Security

Cybersecurity news: breaches, ransomware, actively exploited vulnerabilities and the attackers behind them, with what to patch.

554 articles · page 2 of 6

All AI Hardware & Devices Crypto Programming Security

Viewgrid list compact

Apple blocks eight rogue web certificates, but Mac vulnerability remains

ICO reprimands firms after 'Password1' test account exposed data of 3,300, mostly children

21 Oct· 3 sources

Teenager jailed for providing cybersecurity support to al-Qaeda

21 Oct· 2 sources

Hacker's AI agents breach about 100 companies, researchers say

CISA and partners issue SafePay ransomware guidance as victims reach about 600

21 Oct· 2 sources

Tech Giants Block Eight Vulnerable eMudhra Certificates Linked to Impersonation Risk

Stolen UpdraftCentral keys used to backdoor WordPress sites

Apple, Google and Mozilla move to block compromised eMudhra certificates

21 Oct· 3 sources

eMudhra used 4 as a private key: Eight certificate keys cracked in under a second

20 Oct· 3 sources

Zeabur to shut down after second security breach leaks millions of user records

Curl maintainers overwhelmed by vulnerability flood, shift low-severity bugs to public disclosure

Ransomware groups spent months exploiting Palo Alto firewall bug, Unit 42 warns

ICO reprimands ONL and Data Cymru over weak password that left children's data exposed

20 Oct· 2 sources

Meta's Muse AI agent found to expose private data through predictable share links

Leaked documents detail US Army plan for self-replicating AI agents to destroy targets in enemy networks

20 Oct· 2 sources

Nigerian National Sentenced to 8 Years for Spearphishing Attacks on US Tax Preparers

Ahold Delhaize files Dutch police report, says no evidence yet of data theft in cyberattack

OVHcloud CLI backdoored on GitHub in attack targeting developer secrets

Judge Orders Ex-OpenAI Engineer to Stay in Jail as Saudi-Backed Bond Questioned, New Evidence Surfaces

Researchers warn of active attacks on unpatched Plex media servers

WordPress SEO plugin Rank Math PRO backdoored in supply-chain attack

Nikkei hit by third data breach in a month, 1.8 million records exposed

Hackers breach AI coding tool OpenCode, run up charges on user accounts via stolen API keys

19 Oct· 2 sources

Ahold Delhaize confirms cyberattack took US and European systems offline

Hackers hijack AOMEI update servers in brief supply chain attacks

Florida police say scammers used AI to clone sheriff's voice in jury duty scam

Florida DMV data breach exposes driver license records of current and former residents

Chinese-speaking hacker uses AI agents to breach more than 100 company websites

19 Oct· 2 sources

F5 issues emergency patches for critical NGINX flaws allowing code execution

Canadian cybersecurity executive charged with extortion offences

ConnectWise Suspends Cloud Backup Services After Unauthorized Access, Credential Theft Reported

Researchers expose spyware campaign that weaponised online ads against millions of devices

Critical Linux KVM Flaw PwnEscape Enables Novel Guest-to-Host Attack

Hackers exploit critical SiteGuard WAF flaw to gain root, SYSTEM access

ConnectWise disables Cloud Backup service after hackers compromise Microsoft 365 tenants

Drupal patches critical remote code execution flaws, warns exploits may emerge imminently

Cybercriminals Attack Physical Building Systems in Latest Extortion Trend

Napoleon Perdis data breach affects 340,000 customers

Florida driver license and motor vehicle records potentially exposed in data breach

Cyber-attack cooks supermarket fridges across France, destroying thousands of tons of food

17 Oct· 2 sources

Critical 'BlockStrap' flaw puts Magento servers at risk of remote code execution

Zero-click attacks via targeted ads delivered Candiru spyware to Al Jazeera, researchers find

Fake WhatsApp app with more than 500,000 downloads appears above real version on Google Play

Court Records Show Telegram's User Data Handover to US Authorities

Israeli Spyware Firm Behind First Known 'Zero-Click' Ad Attacks, Targeting Al Jazeera Journalists

Burger King Japan data breach exposes 11 million customer records

Cyberattack on BAE Systems halts US bankruptcy court system for a week

16 Oct· 2 sources

BeyondTrust warns of zero-day attacks on Remote Support appliances, patches critical flaw

French supermarket cyberattack exploited known vulnerabilities in refrigeration controllers, researchers had warned

Prompt injection attempts found hidden in website HTTP headers

GitHub accounts hijacked in GhostAction campaign hit 30,000 repositories

Citizen Lab uncovers first known use of targeted ads to deliver zero-click mercenary spyware

Fake Arch Linux packages impersonating yay and paru removed from AUR after malware upload

Hackers exploit unpatched Collabora flaw to backdoor Nextcloud servers

Proxyjacking campaign hijacks D-Link and Ubiquiti devices to sell stolen bandwidth in 34 countries

Israeli ad-tech firm Discover-Tech implicated in spyware targeting Al Jazeera devices

15 Oct· 2 sources

Eiliko robot toy stores conversations on insecure Chinese servers, security investigation finds

Spyware Makers Use Online Ads to Hack Devices, Citizen Lab Report Finds

15 Oct· 3 sources

INTERPOL-led operation nets 95 arrests in child sexual abuse material crackdown across 17 countries

Yandex data center strikes slow, but do not stop, Russian bot traffic, Cloudflare finds

US Air Force pilots used malware-ridden USB drives for mission planning, says former security official

UK Legal Aid Agency confirms hackers stole records dating back to 1978

15 Oct· 2 sources

Met Police reprimanded over unlawful use of retail crime platform Auror

Mass hack of refrigeration systems at 700 French supermarkets causes spoilage and fires

Cisco warns of actively exploited email-to-root flaw in Secure Email Gateway

14 Oct· 2 sources

Palo Alto Networks patches PAN-OS zero-day already exploited in attacks

AI-Assisted Team Breaks Chrome Sandbox in Six Days, Earns $250,000 Bounty

FBI seizes 187 laptops, arrests two US nationals in North Korean remote IT worker scheme

Android launches AI-powered scam detection in Google Messages

Global law enforcement operation disrupts phishing network behind 1 billion malicious messages

14 Oct· 2 sources

FBI shuts down over 40 North Korean laptop farms in Texas, seizing 200 devices

Ledger asks resellers in seven Asian markets to halt sales over suspected $86 million wallet tampering

14 Oct· 2 sources

Hirudo Android trojan replaces banking apps with patched copies to bypass security checks

CISA orders urgent patching of Ivanti vulnerability under active zero-day attack

Bank of England and IMF chiefs warn cyber attacks threaten trust in financial system

14 Oct· 3 sources

Ransomware attackers escalate personal threats against victims and families

Pluto Security raises $42M as enterprise AI tools create new security risks

14 Oct· 2 sources

Justice Department disrupts North Korean 'laptop farm' hacking scheme, arrests US facilitators

14 Oct· 2 sources

Windows 11 October update adds Emoji 17.0 and patches record 1,400+ security flaws

14 Oct· 2 sources

Critical Ghostscript vulnerability allows server takeover via PDF uploads

Saudi engineer charged with planting recording device in OpenAI conference room

13 Oct· 10 sources

Critical Docker Hub vulnerability let attackers impersonate users and tamper with container images

Ivanti zero-day attackers were preparing for lateral movement, researchers warn

13 Oct· 2 sources

Cyberattacks send French supermarket fridges to 50°C, spoiling food across hundreds of stores

Cyberattack on French supermarkets destroys food, sparks fires

Critical Zimbra Vulnerability Under Active Exploitation Allows Full Mailbox Harvesting

SAP fixes maximum-severity OAuth2 SSRF vulnerability in Cloud SDK for Python

Akira Ransomware Attack Highlights Gaps in Multi-Factor Authentication Coverage

'123456' password reportedly used in Danish data breach affecting 8.8 million people

13 Oct· 2 sources

Scientists call for global AI security body after 'preventable' hacks

13 Oct· 2 sources

Owner of Hobbs, Whistles and Phase Eight investigates cyber-attack that may have exposed customer data

13 Oct· 3 sources

Ledger asks resellers to halt sales across Southeast Asia as spy chip attack details emerge

13 Oct· 10 sources

Cyberattack on French supermarket fridges heats them to 50C, sparks fires

13 Oct· 4 sources

Google paid $90,000 bounty for DevSite RCE bug, then took two months to patch

French Supermarket Fridge Attack a 'Wake-up Call', Cyber Expert Warns, as Hack Spreads Across Europe

12 Oct· 6 sources

GitLab urges immediate patching of maximum-severity code execution flaw