The Canada Revenue Agency (CRA) faced a significant data breach during the 2024 tax season. Hackers exploited confidential data from H&R Block to gain unauthorized access to taxpayers’ personal accounts. The perpetrators altered banking...
Researchers have uncovered a new vulnerability in the Windows operating system related to its theme settings, enabling attackers to remotely steal NTLM credentials. The issue remains prevalent across all versions of Windows—from 7 through...
The Chinese-speaking cybercriminal group You Dun has been implicated in widespread attacks on the digital infrastructure of various countries across Asia and the Middle East. Analysts from The DFIR Report uncovered an exposed directory...
Two databases belonging to the French telecommunications operator Free have been listed for sale on the dark web. The information allegedly pertains to clients of Free Mobile and subscribers to the Freebox internet platform....
The Indian insurance company Star Health and Allied Insurance announced there is no evidence implicating the Chief Information Security Officer in the recent data leak incident. The company determined that the alleged correspondence between...
Andy Ayrey, the founder of the Truth Terminal platform, fell victim to a hacking attack during which his account on the social network X was exploited to promote a fraudulent token. The attacker posted...
The Five Eyes alliance, comprising Australia, Canada, New Zealand, the United Kingdom, and the United States, has launched a new initiative to bolster cybersecurity in IT startups. Known for their close intelligence coordination, these...
The U.S. Federal Cybersecurity Council has launched an investigation into a major hacking attack by a Chinese group known as Salt Typhoon, targeting the nation’s telecommunications companies. Previously, it was reported that hackers attempted...
Marco Figueroa, Mozilla’s Program Manager for generative AI bug bounty initiatives, unveiled a new vulnerability in the built-in safeguards of ChatGPT-4o. The disclosure was made through Mozilla’s 0Din (0Day Investigative Network) program, launched in...
More than six years have passed since the discovery of the legendary Spectre vulnerability, yet the latest AMD and Intel processors remain susceptible to speculative execution attacks. This conclusion was reached by researchers from...
In Taiwan, a government entity and a religious organization have fallen victim to the Chinese-linked hacker group, Evasive Panda. The attackers employed a previously unknown toolset called CloudScout, designed to compromise cloud services. CloudScout...
The largest bank in the United States, JPMorgan Chase, has initiated legal action against fraudsters who illicitly withdrew substantial sums through ATMs by exploiting a system vulnerability. The situation went viral on social media...
