North Korean hackers are using ClickFix social engineering tactics to compromise devices and perform data exfiltration in a highly focused cyber espionage campaign.
U.S. District Judge Tanya Chutkan said that while some aspects of Elon Musk and DOGE's legal level of access to federal data remain in doubt, a restraining order cannot be issued unless specific and immediate harms can be demonstrated.
A security breach affecting the AI aggregator platform OmniGPT has leaked the sensitive information of 30,000 individuals including API keys, chat logs, and uploaded files.
A new report from cybersecurity firm Hudson Rock finds that infostealer malware is present on "thousands" of systems belonging to the US military and major defense contractors such as Boeing and Lockheed Martin.
A massive brute force password attack involving 2.8 million IP addresses targets VPN devices from various companies including Palo Alto Networks, Ivanti, and SonicWall.
The UK government is once again leaning on Apple for unrestricted access to the cloud backup data of its users. Apple would not be able to warn users that the UK’s required backdoor had been implemented and that their encrypted iCloud data was no longer entirely safe.
Google Threat Intelligence Group has identified state-sponsored hackers from over a dozen countries abusing Gemini AI for cyber attacks with Iran and China being the heaviest users.
A crypto stealer malware, the first on the iOS App Store and also available on Google Play Store, leverages OCR and machine learning to steal crypto wallet secrets and passwords.
A data breach affecting food delivery company GrubHub has leaked the personal information of customers, merchants, and drivers after an unauthorized entity gained access using a third-party service provider’s account.
The AI software has reportedly been used to search federal data about agency spending on payroll and programs, something that could potentially violate federal privacy or security regulations if personal information is involved.
