May 2025
216 posts. Browse all months
- Deloitte Data Breach: Alleged Leak of Source Code & GitHub Credentials
A threat actor allegedly breached Deloitte’s systems, leaking GitHub credentials and source code from internal projects. This incident adds to Deloitte’s …
- Prominent private hospital group in South Africa hacked – MyBroadband
Mediclinic Southern Africa, a prominent private hospital group, was hacked by the cyber extortion gang Everest Group, which claims to have exfiltrated 4GB of …
- 184 Million Passwords Leaked for Google, Facebook, Instagram and More. How to Protect Your Accounts - CNET
A database leak containing 184 million passwords from various platforms, including Google, Facebook, and Instagram, has been exposed. To protect yourself, …
- Over 364,000 people have personal info leaked following hack on data broker LexisNexis | TechRadar
The article describes a data breach at LexisNexis, a data analytics and risk management firm. The breach affected 364,333 individuals, with personal …
- Massive data leak exposes 1.6 million Etsy and other TikTok shop customer details - here’s what we know | TechRadar
The article describes a data leak that exposed 1.6 million files containing personal information of customers from Etsy, Poshmark, and TikTok Shop. The data …
- Bad Actors Target Gen Z With Pop Culture Bait
Cybercriminals are using pop culture, particularly anime and streaming services, to lure Gen Z users into compromising their devices and handing over …
- What the UK’s New Cyber Resilience Bill Means for Businesses—and How to Stay Ahead | Tripwire
The UK’s new Cyber Security and Resilience Bill aims to enhance the country’s digital resilience by updating outdated regulations and addressing evolving cyber …
- China-linked APT UNC5221 started exploiting Ivanti EPMM flaws shortly after their disclosure
China-linked APT group UNC5221 exploited two Ivanti EPMM flaws, CVE-2025-4427 and CVE-2025-4428, to target critical sectors across Europe, North America, and …
- CISA flags Commvault zero-day as part of wider SaaS attack campaign | CSO Online
Threat actors exploited a zero-day vulnerability in Commvault’s Metallic SaaS application to access client secrets and gain unauthorized access to M365 …
- 52% of SOC Teams Are Overworked, New Report Shows | Security Magazine
A Splunk report reveals that 52% of SOC teams are overworked, struggling to manage alerts and data management. Implementing a unified platform led to quicker …
- Researchers Drop PoC for Fortinet CVE-2025-32756, Urging Quick Patching
Researchers have released a proof of concept for CVE-2025-32756, a severe stack-based buffer overflow vulnerability actively exploited in Fortinet products. …
- Breaking RSA encryption just got 20x easier for quantum computers | CSO Online
New research from Google Quantum AI shows that a one-million-qubit quantum computer could crack RSA-2048 encryption by 2030, significantly faster than previous …
- The CIA Secretly Ran a Star Wars Fan Site
An amateur security researcher, Ciro Santilli, uncovered a network of CIA websites, including a Star Wars fan site, used for covert communication with …
- Over 70 Malicious npm and VS Code Packages Found Stealing Data and Crypto
Over 70 malicious npm and Visual Studio Code (VS Code) packages were discovered, stealing data and cryptocurrency. The packages, published under three …
- Over 91% of companies sacrifice hybrid cloud security in the AI adoption rush | CSO Online
The article describes the security challenges faced by companies adopting AI in hybrid cloud environments. The article highlights that 91% of organizations …
- Hackers Use TikTok Videos to Distribute Vidar and StealC Malware via ClickFix Technique
Hackers are using TikTok videos to distribute malware, specifically Vidar and StealC, through a social engineering technique called ClickFix. The videos …
- BadSuccessor Exploits Windows Server 2025 Flaw for Full AD Takeover
The article describes a critical vulnerability in Windows Server 2025 that allows attackers to gain full control over any user account in an Active Directory …
- Silent Ransom Group targeting law firms, the FBI warns
The FBI warns that the Silent Ransom Group, active since 2022, has targeted U.S. law firms using phishing and social engineering tactics. The group, also known …
- Hackers Use Fake VPN and Browser NSIS Installers to Deliver Winos 4.0 Malware
Hackers are using fake software installers for popular tools like LetsVPN and QQ Browser to deliver the Winos 4.0 malware. The malware, known as Catena, uses a …
- Initial Access Brokers Targeted in Operation Endgame 2.0
Law enforcement agencies worldwide took down 300 servers and neutralized 650 domains linked to various malware strains, including Bumblebee, Lactrodectus, …
- Reconnaissance Campaign Active on NPM Repository
A hacking campaign is spreading malicious reconnaissance scripts through the npm repository, exfiltrating data like hostnames, IP addresses, and DNS …
- Operation RapTor led to the arrest of 270 dark web vendors and buyers
Operation RapTor, an international law enforcement action, resulted in the arrest of 270 dark web vendors and buyers across ten countries. The operation, which …
- Nova Scotia Power victim of ‘sophisticated ransomware attack'
This report on the Nova Scotia Power ransomware incident serves as a critical reminder of the vulnerabilities even in our essential infrastructure. The …
- Massive data breach exposes 184 million passwords for Google, Microsoft, Facebook, and more | ZDNET
This ZDNet piece highlights yet another significant exposure, this time an unsecured database containing over 184 million unique credentials, including …
- Phishing campaign impersonates Booking.com, delivers a suite of credential-stealing malware
A phishing campaign impersonating Booking.com targets hospitality organizations, using the ClickFix technique to trick users into downloading malware. The …
- Europe’s Entry/Exit System (EES) Guide Spain « Euro Weekly News
The article describes the new EU visa requirements for travelers entering Europe. Starting April 2, 2025, travelers will need an electronic travel …
- Windows Server Flaw a Shortcut to Privilege Escalation
A newly identified, unpatched vulnerability in Windows Server 2025, dubbed “BadSuccessor” by Akamai researchers, presents a significant security risk. This …
- Credit Washing and Synthetic ID Fraud Hit All-Time High
Synthetic identity and credit washing fraud are escalating, hitting record highs. Fraudsters are adeptly fabricating identities and building convincing credit …
- How Walmart Plans to Scale AI, GenAI, AR, and Immersive Customer Experiences
Walmart is gearing up for a future where AI shopping agents, rather than human consumers, will handle purchasing decisions, with the retail giant developing …
- Netflix Reportedly Weaving GenAI Ads Into Programming
Netflix is preparing to test interactive mid-roll and pause ads powered by generative AI within its content, aiming to boost engagement on its growing …
- A Tencent-backed startup has brought an AI doctor to the clinic
Synyi AI, a Tencent-backed startup, is piloting an AI-powered medical clinic in Saudi Arabia. The clinic, featuring a virtual doctor called “Dr. Hua,” handles …
- How Saudi Arabia is protecting users’ privacy and data from harmful AI
The article describes how Saudi Arabia is protecting users’ privacy and data from harmful AI. The article highlights the importance of users being aware of how …
- Anthropic lawyers apologize to court over AI ‘hallucination’ in copyright battle with music publishers - Music Business Worldwide
Lawyers for Anthropic apologized to a US federal court for using an incorrect citation generated by Anthropic’s AI in a court filing. The citation, for a …
- UK and European Union agree to post-Brexit reset deal – NBC Connecticut
The UK and EU have agreed on a landmark deal to reset relations, covering security, energy, trade, travel, and fisheries. The deal simplifies food and drink …
- Research Tracked 1 Malicious Email Every 42 Seconds in 2024 | Security Magazine
A new report reveals phishing threats are evolving faster than security teams can respond, with one malicious email detected every 42 seconds in 2024. Many …
- Printer Company Procolored Served Infected Software for Months - SecurityWeek
For half a year, Procolored’s website distributed malware-infected software, as confirmed by GData after investigating a tech writer’s tip. The 39 infected …
- 23andMe Sale Shows Your Genetic Data Is Worth $17
On Monday, Regeneron acquired bankrupt 23andMe for $256 million, valuing each customer’s genetic data at roughly $17. The pharmaceutical company will take over …
- Telegram Gave Authorities Data on More than 20,000 Users
Telegram provided user data to authorities for 22,777 users in the first quarter of 2025, a significant increase from the same period in 2024. This shift in …
- DDoSecrets Adds 410GB of TeleMessage Breach Data to Index
DDoSecrets indexed 410GB of breached TeleMessage data, including messages and metadata, from a hack exploiting a vulnerability in the company’s system. The …
- Ethical hackers exploited zero-day vulnerabilities against popular OS, browsers, VMs and AI frameworks | CSO Online
The article describes the findings of the Pwn2Own contest, a competition where ethical hackers demonstrated vulnerabilities in popular software products. The …
- Cybersecurity jobs available right now: May 20, 2025 - Help Net Security
Several cybersecurity jobs are available, including CISO, Chief Information Officer, and Cyber Crisis Manager. Responsibilities include leading cloud security …
- Sarcoma Ransomware Unveiled: Anatomy of a Double Extortion Gang
The Cybersecurity Observatory of Unipegaso’s malware lab published a report on the Sarcoma ransomware, a dangerous threat first detected in October 2024. The …
- Government Organizations Lose Nearly a Month in Downtime for Every Ransomware Attack | Tripwire
Ransomware attacks on government entities have a longer impact than previously thought, with an average downtime of 27.8 days and daily costs of nearly …
- Go-Based Malware Deploys XMRig Miner on Linux Hosts via Redis Configuration Abuse
A new Linux cryptojacking campaign, codenamed RedisRaider, targets publicly accessible Redis servers. The malware uses legitimate Redis configuration commands …
- Hackers Nab 15 Years of UK Legal Aid Applicant Data
Hackers breached the UK Ministry of Justice’s Legal Aid Agency, stealing personal information of criminal defendants dating back to 2010. The stolen data …
- Proposed GDPR Revisions Stokes Privacy Concerns
Over 100 privacy rights groups and experts urged the European Commission to reject proposed revisions to the General Data Protection Regulation (GDPR). The …
- Microsoft Layoffs Highlight AI-Driven Hiring Pauses - Bloomberg
The rise of artificial intelligence is leading to a hiring pause in the tech industry, with companies like Microsoft and Shopify opting for AI-driven …
- Attacker Specialization Puts Threat Modeling on Defensive
The cybercriminal underground is increasingly compartmentalized, with threat groups specializing in specific attack facets. This trend challenges defenders, …
- Dynamic DNS Emerges as Go-to Cyberattack Facilitator
Dynamic DNS (DDNS) services, which automatically update domain names’ DNS records, are increasingly being abused by cybercriminals like Scattered Spider. These …
- Australian Human Rights Commission Leaks Docs in Data Breach
The Australian Human Rights Commission experienced a data breach due to an internal error, exposing sensitive information from online complaints and project …
- Pwn2Own Berlin 2025 Day Two: researcher earned 150K hacking VMware ESXi
On day two of Pwn2Own Berlin 2025, participants earned $435,000 for demonstrating zero-day vulnerabilities in Microsoft SharePoint, VMware ESXi, Oracle …
- Beware! A threat actor could steal the titles of your private (and draft) WordPress posts! | Imperva
A vulnerability in WordPress allows threat actors to steal private and draft post titles using XMLRPC payloads. The attack exploits the pingback feature, …
- Shields up US retailers. Scattered Spider threat actors can target them
The cybercrime group Scattered Spider, known for social engineering and extortion, is now targeting U.S. companies, particularly retailers, after previously …
- Experts found rogue devices, including hidden cellular radios, in Chinese-made power inverters used worldwide
Experts discovered rogue devices, including hidden cellular radios, in Chinese-made power inverters used worldwide. These devices could be remotely activated …
- Former US Govt Employees Targeted by Chinese Intelligence
Chinese intelligence is targeting recently laid-off U.S. government officials through a network of front companies offering consulting work. The Foundation for …
- Agentic AI Tech Firm Says Health Data Leak Affects 483,000
Serviceaide, an AI-based IT management software provider, reported a data breach affecting over 483,000 Catholic Health patients. The breach, discovered in …
- LockBit Leaks Reveal Drive to Recruit Ransomware Newbies
The LockBit ransomware group has introduced a “lite” version of its ransomware portal, aimed at recruiting less experienced affiliates. The leak of LockBit’s …
- 413,032 Americans Affected As Major Data Breach Leaks Customer Names, Social Security Numbers, Financial Records and More - The Daily Hodl
A data breach at Kelly Benefits, a human resources firm, affected 413,032 individuals, exposing sensitive information including names, Social Security numbers, …
- Pakistani cyber offensive hits Indian systems, BJP website
Pakistan launched a cyber offensive targeting critical Indian digital infrastructure, compromising numerous high-profile websites and causing data breaches. …
- Threat Brief: CVE-2025-31324
The article describes a critical vulnerability in SAP NetWeaver that allows unauthenticated users to upload arbitrary files to the server. The vulnerability …
- Google Pays $1.375 Billion to Texas Over Unauthorized Tracking and Biometric Data Collection
Google agreed to pay Texas nearly $1.4 billion to settle two lawsuits alleging unauthorized tracking and biometric data collection. The settlement, the largest …
- AWS Pushes AI-Powered Threat Detection With Key Partners
AWS is leveraging generative AI services like Bedrock and SageMaker to enhance threat analysis, detection, and response. These services, along with encryption …
- Cloudflare CEO warns AI and zero-click internet are killing the web’s business model | TechSpot
The article describes how AI and zero-click internet are impacting the web’s business model. Cloudflare CEO Matthew Prince warns that search drives everything …
- Malware scammers target HR professionals with Venom Spider malware | SC Media
Threat actors are targeting HR professionals with Venom Spider malware disguised as resume submissions. The malware, designed to harvest user credentials, is …
- A Closer Look At PlugValley: Threat Actor Profile
PlugValley, a threat actor group, offers AI-powered vishing-as-a-service, including spoofing, customizable scripts, and real-time call adaptation. Their …
- The Top Threat Actor Groups Targeting the Financial Sector | Flashpoint
Between April 2024 and April 2025, the financial sector faced significant threats from various actors, including RansomHub, Akira, LockBit, FIN7, Scattering …
- Mandiant links DragonForce ransomware attacks on UK retailers to UNC3944 tactics, highlighting links to RansomHub - Industrial Cyber
Mandiant links DragonForce ransomware attacks on UK retailers to UNC3944 tactics, suggesting a connection to RansomHub. UNC3944, known for social engineering …
- Threat Actor Bypass SentinelOne EDR to Deploy Babuk Ransomware
A new attack method, “Bring Your Own Installer,” exploits a vulnerability in SentinelOne’s agent upgrade process, allowing threat actors to disable EDR …
- Bank Data Breach Blamed on Insider As Social Security Numbers, Account Information and Addresses of 43 Customers Exposed - The Daily Hodl
TD Bank reported a data breach affecting 43 customers, caused by an insider accessing sensitive information including names, addresses, account numbers, and …
- Ransomware: What the LockBit 3.0 data leak reveals | Computer Weekly
A data leak from LockBit 3.0’s affiliate administration interface provides unprecedented visibility into the ransomware group’s activities. The data reveals a …
- American Income Life Insurance Data Breach Alert Issued By
Wolf Haldenstein is investigating claims on behalf of individuals affected by the American Income Life Insurance data breach. The breach, which occurred in …
- Data breach confirmed by Insight Partners | SC Media
Insight Partners confirmed a data breach affecting current and former employees, limited partners, management companies, portfolio firms, and funds. The …
- Chinese cyber menace exceeds threat from Russia, Dutch spy chief warns – POLITICO
Dutch military intelligence chief Vice Admiral Peter Reesink warns that China’s cyber threat to Europe surpasses Russia’s, despite most security focus being on …
- No cyber threat to India ATMs from Pakistan Ransomware Attack - Cybersecurity Insiders
The Indian government debunked rumors of a Pakistan ransomware attack on ATMs, reassuring the public that there are no plans to shut down ATMs. The government …
- How Security Has Changed the Hacker Marketplace
The cost of exploiting software vulnerabilities has risen dramatically, driven by increased security investments. This economic shift makes it more profitable …
- 160,000 Impacted by Valsoft Data Breach - SecurityWeek
Valsoft Corporation, a VMS firm, notified over 160,000 individuals that their personal information was compromised in a data breach. The breach, discovered in …
- Fake AI platforms deliver malware diguised as video content - Help Net Security
A malware campaign targets creators and small businesses seeking AI tools, disguising malware as AI-generated content. The Noodlophile malware, a new …
- LLM Prompt Injection - What’s the Business Risk, and What to Do About It
Prompt injection attacks, where malicious input manipulates AI systems, pose a significant risk to businesses. These attacks can lead to brand damage, data …
- Insider Risk Revisited: Espionage, Encryption & Economics
Two recent incidents, the Rippling-Deel espionage case and the U.S. government’s “Signalgate” leak, highlight the growing threat of insider risk. Both …
- Legacy Login in Microsoft Entra ID Exploited to Breach Cloud Accounts
A recent campaign exploited a vulnerability in Microsoft Entra ID’s legacy authentication protocols, allowing attackers to bypass MFA and gain unauthorized …
- Cybercriminal services target end-of-life routers, FBI warns
The FBI warns that attackers are using end-of-life routers to deploy malware and turn them into proxies. The FBI recommends replacing compromised routers or …
- Initial Access Brokers Target Brazil Execs via NF-e Spam and Legit RMM Trials
A new campaign targeting Portuguese-speaking users in Brazil uses trial versions of commercial remote monitoring and management (RMM) software. The spam …
- No Fairy Tale Ending: PowerSchool’s Hacker Targets Customers
PowerSchool, a widely used K-12 student information system platform, paid a ransom to hackers after a breach in December 2024, hoping to prevent the stolen …
- TDSB says it got ransom demand over stolen student data not destroyed in cybersecurity incident
The article describes a cybersecurity incident at the Toronto District School Board (TDSB) where student data was stolen. The school board paid a ransom to …
- Microsoft employees are banned from using DeepSeek app, president says | TechCrunch
The article describes Microsoft’s ban on the DeepSeek app for its employees due to data security and propaganda concerns. The ban stems from the fact that …
- ‘Tone deaf’: US tech company responsible for global IT outage to cut jobs and use AI | Software | The Guardian
The article describes CrowdStrike’s decision to cut 5% of its workforce due to AI efficiency. The company claims that AI is flattening the hiring curve and …
- Education giant Pearson hit by cyberattack exposing customer data
The article describes a cyberattack on the education giant Pearson, where threat actors stole customer data and corporate data. The attack involved the …
- Millions of Canadians' health data available for sale to pharmaceutical industry, study shows | CBC News
A new study reveals that private clinics in Canada are selling patient data to pharmaceutical companies, raising concerns about patient privacy and the …
- Threat Actor Claims to Leak ‘1,000 Entries’ from Interpol - TechNadu
A cybercriminal using the handle l33tfg claims to have leaked 1,000 database entries from Interpol on a hacking forum. The authenticity of the leak is being …
- Trump’s Deportation Airline Just Got Hacked by Anonymous
The article describes how Anonymous hacked into the website of GlobalX Air, an airline chosen by ICE for deportations. The hacker accessed flight records and …
- 19 Billion Passwords Leaked in 2025 | Reused Credentials Threaten Global Cybersecurity
A new Cybernews study analyzed over 19 billion leaked passwords, revealing that 94% were reused or repeated, making credential stuffing a significant concern. …
- Patients left in the dark months almost a year after criminals leaked sensitive medical data from Synnovis – DataBreaches.Net
Over 11 months after a ransomware attack on Synnovis, a U.K. pathology services company, patients are still unaware of what data was exposed. The attack, which …
- Ransomware group threatens Cobb County data leak - Axios Atlanta
Russian-based ransomware group Qilin has threatened to release 150 gigabytes of sensitive data allegedly stolen from Cobb County government systems. On …
- Wikipedia Says It Will Use AI to Empower Editors, Not Replace Them
Wikipedia’s strategic vision for AI over the next three years focuses on using AI to automate routine tasks and assist editors, rather than replacing them. The …
- Zelle outage, FedNow, Apple Card: Top banking news for July 2023 | Credit Union Journal | American Banker
The article describes the top banking news for July 2023. It highlights a Zelle outage at JPMorgan Chase, which could have implications for other banks. The …
- Microsoft ditches passwords by default for new accounts - Neowin
Microsoft has made new Microsoft Accounts passwordless by default, promoting the use of passkeys for enhanced security. Existing accounts will be nudged …
- Amazon Unveils Nova Premier AI - A Game Changer in Complex Reasoning | AI News
Amazon is launching Nova Premier, an AI model designed for complex reasoning, in June 2025. Nova Premier uses a ‘hybrid reasoning’ approach, combining multiple …
- External Payments Now Allowed by Apple App Store Following Court Injunction
Apple updated its App Store guidelines to allow external purchases following a court injunction in the Epic Games vs. Apple case. The injunction prohibits …
- DeepSeek quietly updates open-source model that handles maths proofs | South China Morning Post
DeepSeek quietly open-sourced its Prover-V2 model, a math-focused AI model, on Hugging Face. The model, built on DeepSeek’s V3 model, is expected to enhance …
- Part-Time Job Platform Albamon Reports Hacking Incident Involving Data Breach l KBS WORLD
Albamon, a South Korean part-time job platform, reported a hacking incident involving a data breach. The incident resulted in the leak of 22,473 pieces of …
- Disney Hack: Man Pleads Guilty to Stealing Slack Files Data
The article describes a case where a man hacked into a Disney employee’s computer and stole over 1 terabyte of confidential data. The hacker used a malicious …
- Ticket Resale Platform TicketToCash Left 200GB of User Data Exposed
A misconfigured database belonging to TicketToCash exposed data from 520,000 customers, including PII and partial financial details. The database, discovered …
- 4 Million SSNs May Have Been Leaked in Employee Benefits Company Breach. Are You One of Them? - CNET
VeriSource Services, an employee benefits company based in Houston, Texas, has disclosed that a February 2024 data breach exposed the personal information of 4 …
- Hive0117 group targets Russian firms with new variant of DarkWatchman malware
The Hive0117 cybercrime group targeted Russian organizations across various sectors with a phishing campaign using a modified version of the DarkWatchman …
- SentinelOne Targeted by North Korean IT Workers, Ransomware Groups, Chinese Hackers - SecurityWeek
SentinelOne, a cybersecurity solutions provider, reported being targeted by North Korean IT workers, ransomware groups, and Chinese state-sponsored hackers. …
- New Research Reveals: 95% of AppSec Fixes Don’t Reduce Risk
According to OX Security’s 2025 Application Security Benchmark Report, 95-98% of AppSec alerts are irrelevant, leading to alert fatigue and wasted resources. …
- World Password Day: Should you be using fewer passwords? | Proton
World Password Day, celebrated annually on the first Thursday of May, emphasizes the importance of online account security. While passwords have traditionally …
- Chinese APT’s Adversary-in-the-Middle Tool Dissected - SecurityWeek
ESET analyzed Spellbinder, a tool used by the Chinese APT TheWizards for adversary-in-the-middle attacks and backdoor deployment. The tool, which targets …
- City of Long Beach Says at Least 260,000 Affected by Hack
The City of Long Beach, California, is notifying approximately 260,000 individuals that their protected health information may have been stolen in a November …