The FBI warns QR codes are being weaponized by North Korean hackers in a new wave of spear-phishing campaigns targeting U.S.-based organizations. In an advisory issued Thursday, federal investigators said state-sponsored actors tied to North Korea have begun embedding malicious QR codes into phishing emails aimed at compromising systems at think tanks, academic institutions, and […]
The Information Commissioner’s Office (ICO) warns that poorly developed agentic AI applications in government could result in flawed decision-making and reduced public trust. The regulator raised concerns about the use of automated systems that act independently, especially without clear oversight or accountability in the public sector. In response, the ICO plans to open a consultation […]
The UK overhauls its cyber plan as part of a £210 million investment aimed at protecting public services from growing digital threats. As part of the initiative, authorities introduced a new Government Cyber Unit to improve coordination, bolster cyber resilience, and respond rapidly to incidents affecting critical infrastructure. The revamped Cyber Action Plan emphasizes enhanced […]
Poland’s national cybersecurity team, CERT Polska, has disclosed two newly identified vulnerabilities affecting the Asseco InfoMedica Plus software. The issues, tracked as CVE-2025-8306 and CVE-2025-8307, emerged following an external report that prompted further analysis by the agency. Both vulnerabilities could pose a risk to users of the healthcare-focused application, though details surrounding their technical implications […]
Malicious actors have exploited fake ChatGPT extensions and counterfeit DeepSeek tools to spy on more than one million Google Chrome users, according to cybersecurity researchers. These extensions, disguised as legitimate AI-related tools, secretly collected user data once installed, compromising privacy under the guise of enhancing browser functionality. The deceptive add-ons appeared on the Chrome Web […]
A malicious tool dubbed NodeCordRAT uses Discord as a command-and-control platform to exfiltrate sensitive browser data. According to cybersecurity researchers, the remote access trojan targets victims through compromised NPM packages, primarily aiming to extract information from Google Chrome, such as login credentials, browsing activity and authentication tokens. Distributed through seemingly legitimate JavaScript libraries, the malware […]
OpenAI’s new health-focused feature has sparked a wave of concern among privacy advocates. The company encouraged users to link personal medical records and wellness app data through the latest ChatGPT health prompts, saying this would deliver more personalized support. In a recent blog post, OpenAI assured users that it added enhanced data privacy protections to […]