Security
Who is the gang behind Marks & Spencer and Harrods hacks?
Scattered Spider, the cybercrime gang behind the recent Marks & Spencer hack, has been sharpening its phishing campaigns to attack big businesses.
Read more about Who is the gang behind Marks & Spencer and Harrods hacks?
Largest ever data leak exposes over 4 billion user records
In what’s likely the biggest data leak to ever hit China, billions of documents with financial data, WeChat and Alipay details, as well as other sensitive personal data, were exposed to the public.
Read more about Largest ever data leak exposes over 4 billion user records
Ukraine claims it stole 4GB of secret data from Russian aviation giant Tupolev
Ukraine’s Main Intelligence Directorate (HUR) claims it carried out a successful cyberattack on Tupolev, a leading Russian company developing strategic bombers for the military.
Read more about Ukraine claims it stole 4GB of secret data from Russian aviation giant Tupolev
Hackers abuse modified Salesforce app to steal data, extort companies, Google says
Hackers are gaining access to Salesforce cloud services and extorting data from US and EU companies by vishing employees to install a modified Salesforce-related app, according to new research by Googl'e Mandiant. .
Read more about Hackers abuse modified Salesforce app to steal data, extort companies, Google says
CEOs now learning self-defence to protect against cyber threats
It’s unsurprising that executives are increasingly targeted by cybercriminals. What is rather unusual is that they’re now learning martial arts to protect themselves.
Read more about CEOs now learning self-defence to protect against cyber threats
Hacker claims millions affected in Claro, Movistar breach — Claro calls it fake
A hacker has claimed to be sitting on tens of millions of stolen telecom records from Claro and Movistar. Claro rejects breach claims.
Read more about Hacker claims millions affected in Claro, Movistar breach — Claro calls it fake
Hackers can turn Chrome into spyware using a few simple commands
Hackers can abuse Google Chrome and other Chromium browsers to continuously take screenshots, spy through the camera, and record microphone audio.
Read more about Hackers can turn Chrome into spyware using a few simple commands
Hackers claim massive data breach at American Hospital Dubai
A ransomware gang has claimed that it stole 450 million records from patients of one of Dubai’s most prestigious hospitals, and they’re threatening to leak them.
Read more about Hackers claim massive data breach at American Hospital Dubai
Cyprus Airways’ customer data, systems breached, hackers claim
Cyprus’s flag carrier’s systems have allegedly been breached, with attackers getting extensive information on the airline's passengers, including their names, emails, and travel histories.
Read more about Cyprus Airways’ customer data, systems breached, hackers claim
Meta, Yandex caught using tracking tech that de-anonymizes Android users
Security researchers have unveiled a novel tracking method used by Meta and Yandex that effectively de-anonymizes billions of Android users when they browse the web, even using Incognito mode. The tech giants’ apps secretly listen for data from websites through “localhost” connections.
Read more about Meta, Yandex caught using tracking tech that de-anonymizes Android users
Cyber pros sound alarm bells: this vibe coding app is seriously flawed
Lovable, a popular example of the so-called vibe-coding platforms, allowed unauthorized users to access sensitive user information.
Read more about Cyber pros sound alarm bells: this vibe coding app is seriously flawed
Hackers milking fake Booking.com sites to plant malware
In a new campaign, cybercriminals disseminate malicious links on gaming sites and social media and even buy sponsored ads on search engines to trick users into opening fraudulent websites impersonating Booking.com.
Read more about Hackers milking fake Booking.com sites to plant malware
Luxury brand Cartier confirms it was hacked, customer data stolen
The French luxury house, known for putting diamonds on the wrists of royalty and billionaires, has been breached. The company warned customers to stay vigilant.
Read more about Luxury brand Cartier confirms it was hacked, customer data stolen
Over 8M records with US patient medical data have been spilled online
The records of 2.7 million patients and 8.8 million appointments have been left publicly accessible online.
Read more about Over 8M records with US patient medical data have been spilled online
Critical Chrome update: hackers are exploiting a dangerous zero-day
Google has issued an emergency Chrome update and warned that hackers are already exploiting a dangerous zero-day vulnerability. Attackers can craft malicious websites that compromise users just by visiting.
Read more about Critical Chrome update: hackers are exploiting a dangerous zero-day
Volkswagen Group investigates hacker data breach claims
So far, the company has not spotted any breached systems or exposed customer data.
Read more about Volkswagen Group investigates hacker data breach claims
These Androids come preloaded with apps that are very easy to hack
Ulefone and Krüger&Matz smartphones are sold preloaded with apps that attackers can abuse to factory reset the devices, steal PIN codes, and even gain some system-level access, according to CERT Polska’s disclosure.
Read more about These Androids come preloaded with apps that are very easy to hack
Your passwords run a secret economy in the Russian crime scene
Your passwords, logged by infostealers, are being traded on a thriving Russian underground marketplace, sometimes for as little as $2.
Read more about Your passwords run a secret economy in the Russian crime scene
GitHub MCP vulnerability has far-reaching consequences
On May 26th, a new prompt injection security weakness was reported in GitHub's official Model Context Protocol (MCP) server – the infrastructure that allows artificial intelligence (AI) coding assistants to read from and write to your GitHub repositories.
Read more about GitHub MCP vulnerability has far-reaching consequences
Hackers make Sonos Era 300 speakers play unwanted tunes: severe RCE flaw discovered
Sonos Era 300 smart speakers contain a severe flaw that enables unauthenticated hackers to take complete control of the device and run arbitrary code, Trend Micro’s Zero Day Initiative (ZDI) researchers warn.
Read more about Hackers make Sonos Era 300 speakers play unwanted tunes: severe RCE flaw discovered
