Security
Crunchbase confirms hack by ShinyHunters, 2M records up for grabs
Crunchbase, a predictive private company intelligence platform, has confirmed a data breach after the notorious ShinyHunters cybercrime group published files supposedly stolen from its systems.
Read more about Crunchbase confirms hack by ShinyHunters, 2M records up for grabs
14M Panera Bread customer records leaked: What do we know so far?
Hackers have claimed responsibility for a cyberattack against Panera Bread, a major American restaurant chain, that allegedly resulted in the leak of millions of customer and employee records.
Read more about 14M Panera Bread customer records leaked: What do we know so far?
State employee in Texas? You're now banned from using Shein, Alibaba products
Texas will bar its employees from using Shein, Alibaba and TP-Link hardware and software, the governor said in a statement on Monday, saying his state made the decision to protect the "privacy of Texans" from the Chinese government.
Read more about State employee in Texas? You're now banned from using Shein, Alibaba products
North Koreans now using AI-generated PowerShell backdoor to target devs
Konni, a North Korean threat actor, has been using PowerShell malware generated using AI tools to attack developers and engineering teams in the blockchain sector. The phishing campaign has targeted users in Japan, Australia, and India.
Read more about North Koreans now using AI-generated PowerShell backdoor to target devs
Data of 146K users leaked as hackers claim Edmunds breach
Edmunds, a major American car shopping platform, has allegedly been breached by the infamous ShinyHunters cybergang.
Read more about Data of 146K users leaked as hackers claim Edmunds breach
Prisons seize inmate laptops over security flaw
The Dutch Ministry of Justice and Security has confiscated over a hundred laptops from prisoners and inmates in secure psychiatric units due to a security vulnerability.
Read more about Prisons seize inmate laptops over security flaw
Hack exposed kids’ data, Swedish sports software firm fined €565K
SportAdmin, a Swedish software supplier to sports clubs, has been fined €565,000 for failing to provide an appropriate level of security to protect personal data.
Read more about Hack exposed kids’ data, Swedish sports software firm fined €565K
Germany’s Bundesbank sees 5,000 cyber attacks per minute
The bank is under a relentless digital storm, with cyberattacks coming in by the millisecond. Officials call the situation “never-ending” and vow to counterstrike.
Read more about Germany’s Bundesbank sees 5,000 cyber attacks per minute
Hilton pulled into Cl0p’s dark‑web hit list: hotel giant denies
A notorious ransomware gang has claimed it has a new trophy. This time, it’s Hilton.
Read more about Hilton pulled into Cl0p’s dark‑web hit list: hotel giant denies
Encryption illusion: Microsoft shared keys with FBI, leaving user data vulnerable
Last year, Microsoft handed over encryption keys for its hard drive encryption software BitLocker to the FBI. The company says it simply complied with a search warrant related to a fraud investigation in Guam, but the news has raised alarm among the cybersecurity community.
Read more about Encryption illusion: Microsoft shared keys with FBI, leaving user data vulnerable
Nike data breach: Hackers post company data, but what do we know so far?
Attackers have leaked 1.4TB of what they claim is Nike data, including nearly 190,000 unique files. The Cybernews research team believes the data could be legitimate.
Read more about Nike data breach: Hackers post company data, but what do we know so far?
India hit by China-linked phishing campaign, unleashes malware to create long-term spy backdoor
A newly-uncovered espionage campaign aimed at targeted individuals is using phishing emails that impersonate the Government of India.
Read more about India hit by China-linked phishing campaign, unleashes malware to create long-term spy backdoor
Cybercrooks are now creating live, personalized phishing pages in real time
At first glance, it’s a normal and harmless webpage, but it’s able to transform into a phishing site after a user has already loaded it. In a matter of a few seconds, AI carefully crafts a landing page specifically for the victim, thus turning it into an online crime scene.
Read more about Cybercrooks are now creating live, personalized phishing pages in real time
Major leak exposes 149M credentials with Instagram, OnlyFans, TikTok passwords
An open database, likely storing data from credential-stealing malware, has exposed tens of millions of credentials. The data includes logins and passwords for popular services such as Facebook, Gmail, Netflix, Binance, and many others, researchers claim.
Read more about Major leak exposes 149M credentials with Instagram, OnlyFans, TikTok passwords
Was Nike hacked? Attackers threaten to leak apparel giants’ data
Nike, the American apparel behemoth, may have suffered a data breach. A prominent cybercriminal gang claims it has hacked the company and is threatening to release stolen data to the public.
Read more about Was Nike hacked? Attackers threaten to leak apparel giants’ data
Spyware disguised as ChatGPT is harvesting data from 1.5M VS Code developers
A massive file harvesting campaign is ongoing, targeting VS Code developers. Over 1.5 million users have downloaded knock-off extensions that function like AI coding assistants but are also bristling with spyware.
Read more about Spyware disguised as ChatGPT is harvesting data from 1.5M VS Code developers
This will get you hacked: trusting AI deepfakes, pop-ups, fake security alerts, and evolving malware
While not everyone can be conned into thinking Aquaman has fallen in love with them via Facebook, our research round-up this week highlights just how convincing some of these scams can be, thanks to AI.
Read more about This will get you hacked: trusting AI deepfakes, pop-ups, fake security alerts, and evolving malware
Europe wants "sovereign cloud" - but can it really protect data from US?
The sovereign cloud is Europe’s answer to digital independence, protecting data, AI, and critical systems from foreign control, regulatory conflicts, and geopolitical risks.
Read more about Europe wants "sovereign cloud" - but can it really protect data from US?
From consumer auto to police vehicles: hackers showed how little data enables car tracking
The Cybernews team, together with security researcher Sam Curry and automotive hacker BusesCanFly, did an eye-opening experiment and revealed just how simple it can be for cybercriminals to remotely access, track, unlock, even start and stop, not only today’s connected cars, but ambulances, police vehicles, and large commercial fleets. The filmed experiment shows what modern vehicle hacking really looks like.
Read more about From consumer auto to police vehicles: hackers showed how little data enables car tracking
Security expert explains why he’s reluctant to drive an older Tesla (or any car made before 2014)
An exclusive Cybernews video experiment, in collaboration with security researcher Sam Curry and automotive hacker BusesCanFly, reveals an unsettling truth about how easy it is for criminals to remotely access, track, and even control your vehicle.
Read more about Security expert explains why he’s reluctant to drive an older Tesla (or any car made before 2014)
