Security

Massive investment fraud campaign leverages 17,000 fraudulent news sites

Scam sites are impersonating legitimate news websites, using native languages, major brands, and regional public figures to promote fake investment opportunities.
Read more about Massive investment fraud campaign leverages 17,000 fraudulent news sites

Your eSIM might not be as safe as you think: researchers hack and clone numbers

Researchers have successfully hacked a widely used chip that stores eSIM (embedded SIM) profiles, leaving billions of users vulnerable to SIM cloning, spoofing, spying on them, and related security implications.
Read more about Your eSIM might not be as safe as you think: researchers hack and clone numbers

Saudi industrial services group breached, hackers claim

Rezayat Group, a multibillion-dollar industrial services provider based in Saudi Arabia, has been posted on a dark web leak site. Hackers claim they’ve obtained several gigabytes of data from the company.
Read more about Saudi industrial services group breached, hackers claim

Estimating age with augmented cameras in tobacco shops is a no-go, CNIL says

The use of augmented cameras that can estimate the age of tobacco shop customers to prohibit the sale of cigarettes and other tobacco products to minors is neither necessary nor proportionate and, therefore, not allowed according to data protection and privacy laws.
Read more about Estimating age with augmented cameras in tobacco shops is a no-go, CNIL says

PewDiePie is driving self-hosting craze: how to protect your home server experiments?

Do you have an old laptop without a screen and other missing parts? That’s more than enough for a decent home server. Some folks even use Legos to build theirs. A recent shoutout from PewDiePie sent thousands of beginners diving into self-hosting for the first time. But beware of potential security disasters waiting to happen: don’t expose yourself to bots constantly scanning your IP.
Read more about PewDiePie is driving self-hosting craze: how to protect your home server experiments?

A simple radio hack can emergency stop any train in North America, researchers warn

End-of-train devices, installed on the rear of freight trains in North America to sense and control braking, are outdated and simplistic. Hackers can easily target them with plain text radio signals to send emergency braking commands.
Read more about A simple radio hack can emergency stop any train in North America, researchers warn

Hacker exploits Elmo’s X account, calls President Trump a “child f**ker,” and tells the world to “kill all Jews”

The iconic character from Sesame Street was hacked by an antisemitic attacker who used Elmo’s X account to rant about Jeffrey Epstein files and tell all Jews to die.
Read more about Hacker exploits Elmo’s X account, calls President Trump a “child f**ker,” and tells the world to “kill all Jews”

TikTok under new Irish investigation after admitting EU user data reached China

The Data Protection Commission (DPC) has announced that it will launch a new investigation into TikTok’s transfer of European users’ personal data to servers in China.
Read more about TikTok under new Irish investigation after admitting EU user data reached China

Hackers use GitHub to spread malware disguised as a free VPN

Attackers are weaponizing GitHub to deliver powerful infostealing malware under the guise of a free VPN.
Read more about Hackers use GitHub to spread malware disguised as a free VPN

Tech YouTuber visited by the FBI over KVMs: tiny devices become a security headache

IP-KVM (keyboard, video, and mouse over IP) devices are cheap and abundant, and hackers are finding it easier than ever to gain complete remote control of servers without raising alarms.
Read more about Tech YouTuber visited by the FBI over KVMs: tiny devices become a security headache

Alabama city hack exposed financial data and citizens, hackers claim

The City of Gardendale has appeared on a dark web forum that hackers use to showcase their latest victims. The threat actors claim to have obtained tens of gigabytes of sensitive data.
Read more about Alabama city hack exposed financial data and citizens, hackers claim

Major security flaws found in Adobe PDF reader and ASUS system controller

Your RGB controller and PDF reader almost became cyberattack launchpads, thanks to critical flaws just uncovered.
Read more about Major security flaws found in Adobe PDF reader and ASUS system controller

Hackers hide dangerous trojan in legitimate Mac apps, targeting developers

Hackers are bundling legitimate Mac tools with a ZuRu trojan, poisoning search results to advertise compromised packages and infecting unsuspecting users, SentinelOne warns.
Read more about Hackers hide dangerous trojan in legitimate Mac apps, targeting developers

Security pros run a 36-hour war room to close a critical DeFi backdoor, likely installed by North Korean hackers

Security researchers said they've closed a critical backdoor on "thousands" of smart contracts before a threat actor managed to hit a large target.
Read more about Security pros run a 36-hour war room to close a critical DeFi backdoor, likely installed by North Korean hackers

Former US Army Lt. Col. sent defense secrets over dating site to Ukrainian love interest

A former US Army Lieutenant Colonel pleaded guilty on Thursday to sending his Ukrainian "girlfriend" classified defense secrets over a foreign dating site during the height of the Russian invasion.
Read more about Former US Army Lt. Col. sent defense secrets over dating site to Ukrainian love interest

Hackers are weaponizing open-source. Developers are swallowing the bait

Open-source code is open to everyone – including hackers – and with malware booming, experts warn that it’s time to watch your back.
Read more about Hackers are weaponizing open-source. Developers are swallowing the bait

Breach of legendary Chicago radio station exposes financial data, contracts, hackers claim

WFMT, a well-known Chicago-based radio station, was allegedly breached by a hacker group. The attackers claim they’ve taken a trove of sensitive personal and business information.
Read more about Breach of legendary Chicago radio station exposes financial data, contracts, hackers claim

Post-quantum cryptographic inventory – the latest PQC buzzword and why you need to know it

As the security industry braces itself for a post-quantum world – and the dreaded changeover of pretty much every piece of encrypted technology in existence – there's a new buzzword coming to town, and it's called “cryptographic inventory.” Cybernews explains what it is and why you'll be hearing about it for the next 10 years.
Read more about Post-quantum cryptographic inventory – the latest PQC buzzword and why you need to know it

Qantas offers more clarity on recent data breach

Australian airline Qantas has shared more details on the recent cybersecurity incident that affected the company.
Read more about Qantas offers more clarity on recent data breach

“Thanks for gathering my private calls!” Users skeptical about FaceTime’s beta privacy feature

While still in beta, the feature has already received some backlash, despite its good intentions.
Read more about “Thanks for gathering my private calls!” Users skeptical about FaceTime’s beta privacy feature