North Korean hackers have been caught on video using artificial intelligence filters to disguise their identities during fake job interviews, according to a report by cybersecurity news outlet Hackread. In a concerning new tactic, the hackers used AI-generated visuals to appear as legitimate job candidates, deceiving potential employers. This represents the latest instance in which […]
Zscaler continues to strengthen its artificial intelligence capabilities as it expands its cybersecurity portfolio. Zscaler buys Splx, adding another AI-focused company to its roster shortly after acquiring Red Canary, a threat management firm that also leverages machine learning. The move reflects Zscaler’s broader strategy to integrate advanced AI tools into its cloud security offerings. The […]
Japanese retailer Askul confirmed a data breach following a cyberattack linked to a Russian hacking group. The company disclosed that the incident compromised contact and inquiry details from users of its e-commerce platforms—Askul, Lohaco and Soloel Arena. In addition, internal servers containing supplier-related information were also affected. Askul Confirms Data Breach as part of an […]
A newly uncovered surveillance tool, Dante spyware, has been tied to Memento Labs, a rebranded version of the controversial Hacking Team. Security researchers revealed that this advanced spyware is part of a broader cyber-espionage toolkit, signaling the group’s continued activity under a new identity. The spyware’s infrastructure and methods suggest links to a threat actor […]
SK Telecom reported a 90% drop in operating profit, citing the financial toll of a recent cyberattack that compromised personal data from roughly 27 million customers. The disclosure, made in April, revealed the extent of the breach and the resulting burden of compensation and recovery efforts. SK Telecom profit plunges as the company grapples with […]
Microsoft has resolved a persistent issue in Windows 11 that confused users for years. The glitch, which affected the “Update and Shut Down” option, caused systems to restart instead of powering off as intended. This long-overdue correction means users can now confidently shut down their devices without surprise reboots. Microsoft fixes decade-old behavior that originated […]
China-linked hackers have launched a global cyber campaign targeting Cisco firewall devices, according to recent reports. The China hackers breach Cisco equipment to exploit vulnerabilities in network infrastructure, potentially compromising sensitive enterprise data across various sectors. Security researchers have observed a rise in sophisticated attack patterns linked to state-sponsored groups. The attackers focused on gaining […]
Hackers hijack sites using an authentication bypass flaw in JobMonster, a popular WordPress theme used for job board websites. Security researchers detected active exploitation of this critical vulnerability, which makes it possible for attackers to take over administrator accounts under specific conditions. The flaw, tracked as CVE-2025-5397, is one of three major vulnerabilities disclosed in […]
Google’s November 2025 Android Security Bulletin highlights a critical zero-click remote code execution vulnerability identified as Android flaw CVE-2025-48593. This exploit affects the System component and targets Android versions 13 through 16. Because the flaw requires no user interaction to execute malicious code, it poses a significant threat to millions of devices across the ecosystem. […]
Google’s cybersecurity-focused AI tool, Big Sleep, recently uncovered five previously unknown vulnerabilities in Apple’s Safari WebKit. The flaws, which Apple has acknowledged, could allow attackers to trigger browser crashes or manipulate memory, posing risks to user security. This marks another instance where Google AI uncovers flaws in widely used software components, reinforcing the role of […]
Cybercriminals are using deceptive online ads to disguise malware as legitimate software like PuTTY and Microsoft Teams, in a campaign known as Putty Teams Ads Spread. The effort delivers OysterLoader, a stealthy tool that enables intrusions into corporate networks and serves as an entry point for the Rhysida ransomware group. Researchers at Expel uncovered this […]
A critical remote code execution flaw in XWiki’s SolrSearch component has triggered a wave of exploitation attempts, as hackers target the XWiki flaw through mass internet scanning. The vulnerability permits attackers with guest-level access to execute arbitrary commands, posing a serious threat to organizations running the open-source enterprise wiki platform. Though XWiki issued a patch […]