A threat actor has resurfaced data stolen from a 2021 AT&T breach, this time combining previously separate files to intensify privacy risks for millions. The restructured leak links Social Security numbers and dates of birth to individual phone numbers, potentially exposing sensitive information of up to 49 million users. Originally part of a breach that […]
Hackers have launched a targeted supply chain attack against the RubyGems ecosystem, deploying malicious packages to exfiltrate Telegram bot tokens and messages. The campaign, detected by Socket.dev researchers, coincided with Vietnam’s nationwide block of Telegram on May 21, 2025. Threat actors uploaded two typosquatted gems—fastlane-plugin-telegram-proxy and fastlane-plugin-proxy_teleram—masquerading as legitimate Fastlane plugins widely used in CI/CD […]
Israel-based spyware vendor Paragon has severed ties with the Italian government following a dispute over an investigation into a cyber intrusion involving a journalist’s phone. The company had offered to assist in an audit to determine whether its technology was used in the alleged hack of journalist Francesco Cancellato’s device. However, Italian authorities declined the […]
Security researchers have uncovered a stealthy new variant of the ClickFix LightPerlGirl malware that targets users through PowerShell scripting and clipboard hijacking. The attackers deliver the malicious payload via a compromised travel website, increasing the threat’s reach and complexity. This latest strain focuses on silently injecting the Lumma infostealer into victims’ systems. The method involves […]
Israeli authorities have warned that Iranian operatives are targeting local surveillance systems to help guide missile strikes, echoing tactics observed in the war in Ukraine. Officials urged security camera owners to take precautions as Iran hacks Israeli cameras, potentially turning civilian technology into tools for military intelligence. The warning highlights growing concerns over the misuse […]
Mozilla has released Firefox 140, addressing a collection of critical security vulnerabilities that include a high-severity code execution flaw. Firefox 140 patches critical issues such as CVE-2025-6424, a use-after-free bug in the FontFaceSet component, which could allow attackers to execute arbitrary code on targeted systems. The update resolves 12 security flaws, including CVE-2025-6436, a group […]
A newly identified vulnerability in popular integrated development environments, including Visual Studio Code, has exposed a significant security gap in how these platforms verify third-party extensions. Researchers found that flawed verification mechanisms allow malicious publishers to bypass trusted status checks and embed harmful code in what appear to be legitimate extensions. The flaw affects several […]
A newly identified Linux-based botnet known as PumaBot is targeting embedded Internet of Things (IoT) devices by brute-forcing SSH credentials, according to cybersecurity researchers. Written in the Go programming language, PumaBot is designed to infiltrate vulnerable systems and deploy malicious payloads after gaining unauthorized access. The malware specifically targets devices with weak or default SSH […]
Cisco has issued patches for a critical vulnerability affecting cloud deployments of its Identity Services Engine (ISE), a key component in network access control. The flaw, which impacts the security of cloud-based ISE instances, was accompanied by the public release of a proof-of-concept (PoC) exploit, heightening the urgency for organizations to apply the fix. The […]
More than 75 organizations worldwide have been targeted in a cyber-espionage campaign attributed to a suspected Chinese state-sponsored hacking group, according to cybersecurity firm SentinelOne. The campaign was uncovered when the attackers attempted to breach the company’s own servers, prompting further investigation. SentinelOne identified a sophisticated operation aimed at compromising global entities across multiple sectors. […]
A limited set of Canva creator data has been uncovered in a newly leaked database associated with Chroma, a Russian-operated AI chatbot project, according to cybersecurity reporting by Hackread. The exposed data was discovered among files linked to the Chroma platform, which is believed to be used for collecting and processing online information to enhance […]
The United States has emerged as the leading country in the number of unsecured surveillance cameras, raising significant concerns over privacy and cybersecurity. A new report reveals that thousands of cameras in homes and offices across the U.S. are accessible without proper security protocols, leaving live footage vulnerable to unauthorized viewing. These exposed devices, often […]