watchdog, the Information Commissioner’s Office (ICO), has won an important Court of Appeal ruling against retailer DSG, keeping a £500,000 fine in place over a major cyberattack.
Read more about ICO wins court of appeal battle: “Organizations must protect all personal data they process, regardless of how it might be used by hackers”
LA County sues Roblox: “Roblox has created a world where adults and children mingle with little functional oversight.”
The County of Los Angeles has filed a lawsuit against the social media gaming platform Roblox for failing to protect children from predatory behavior.
Read more about LA County sues Roblox: “Roblox has created a world where adults and children mingle with little functional oversight.”
Old Android can be repurposed into a powerful OpenClaw AI assistant
The open-source AI personal assistant OpenClaw took the internet by storm, sending thousands of enthusiasts to buy Mac minis to run their own instance. However, an old Android phone can also do the same task, and even enable OpenClaw to make calls, take photos, or record audio.
Read more about Old Android can be repurposed into a powerful OpenClaw AI assistant
PayPal breach went undetected for six months, exposing Social Security numbers
PayPal has been sending data breach notification letters to customers affected by a recently discovered “cyber incident” dating back to 2025, in which an unknown attacker was found lurking in its systems for nearly six months.
Read more about PayPal breach went undetected for six months, exposing Social Security numbers
Microsoft admits Copilot reads protected emails, rushes worldwide updates
Microsoft has admitted that, for weeks, its AI assistant Copilot slipped past confidentiality labels and read emails it was never meant to see.
Read more about Microsoft admits Copilot reads protected emails, rushes worldwide updates
Wynn Resorts braces for “final warning” as attackers allege data breach
A notorious hacking group has targeted the US luxury casino empire and claims to hold 800,000 sensitive records. Wynn Resorts has confirmed the breach.
Read more about Wynn Resorts braces for “final warning” as attackers allege data breach
The wild claims that might not be so wild after all about Chinese spy vapes
On top of the obvious damage to your lungs, heart, and brain, your “cool” smart vape can also be used to spy on you. Apparently, to such an extent that the US government is calling it a threat to national security.
Read more about The wild claims that might not be so wild after all about Chinese spy vapes
Be careful when searching for Mac software: new campaign abuses Google ads to peddle malware
Hackers have hijacked at least 35 Google Advertiser accounts, launching more than 200 malicious ads targeting Mac users seeking 7-Zip, Notepad++, LibreOffice, Final Cut Pro, and other popular software. A click on the top search result might lead to a malware infection, Bitdefender warns.
Read more about Be careful when searching for Mac software: new campaign abuses Google ads to peddle malware
Dutch Public Prosecution Service receives 118 reports following massive data breach at Clinical Diagnostics
During an investigation into a data breach at Clinical Diagnostics, a total of 118 victims have filed reports with the Dutch Public Prosecution Service.
Read more about Dutch Public Prosecution Service receives 118 reports following massive data breach at Clinical Diagnostics
FBI warns that hackers are forcing ATMs to spit out cash in rising jackpotting attacks
The FBI is sounding the alarm over a surge in malware-enabled “jackpotting” attacks that let hackers force ATMs to spit out stacks of cash on command – no card, no PIN required.
Read more about FBI warns that hackers are forcing ATMs to spit out cash in rising jackpotting attacks
Adult toy manufacturer Tenga informs customers of data breach
Japanese sex toy maker Tenga has notified its American customers of a data breach after a hacker managed to gain access to an employee’s mailbox.
Read more about Adult toy manufacturer Tenga informs customers of data breach
Accenture warns malicious insider activity is escalating as dark web recruitment surges
Layoffs and the cost-of-living crisis are fueling insider threats, with “droves” of employees seeking to sell knowledge and company logins on the dark web.
Read more about Accenture warns malicious insider activity is escalating as dark web recruitment surges
Poland shoos smart Chinese cars away from military facilities
Seeking to protect the country’s military facilities from potentially giving away sensitive data, Poland’s Ministry of Defense has banned Chinese smart cars – armed with loads of video and audio recorders – from entering them.
Read more about Poland shoos smart Chinese cars away from military facilities
TP-Link routers sued by Texas: here’s what happened
Texas is taking one of the nation’s most popular router brands to court, accusing TP-Link of links with China.
Read more about TP-Link routers sued by Texas: here’s what happened
Android AI app exposes nearly 2M user images and videos: anyone can watch your videos
An AI app promising cinematic makeovers for your selfies has exposed nearly two million private photos and videos instead.
Read more about Android AI app exposes nearly 2M user images and videos: anyone can watch your videos
