June 2025
283 posts. Browse all months
- Facebook is starting to feed its AI with private, unpublished photos | The Verge
Meta is testing a new “cloud processing” feature that asks Facebook users to allow the platform to regularly upload photos from their camera roll to generate …
- Ottawa orders Chinese tech firm to close Canadian operations over national security - National | Globalnews.ca
The Canadian government has ordered Chinese surveillance camera manufacturer Hikvision Canada Inc. to shut down and leave the country following a national …
- Texas Centers for Infectious Disease Associates Notifies Individuals of Data Breach in 2024 – DataBreaches.Net
Texas Centers for Infectious Disease Associates (TCIDA) notified patients of a data breach that occurred in July 2024. The breach, which involved unauthorized …
- 61 million records allegedly from Verizon leak online: names, tax IDs, addresses, phone numbers
A threat actor is selling a database allegedly containing 61 million Verizon customer records, including sensitive personal data. Verizon investigated and …
- Private Key Leaks And Front-end Hacks Dominate 2025 Crypto Thefts
In the first half of 2025, crypto thefts reached $2.1 billion, primarily due to attacks on infrastructure stealing private keys and seed phrases. …
- Data of 743k patients was potentially exposed in 2024 McLaren Health hack – 9&10 News
A 2024 McLaren Health Care data breach potentially exposed the data of over 740,000 patients. The breach, which occurred between July and August, involved …
- Forget ChatGPT and Gemini — this lesser-known chatbot just ranked No. 1 for privacy | Tom’s Guide
A new privacy report ranking nine major AI chatbots reveals that Le Chat by French company Mistral is the most privacy-focused option, followed closely by …
- Google Pixel 7 sales banned in Japan, Pixel 8 and 9 might follow - GSMArena.com news
Google Pixel 7 sales are banned in Japan due to a patent dispute with Pantech over LTE connectivity technology. Pantech is now suing Google for the Pixel 8 and …
- Ontario investigating alleged data breach of 200,000 home care patients' info
Ontario is investigating an alleged data breach affecting 200,000 home care patients that reportedly occurred in mid-March but was never publicly disclosed. …
- Chinese Group Silver Fox Uses Fake Websites to Deliver Sainbox RAT and Hidden Rootkit
A new campaign by the Chinese hacking group Silver Fox uses fake websites to deliver the Sainbox RAT and Hidden rootkit. The malware payloads, including a …
- Microsoft Edge security advisory (AV25-378) - Canadian Centre for Cyber Security
Microsoft published a security update on June 26, 2025, for Microsoft Edge Stable Channel versions prior to 138.0.3351.55. The Cyber Centre recommends …
- VMware security advisory (AV25-379) - Canadian Centre for Cyber Security
VMware published a security advisory on June 26, 2025, addressing a vulnerability in RabbitMQ versions 3.13.7 and prior. Users and administrators are advised …
- OneClik APT campaign targets energy sector with stealthy backdoors
A new APT malware campaign, OneClik, targets the energy sector using stealthy ClickOnce and Golang backdoors. The campaign, likely carried out by China-linked …
- In Other News: Norway Dam Hacked, $177M Data Breach Settlement, UNFI Attack Update - SecurityWeek
This week’s cybersecurity news highlights a $177 million data breach settlement by AT&T, the restoration of systems at United Natural Foods after a …
- Some Brother printers have a remote code execution vulnerability, and they can’t fix it | CSO Online
A critical authentication bypass vulnerability affecting hundreds of Brother printer models allows unauthenticated remote code execution when chained with …
- Fake DocuSign email hides tricky phishing attempt | Malwarebytes
A cybersecurity researcher encountered a sophisticated phishing attack disguised as a DocuSign notification that passed email authentication checks and used a …
- The Good, the Bad and the Ugly in Cybersecurity – Week 26
A British national, Kai West, was charged by U.S. authorities for orchestrating cyberattacks resulting in $25 million in damages. APT28, a Russian-based …
- MongoDB security advisory (AV25-380) - Canadian Centre for Cyber Security
MongoDB published a security advisory on June 26, 2025, addressing a vulnerability in MongoDB Server v6.0, v7.0, and v8.0. The Cyber Centre recommends …
- Malicious AI Models Are Behind a New Wave of Cybercrime, Cisco Talos
Cisco Talos reports a rise in cybercriminals using Large Language Models (LLMs) to enhance their illicit activities. These models, designed with safety …
- FBI Warns of Scattered Spider’s Expanding Attacks on Airlines Using Social Engineering
The FBI has issued a warning that the notorious cybercrime group Scattered Spider is expanding its operations to target the airline industry, using …
- Misconfigured AI Servers Expose Data, Systems
Cybersecurity researchers have discovered that hundreds of Model Context Protocol (MCP) servers are misconfigured and publicly accessible, creating significant …
- Berlin Regulator Orders Apple, Google to Remove DeepSeek
A German data protection regulator has ordered Apple and Google to remove the Chinese AI app DeepSeek from their app stores, citing violations of European …
- Threat Spotlight: CVE-2025-5777: Citrix Bleed 2 Opens Old Wounds - ReliaQuest
Citrix has issued urgent guidance addressing CVE-2025-5777—a critical vulnerability in NetScaler ADC and Gateway devices that enables attackers to bypass …
- Copyright Cases Should Not Threaten Chatbot Users’ Privacy | Electronic Frontier Foundation
A recent U.S. court order requires OpenAI to indefinitely retain all ChatGPT user conversations—even if users attempt to delete them—undermining global privacy …
- Iranian APT35 Hackers Targeting Israeli Tech Experts with AI-Powered Phishing Attacks
Iranian state-sponsored hackers, linked to APT35, are targeting Israeli tech experts with AI-powered phishing attacks. The attacks, which began in June 2025, …
- ClickFix attacks skyrocketing more than 500% - Help Net Security
ESET’s latest Threat Report reveals a 500% surge in ClickFix attacks in early 2025, now ranking just behind phishing as a leading threat. This cross-platform …
- BreachForums: ShinyHunters Members Arrested, IntelBroker Identified as Kai West
French authorities have arrested four individuals linked to the ShinyHunters hacking group in a coordinated international effort targeting cybercrime networks …
- CrowdStrike is cutting jobs in favor of AI. Here’s why you shouldn’t. | CSO Online
As firms like CrowdStrike and Klarna cite AI-driven efficiencies to justify workforce reductions, cybersecurity leaders are being advised to resist framing AI …
- How safe is Telegram? | Proton VPN
Telegram’s popularity stems from its open platform and ability to bypass censorship, but its default security is limited. Only one-to-one “secret chats” offer …
- XBOW, an autonomous penetration tester, has reached the top spot on HackerOne | Hacker News
Xbow is tackling the challenge of scalable, low-false-positive vulnerability detection using LLM-based tools. While leaderboard rankings can be misleading, …
- How US Cyber Ops May Have Assisted the Midnight Hammer Strike
The U.S. likely combined cyber operations with conventional force tactics in the “Midnight Hammer” strike on Iranian nuclear sites. Cyber defense and national …
- Canada says telcos were breached in China-linked espionage hacks
The Canadian government and FBI reported malicious activity targeting Canadian telecommunication companies, attributing the intrusions to the China-backed …
- Spy agency says it ‘improperly’ shared Canadians' data with international partners | CBC News
Canada’s Communications Security Establishment (CSE) has admitted to improperly sharing Canadian information with international intelligence partners between …
- FedEx founder Fred Smith, a Marine Corps veteran who revolutionized package delivery, dies at 80
Fred Smith, the founder of FedEx, passed away at 80. Smith, a Marine Corps veteran, revolutionized the express delivery industry with FedEx’s “hub and spokes” …
- Canada Says Network Devices Compromised in China-Linked Hack - Bloomberg
In a joint advisory issued Friday, Canada’s cybersecurity agency and the U.S. Federal Bureau of Investigation confirmed that Salt Typhoon—a state-sponsored …
- Violence-as-a-Service: Encrypted Apps Used in Recruiting Teens as Hitmen
European law enforcement, led by Denmark and Sweden, is cracking down on violence-as-a-service, where criminal groups recruit teenagers online for contract …
- Iran confirmed it shut down internet to protect the country against cyberattacks
Iran confirmed an internet shutdown to protect against Israeli cyberattacks, citing threats to critical infrastructure and drone control. The shutdown, which …
- Qilin ransomware gang now offers a “Call Lawyer” feature to pressure victims
The Qilin ransomware group is offering a “Call Lawyer” feature to affiliates, providing legal support during ransom negotiations to pressure victims into …
- 71% of new hires click on phishing emails within 3 months - Help Net Security
New hires are 44% more likely to fall for phishing and social engineering scams than longer-term employees, according to Keepnet’s 2025 report. This is due to …
- The new SparkKitty Trojan spy in the App Store and Google Play | Securelist
A new SparkKitty Trojan spyware, connected to the SparkCat campaign, targets both iOS and Android devices. It steals images from victims’ photo galleries, …
- Iran-Linked Threat Actors Cyber Fattah Leak Visitors and Athletes' Data from Saudi Games
Iran-linked threat actors, Cyber Fattah, leaked data from past Saudi Games, including personally identifiable information and financial details of athletes and …
- ⚡ Weekly Recap: Chrome 0-Day, 7.3 Tbps DDoS, MFA Bypass Tricks, Banking Trojan and More
This week’s cybersecurity landscape highlights a massive 7.3 Tbps DDoS attack blocked by Cloudflare, a zero-day exploit in Google Chrome, and a new version of …
- Zyxel Devices Hit by Active Exploits Targeting CVE-2023-28771 Vulnerability
A critical remote code execution flaw (CVE-2023-28771) in Zyxel devices is being actively exploited by a Mirai-like botnet. The vulnerability, affecting Zyxel …
- Critical Citrix NetScaler bug fixed, upgrade ASAP! (CVE-2025-5777) - Help Net Security
Citrix has fixed a critical vulnerability (CVE-2025-5777) in NetScaler ADC and NetScaler Gateway, similar to CitrixBleed. The vulnerability allows unauthorized …
- Your address is out there — and it’s not hard to find it | Proton
Online people-finder sites, which compile personal information from public records and social media, can be used to create detailed dossiers of individuals. …
- Microsoft Edge security advisory (AV25-358) - Canadian Centre for Cyber Security
Microsoft published a security update on June 20, 2025, to address vulnerabilities in Microsoft Edge Stable Channel versions prior to 137.0.3296.93. The Cyber …
- Microsoft Edge security advisory (AV25-358) - Canadian Centre for Cyber Security
Microsoft published a security update on June 20, 2025, to address vulnerabilities in Microsoft Edge Stable Channel versions prior to 137.0.3296.93. The Cyber …
- UK Passes Data Use and Access Regulation Bill
The UK has passed the Data Use and Access Bill, modifying the GDPR to relax rules on AI-powered automated decision-making and increase fines for direct …
- Hype Alert: ‘The Largest Data Breach in History’ That Wasn’t
A recent report claimed a data breach of 16 billion stolen login credentials, but experts question its legitimacy. The data is likely a combination of outdated …
- VMware security advisory (AV25-357) - Canadian Centre for Cyber Security
VMware released security advisories on June 18, 2025, addressing vulnerabilities in several Tanzu products. The Cyber Centre recommends reviewing the …
- Paragon Commercial Spyware Infects Prominent Journalists
Two European journalists were targeted by Paragon Solutions’ Graphite spyware, according to a Citizen Lab report. The spyware, which exploits a zero-click iOS …
- Defending the Internet: how Cloudflare blocked a monumental 7.3 Tbps DDoS attack
In May 2025, Cloudflare successfully blocked a 7.3 Tbps DDoS attack targeting a hosting provider. The attack, originating from over 122,000 IP addresses across …
- Over Two Thirds of MSPs Hit by Multiple Breaches in Past Year, Survey Reveals - IT Security Guru
The second annual CyberSmart MSP Survey reveals that 69% of MSP leaders globally experienced multiple breaches in the past year, despite high confidence in …
- New Campaigns Distribute Malware via Open Source Hacking Tools - SecurityWeek
Two new campaigns were uncovered distributing malware through trojanized open source hacking tools on GitHub. The campaigns, attributed to threat actors Water …
- Iran-Israel War Triggers a Maelstrom in Cyberspace
Iran and Israel are engaged in a cyber war, with Iran restricting internet and phone connectivity for its citizens. Hacktivists are attacking both countries, …
- A New Breed Of Mobile Threat: GodFather Malware Goes Virtual
A new variant of GodFather malware uses on-device virtualization to hijack banking and crypto apps, creating a virtual environment that mimics the real app. …
- Hackers Claim Leak Of 64 Million T-Mobile Records, But Company Denies Breach
Hackers claim to have leaked 64 million T-Mobile customer records, including names, birthdates, and financial information. T-Mobile denies the breach, stating …
- CVE-2025-3248 in Langflow Exploited to Deploy Flodrix Botnet - SOCRadar® Cyber Intelligence Inc.
Threat actors are exploiting CVE-2025-3248, a critical RCE vulnerability in Langflow, to deploy the Flodrix botnet. The botnet, a variant of LeetHozer, enables …
- Russian APT29 Exploits Gmail App Passwords to Bypass 2FA in Targeted Phishing Campaign
Threat actors suspected to be Russian are using a novel social engineering tactic to gain access to victims’ emails. The tactic involves impersonating the U.S. …
- Security’s Blind Spot: Shadow AI Creeps Into The SOC
A Mindgard survey of 500 cybersecurity professionals reveals a concerning trend: 56% of organizations use AI without formal approval, and 87% of security …
- High-Severity Vulnerabilities Patched by Cisco, Atlassian - SecurityWeek
Cisco and Atlassian released patches for multiple high-severity vulnerabilities in their products. Cisco addressed a DoS vulnerability in Meraki devices and a …
- How CVE-2025-6018 and CVE-2025-6019 Enable Full Root Access on Linux - SOCRadar® Cyber Intelligence Inc.
Two newly discovered Local Privilege Escalation (LPE) vulnerabilities, CVE-2025-6018 and CVE-2025-6019, allow attackers to gain full root control on several …
- Up-and-coming ransomware group Anubis has tweaked its malware to irrevocably wipe victims' data - an unusual tactic from hackers who typical corrupt bargain is restored data in exchange for extortion money. Why would a ransomware attacker seeking leverage
The Anubis ransomware group, known for its data encryption and extortion tactics, has added a file-wiping feature to its malware. This unusual move, which goes …
- Iranian Crypto Exchange Nobitex Exploited for $81M
Iranian cryptocurrency exchange Nobitex was hacked for over $81 million in digital assets. The attack, which exploited Nobitex’s hot wallets, was claimed by a …
- Cybercrime gang hacks major health data provider - millions of highly personal files could be at risk of breach | TechRadar
A new cybercrime group known as World Leaks has claimed responsibility for a breach of Freedman HealthCare, a U.S.-based consultancy handling sensitive health …
- UBS Hit by Darknet Data Leak Affecting 130,000 Staff
A data breach at procurement service provider Chain IQ, a former UBS spinoff, resulted in the leak of information on approximately 130,000 UBS employees, …
- Black Basta Leaks Highlight Phishing, Google Takeover Risks
Leaked data from the defunct Black Basta ransomware group highlights the group’s focus on phishing and Microsoft Teams attacks. The group’s leader, Oleg …
- Offline Extraction of Symantec Account Connectivity Credentials (ACCs) | itm4n’s blog
Offline extraction of Symantec Account Connectivity Credentials (ACCs) is possible by leveraging the AgentStorage class in Symantec.Deployment.PSComponent.dll. …
- Canadian Airline WestJet Hit by Cyberattack - SecurityWeek
Canadian airline WestJet experienced a cyberattack that disrupted internal systems and limited access to its application and website. The company is …
- Fog Ransomware Group Uses Unconventional Toolset, New Research Finds | Security Magazine
The Fog ransomware group uses an uncommon toolset, including open-source pentesting utilities and Syteca, a legitimate employee monitoring software. Security …
- New Predator spyware infrastructure revealed activity in Mozambique for first time
Insikt Group analyzed a new Predator spyware infrastructure, revealing continued use despite U.S. sanctions. The infrastructure, featuring evasive updates and …
- Anubis Ransomware Packs a Wiper to Permanently Delete Files - SecurityWeek
Anubis ransomware, active since late 2024, is a major threat to organizations, permanently deleting files to prevent recovery. It encrypts data using ECIES …
- Microsoft-Signed Firmware Module Bypasses Secure Boot
A Microsoft-signed firmware module, discovered in November 2024, contained a vulnerability (CVE-2025-3052) allowing attackers to disable Secure Boot silently. …
- Healthcare data breach exposes 2.7 million patients: How to stay safe | Fox News
A recent healthcare data breach exposed approximately 2.7 million patient profiles and over 8.8 million appointment records. The breach, linked to a digital …
- Paraguay Suffered Data Breach: 7.4 Million Citizen Records Leaked on Dark Web
A data breach in Paraguay exposed 7.4 million citizen records, including personally identifiable information (PII), on the dark web. The stolen data, allegedly …
- Genea Fertility data leak: Blackmail risks loom over donors | SBS News
The article describes a data breach at Genea Fertility, a major IVF clinic in Australia. The breach exposed sensitive information about donors and recipients, …
- Phishing sites posing as DeepSeek downloads drop a proxy backdoor | CSO Online
Kaspersky warns of a new malicious campaign distributing BrowserVenom malware through fake DeepSeek-R1 environment installers. The malware, disguised as a …
- Over 80,000 Microsoft Entra ID Accounts Targeted Using Open-Source TeamFiltration Tool
A new account takeover campaign, codenamed UNK_SneakyStrike, has targeted over 80,000 Microsoft Entra ID accounts using the open-source TeamFiltration tool. …
- Interpol Targets Infostealers: 20,000 IPs Taken Down, 32 Arrested, 216,000 Victims Notified - SecurityWeek
Interpol, along with law enforcement agencies and cybersecurity firms, conducted Operation Secure to target infostealer malware in Asia. The operation resulted …
- Palo Alto Networks Patches Privilege Escalation Vulnerabilities - SecurityWeek
Palo Alto Networks released patches for seven vulnerabilities, including a high-severity code injection bug in GlobalProtect for macOS and a medium-severity …
- Surge in Cyberattacks Targeting Journalists: Cloudflare - SecurityWeek
Cloudflare’s Project Galileo, which provides free cybersecurity protection to non-profit organizations, blocked 109 billion malicious requests targeting these …
- ‘EchoLeak’ AI Attack Enabled Theft of Sensitive Data via Microsoft 365 Copilot - SecurityWeek
A zero-click attack, dubbed EchoLeak, exploited a vulnerability in Microsoft 365 Copilot, enabling attackers to steal sensitive information. The attack, …
- Hackers Target Job Recruiters Through Malicious Resumes
Russian-speaking hackers FIN6, also known as Skeleton Spider, are impersonating job seekers to phish recruiters and deploy malware through fake resumes. The …
- AI Is Your New Coworker. Does It Need a Badge?
The rise of agentic AI, capable of autonomous goal pursuit, demands updated identity and access governance models. Treating AI as a user with unique …
- Adobe Releases Patch Fixing 254 Vulnerabilities, Closing High-Severity Security Gaps
Adobe released security updates addressing 254 vulnerabilities, primarily in Experience Manager (AEM). The most severe flaw, CVE-2025-47110, is a reflected XSS …
- Microsoft security advisory – June 2025 monthly rollup (AV25-333) - Canadian Centre for Cyber Security
Microsoft released security advisories on June 10, 2025, addressing vulnerabilities in multiple products, including critical updates for .NET, Microsoft 365 …
- Red Hat security advisory (AV25-334) - Canadian Centre for Cyber Security
Red Hat published security advisories between June 2 and 8, 2025, addressing vulnerabilities in multiple products, including updates for the Linux kernel. The …
- Adobe security advisory (AV25-335) - Canadian Centre for Cyber Security
Adobe published security advisories on June 10, 2025, addressing vulnerabilities in multiple products including Acrobat, Adobe Commerce, Adobe Experience …
- Google Chrome security advisory (AV25-336) - Canadian Centre for Cyber Security
Google Chrome security advisory (AV25-336) addresses vulnerabilities in Chrome for Desktop versions prior to 137.0.7151.103/.104 (Windows/Mac) and …
- Stealth Falcon APT Exploits Microsoft RCE Zero-Day
Nation-state adversaries are exploiting a zero-day vulnerability in Microsoft’s Web Distributed Authoring and Versioning (WEBDAV) protocol, allowing remote …
- NTLM reflection is dead, long live NTLM reflection! – An in-depth
NTLM reflection, a vulnerability where authentication is relayed back to the originating machine, was thought to be fixed. However, a recent discovery shows …
- India’s Security Leaders Struggle to Keep Up With Threats
Indian organizations are struggling to integrate AI into their security operations due to a growing attack surface, a talent gap in cybersecurity, and new data …
- 86% of all LLM usage is driven by ChatGPT - Help Net Security
ChatGPT dominates LLM usage, accounting for over 86% of tokens processed, driven by speed, reliability, and enterprise readiness. Despite this, developers are …
- New BrowserVenom malware being distributed via fake DeepSeek phishing website | Securelist
A new malicious campaign distributes BrowserVenom malware through a fake DeepSeek-R1 LLM environment installer. The malware, delivered via a phishing site …
- Microsoft fixes zero-day exploited for cyber espionage (CVE-2025-33053) - Help Net Security
Microsoft has fixed a zero-day vulnerability (CVE-2025-33053) exploited in the wild by the Stealth Falcon APT group to deliver espionage tools. The …
- China-linked hackers target cybersecurity firms, governments in global espionage campaign | CSO Online
China-linked hackers, specifically groups associated with PurpleHaze and ShadowPad, targeted over 70 organizations globally, including government and critical …
- Algerian group Jabaroot claims hack of Morocco’s Justice Ministry
The Algerian hacker group Jabaroot claims to have breached Morocco’s Ministry of Justice, obtaining sensitive data on Justice Minister Abdellatif Ouahbi and …
- Vulnerability in DanaBot Malware C2 Server Leaks Threat Actor Usernames and Crypto Keys
A vulnerability in the DanaBot malware’s command-and-control (C2) server has been discovered, potentially exposing threat actor usernames and cryptographic …
- Follow the Smoke | China-nexus Threat Actors Hammer At the Doors of Top Tier Targets | SentinelOne
The article describes a series of cyberattacks targeting organizations, including a South Asian government entity and a European media organization. The …
- Stolen Ticketmaster data from Snowflake attacks briefly for sale again
The article describes how stolen Ticketmaster data from Snowflake attacks was briefly listed for sale again. The data, initially stolen in 2024, was being …
- Horse racing’s governing body hit by cyber attack
The British Horseracing Authority (BHA) experienced a ransomware attack, temporarily closing its London office and prompting remote work. The incident is being …
- Trump Cybersecurity Order Reverses Biden, Obama Priorities
A recent cybersecurity executive order from the Trump White House aims to adapt the US to emerging threats from AI, post-quantum computing, and a vulnerable …
- AI threats leave SecOps teams burned out and exposed - Help Net Security
A recent survey of 500 senior cybersecurity professionals reveals that while AI is helping with tasks like threat detection and data analysis, it is also …
- China-linked threat actor targeted +70 orgs worldwide, SentinelOne warns
A China-linked threat actor, tracked as PurpleHaze, targeted over 70 global organizations, including governments and media, in cyber-espionage attacks from …
- Rare Werewolf APT Uses Legitimate Software in Attacks on Hundreds of Russian Enterprises
The Rare Werewolf APT group, active since at least 2019, has been linked to cyber attacks targeting Russia and CIS countries. The attacks, which use legitimate …
- The Evolution of Linux Binaries in Targeted Cloud Operations
Threat actors are developing Linux Executable and Linkage Format (ELF) files to target cloud infrastructure, including backdoors, droppers, remote access …
- Researcher Found Flaw to Discover Phone Numbers Linked to Any Google Account
A security flaw in Google’s account recovery feature allowed attackers to brute-force phone numbers linked to Google accounts. The vulnerability, discovered by …
- Russia-linked PathWiper malware hits Ukrainian infrastructure | CSO Online
A new malware, PathWiper, has struck Ukraine’s critical infrastructure, erasing data and disabling essential systems. Attributed to a Russia-linked APT group, …
- Sensitive Information Stolen in Sensata Ransomware Attack - SecurityWeek
Sensata Technologies, a sensor manufacturer, disclosed that a ransomware group accessed its network for over a week, stealing sensitive employee information …
- Critical Vulnerability Patched in SAP NetWeaver - SecurityWeek
SAP released 14 security patches, including a critical fix for a NetWeaver vulnerability (CVE-2025-42989) allowing attackers to bypass authorization checks and …
- iMessage Zero-Click Attacks Suspected in Targeting of High-Value Individuals - SecurityWeek
iVerify, a mobile EDR firm, suspects zero-click attacks targeting an iMessage vulnerability, called Nickname, on iPhones belonging to high-value individuals in …
- New AI tool targets critical hole in thousands of open source apps | InfoWorld
The article describes a new AI tool that can scan open source repositories for vulnerabilities and automatically generate patches. The tool has already …
- Chinese-Linked Hackers Targeted 70+ Global Organizations
SentinelLABS uncovered a widespread cyber espionage campaign targeting over 70 global organizations between July 2024 and March 2025. The attacks, linked to …
- Limited Canva Creator Data Exposed Via AI Chatbot Database
A Chroma database operated by Russian AI chatbot startup My Jedai was found exposed online, leaking survey responses from over 500 Canva Creators. The exposed …
- Chinese Hackers and User Lapses Turn Smartphones Into a ‘Mobile Security Crisis’ - SecurityWeek
Chinese hackers have been targeting smartphones of individuals in government, politics, tech, and journalism, exploiting vulnerabilities in mobile devices and …
- SentinelOne Sees No Breach After Hardware Supplier Hacked
SentinelOne reported a breach of a logistics firm supplying hardware to its employees, involving the ShadowPad malware. The breach did not compromise …
- Hackers Using Fake IT Support Calls to Breach Corporate Systems, Google
Hackers are using voice phishing (vishing) to breach corporate systems, impersonating IT support to trick employees into granting access to sensitive systems, …
- EU Prepares for Transnational Cyberattacks - GovInfoSecurity
The Council of the European Union approved a crisis management initiative to improve preparedness for transnational cybersecurity threats. The EU Cyber …
- Experts found 4 billion user records online, the largest known leak of Chinese personal data from a single source
A 631GB database containing 4 billion Chinese user records, including financial, WeChat, and Alipay data, was discovered online. The data, likely collected for …
- Alphabet CEO Sundar Pichai dismisses AI job fears, emphasizes expansion plans | TechCrunch
Alphabet CEO Sundar Pichai dismisses concerns about AI replacing jobs, emphasizing the company’s growth plans and AI’s role as an accelerator for new product …
- Can we still tell what’s real? ‘Unsettling’ new AI tech makes generating ultrarealistic videos easy | CBC News
Google’s new AI video model, Veo 3, can now generate highly realistic video and audio, making it difficult for viewers to distinguish between real and …
- Microsoft says it is ending USB-C confusion with updated Windows 11 WHCP | BetaNews
Microsoft is using the Windows Hardware Compatibility Program (WHCP) to address USB-C port confusion. The WHCP aims to ensure that USB-C ports on certified …
- OpenAI takes down covert operations tied to China : NPR
OpenAI disrupted ten covert influence operations, four likely originating from China, that utilized its AI tools for malicious purposes. These operations, …
- Interlock ransomware claims Kettering Health breach, leaks stolen data
The Interlock ransomware gang attacked Kettering Health, a major Ohio healthcare network with over 15,000 employees and 14 medical centers. The May 20 breach …
- Hackers Leak 86 Million AT&T Records with Decrypted SSNs
Hackers have leaked personal data from approximately 86 million AT&T customers, including fully decrypted Social Security Numbers. The breach, allegedly linked …
- Amazon to invest $10B in North Carolina to expand cloud infrastructure and advance AI
The article describes Amazon’s 10 billion investment in North Carolina to expand its cloud computing infrastructure and advance AI innovation. The investment …
- Attackers Impersonate Ruby Packages to Steal Telegram Data
Malicious RubyGems, posing as Fastlane plugins, were discovered on the RubyGems project site. The gems redirect Telegram API requests to servers controlled by …
- Google Exposes Vishing Group UNC6040 Targeting Salesforce with Fake Data Loader App
Google’s Threat Intelligence Group (GTIG) is tracking a vishing group, UNC6040, that targets Salesforce instances for data theft and extortion. The group …
- Lumma Stealer Malware Resurgence Challenges Global Takedown
The Lumma Stealer malware, a popular tool for cybercriminals to steal credentials and financial data, resurfaced just days after an international takedown. The …
- Rajkot civic body’s GIS website hit by cyber attack, over 400 GB data feared stolen – DataBreaches.Net
A suspected cyber attack targeted the Rajkot Municipal Corporation’s GIS website, potentially compromising over 400 GB of data. The BSNL cyber security team is …
- 450M records allegedly stolen in Dubai hospital hack | Cybernews
A ransomware gang claims to have stolen 450 million patient records from American Hospital Dubai and is threatening to leak the data on June 8th. The stolen …
- Code Bug at Compliance Firm Vanta Leaks Customer Data to Other Clients
A software bug at Vanta, a compliance automation provider, exposed private customer data to other clients. The issue, caused by a product code change, affected …
- Over 30 Vulnerabilities Patched in Android - SecurityWeek
Google’s June 2025 Android update addresses 30+ high-risk flaws, including CVE-2025-26443, a local privilege escalation bug. Fixes span Android Runtime, …
- Vet: Open-source software supply chain security tool - Help Net Security
Vet helps developers and security teams detect vulnerabilities and malicious packages across ecosystems like npm, PyPI, Maven, Docker and more. It features …
- New Chrome Zero-Day Actively Exploited; Google Issues Emergency Out-of-Band Patch
Google has patched CVE-2025-5419, a high-risk V8 engine flaw (CVSS 8.8) under active exploitation. The issue enables remote attacks via crafted HTML. Update to …
- Thousands of ASUS routers compromised in sophisticated hacking campaign | Cybersecurity Dive
Over 9,000 ASUS routers have been compromised in an ongoing campaign exploiting CVE-2023-39780, with researchers warning of potential botnet formation. Linked …
- Threat Actor Claims TikTok Breach, Puts 428 Million Records Up for Sale
A threat actor named “Often9” claims to be selling 428 million TikTok user records on a dark web forum, allegedly obtained via an exploited internal API. While …
- Hacktivists, state-sponsored groups step up cyberattacks targeting manufacturing operations and OT systems - Industrial Cyber
Forescout’s latest research shows a 71% surge in cyberattacks targeting the manufacturing sector, with ransomware groups like RansomHub leading the charge. …
- CrowdStrike and Microsoft Collaborate to Harmonize Cyber Threat Attribution
CrowdStrike and Microsoft have announced a joint initiative to align cyber threat actor naming across vendors, aiming to eliminate confusion and accelerate …
- HPE security advisory (AV25-310) - Canadian Centre for Cyber Security
HPE has issued security advisory AV25-310 addressing vulnerabilities in HPE StoreOnce Software versions prior to 4.3.11. The Canadian Centre for Cyber Security …
- IBM security advisory (AV25-307) - Canadian Centre for Cyber Security
IBM has released security advisory AV25-307 to address critical vulnerabilities across a range of products, including Db2, Maximo, Guardium, Tivoli Monitoring, …
- Dell security advisory (AV25-306) - Canadian Centre for Cyber Security
Dell has issued security advisory AV25-306 addressing multiple vulnerabilities across several products, including VxRail, APEX for Red Hat OpenShift, Avamar, …
- Preinstalled Apps on Ulefone, Krüger&Matz Phones Let Any App Reset Device, Steal PIN
Three security vulnerabilities were disclosed in preloaded Android applications on Ulefone and Krüger&Matz smartphones. These vulnerabilities allow any app to …
- Nearly 1 million users switch mobile carriers in May in wake of SKT data breach
A record-breaking 933,509 South Koreans switched mobile carriers in May, nearly doubling the five-year monthly average, following a major SIM card data breach …
- Data Breaches Affected 170 Million Patient Records in 2024 - Hematology Advisor
A new study published in JAMA Network Open reveals that health care data breaches in the U.S. more than doubled between 2010 and 2024, with affected patient …
- Adidas Canada hit with data breach affecting customers' personal information
Adidas Canada has notified customers of a data breach involving personal information accessed through a third-party customer service provider. The compromised …
- New Alleged Breaches: Bank Banten Customer Data, Deloitte Source Code, and TotalEnergies France - SOCRadar® Cyber Intelligence Inc.
SOCRadar has identified several alleged data breaches surfacing on the dark web, highlighting continued threats to corporate and personal data. Threat actors …
- The Secret Defense Strategy of Four Critical Industries Combating Advanced Cyber Threats
As cyber threats grow more sophisticated, security teams across critical sectors—financial services, energy, transportation, and government—are increasingly …
- Iranian Robbinhood Ransomware Operator Pleads Guilty in US City Attacks
Sina Gholinejad, a 37-year-old Iranian national, has pleaded guilty to leading Robbinhood ransomware attacks that crippled public services in U.S. cities like …
- Red Hat security advisory (AV25-304) - Canadian Centre for Cyber Security
Red Hat has issued security updates for Linux kernel vulnerabilities affecting multiple platforms, including various versions of Red Hat Enterprise Linux, Real …
- Ubuntu security advisory (AV25-305) - Canadian Centre for Cyber Security
Ubuntu has released security updates addressing Linux kernel vulnerabilities affecting multiple versions, including 16.04 ESM through 24.10. Published between …
- Qualcomm Flags Exploitation of Adreno GPU Flaws, Urges OEMs to Patch Urgently - SecurityWeek
Qualcomm has issued an urgent advisory after confirming active, targeted exploitation of three Adreno GPU flaws—two rated critical—likely linked to commercial …