Mozilla has introduced a new security mechanism aimed at strengthening protections against malicious browser extensions in Firefox. The system is designed to detect and block add-ons that attempt to drain cryptocurrency wallets, a growing threat in the digital asset space. The feature has been integrated into Mozilla’s add-on portal, where users download and manage Firefox […]
A new malware campaign is leveraging fake browser verification prompts to trick users into executing malicious code, cybersecurity researchers have found. The attack mimics Google’s “I’m not a robot” CAPTCHA system, but instead of clicking images, users are instructed to perform keyboard commands such as pressing Windows + R, Ctrl + V, and Enter. Unbeknownst […]
Hackers have leaked a database containing personal records of 86 million AT&T customers, including decrypted Social Security Numbers, according to reports circulating online. The exposed data appears to include names, addresses, phone numbers, dates of birth and the decrypted SSNs of individuals tied to the U.S. telecom giant. The breach, believed to be one of […]
A critical vulnerability in Microsoft’s Remote Desktop Services, tracked as CVE-2025-32710, could allow unauthenticated attackers to execute arbitrary code remotely, the company disclosed on June 10. The flaw, rated 8.1 on the CVSS scale, affects a broad range of Windows Server versions from 2008 through 2025. The bug stems from a use-after-free condition combined with […]
Interpol said it has dismantled more than 20,000 malicious internet addresses and domains tied to 69 strains of information-stealing malware, as part of a coordinated global crackdown on cybercrime. The operation, dubbed Operation Secure, ran from January through April 2025 and involved law enforcement agencies from 26 countries. Authorities worked together to identify the malicious […]
Mainline Health and Select Medical Holdings have reported separate data breaches that compromised the personal information of more than 100,000 individuals. The Mainline Select Medical breaches mark a growing trend of cybersecurity incidents targeting healthcare providers, raising concerns about data protection in the sector. Both organizations confirmed the incidents but have not disclosed the specific […]
The European Digital Rights (EDRi) network voiced strong opposition last week to the European Commission’s proposed rules on data retention. In a joint response, EDRi blasts EU plans to expand the mandatory retention of user data by service providers, citing risks to privacy and civil liberties. The group raised concerns about the absence of proportional […]
Councils undergoing structural reorganisation encounter a complex set of digital, data and technology hurdles. As administrative boundaries shift and service models evolve, councils face tech turmoil that threatens to derail integration efforts. These challenges include consolidating legacy systems, aligning data standards and managing cybersecurity risks. Despite the disruption, technology leaders see opportunities to modernize infrastructure […]
Several radio stations operated by iHeartMedia suffered a data breach in December, exposing sensitive personal information including Social Security numbers and financial data. The breach affected multiple stations under the iHeartRadio brand, one of the largest radio networks in the United States. Details regarding the specific number of individuals impacted or the method by which […]
Cisco Systems Inc. has disclosed a critical vulnerability in its IOS XE Wireless LAN Controllers that could let remote attackers take full control of affected devices without authentication. Tracked as CVE-2025-20188, the flaw carries a maximum CVSS severity score of 10.0 and stems from a hard-coded JSON Web Token in the Out-of-Band Access Point Image […]
Malicious advertisements posing as cryptocurrency exchange platforms are circulating on Facebook, distributing malware to unsuspecting users. The ads, designed to mimic legitimate crypto services, lure victims by promising investment opportunities or exclusive trading tools. Once clicked, users are redirected to compromised websites where malware is covertly installed on their devices. This campaign underscores growing concerns […]
IXON, a Dutch provider of industrial remote access solutions, has patched two high-severity vulnerabilities in its VPN Client software that could allow local attackers to escalate privileges to system level on Windows, Linux, and macOS platforms. Tracked as CVE-2025-26168 and CVE-2025-26169, the flaws affect all versions prior to 1.4.4 and were assigned a CVSS score […]