Latest Articles

Handala Claims Hack of FBI Director Kash Patel’s Personal Email, Leak Private photos

Handala Claims Hack of FBI Director Kash Patel’s Personal Email, Leak Private photos

A threat actor operating under the name Handala has claimed responsibility for hacking the personal email account of FBI Director Kash Patel, publishing photographs, emails, and documents online in...

Small Ohio City Discloses Data Breach Affecting Nearly 5,000 Individuals

Small Ohio City Discloses Data Breach Affecting Nearly 5,000 Individuals

The City of Washington Court House in Ohio publicly announced a data breach on March 26, 2026. The incident stemmed from unauthorized access to an external system via hacking. The breach occurred on...

Claude Chrome Extension Flaw Allowed Zero-Click Prompt Injection via Any Website

Claude Chrome Extension Flaw Allowed Zero-Click Prompt Injection via Any Website

Cybersecurity researchers have disclosed a vulnerability in Anthropic's Claude Google Chrome extension that could have allowed attackers to inject malicious prompts into the AI assistant simply by...

Node.js Fixes Critical Flaws in New Security Release, Warns of Remote DoS Risk in TLS SNICallback Handling

Node.js Fixes Critical Flaws in New Security Release, Warns of Remote DoS Risk in TLS SNICallback Handling

Node.js has released a fresh round of security updates across its 20.x, 22.x, 24.x, and 25.x release lines to address multiple vulnerabilities ranging from high to low severity, including a remotely...

Ransomware Hits Port of Vigo, Forcing Manual Cargo Procedures After IT Systems Are Isolated

Ransomware Hits Port of Vigo, Forcing Manual Cargo Procedures After IT Systems Are Isolated

The Port Authority of Vigo in Spain was hit by a ransomware attack around March 25, 2026, forcing the organization to isolate parts of its IT environment and temporarily suspend digital...

NightSpire Ransomware Group Targets Anbogen Therapeutics in Emerging Cyber Incident

NightSpire Ransomware Group Targets Anbogen Therapeutics in Emerging Cyber Incident

The NightSpire ransomware group publicly claimed responsibility for a cyberattack on Anbogen Therapeutics Inc. around March 25, 2026. Monitoring platforms first detected the claim on that date, with...

Citrix Urges Immediate Patching for NetScaler Flaws Resembling CitrixBleed Session Theft Bugs

Citrix Urges Immediate Patching for NetScaler Flaws Resembling CitrixBleed Session Theft Bugs

Citrix is urging customers to patch NetScaler ADC and NetScaler Gateway appliances immediately after releasing fixes for two serious vulnerabilities, including a critical memory overread bug that...

Kali Linux 2026.1 Released With 8 New Tools, Kernel 6.18, and New BackTrack Mode

Kali Linux 2026.1 Released With 8 New Tools, Kernel 6.18, and New BackTrack Mode

Kali Linux 2026.1, the first release of the year for the popular penetration testing distribution, is now available with a refreshed look, a kernel jump to Linux 6.18, eight newly added security...

AI Deepfakes and Digital Cloaking Power New Investment Scams That Drain Victim Bank Accounts

AI Deepfakes and Digital Cloaking Power New Investment Scams That Drain Victim Bank Accounts

A sophisticated new wave of online fraud is blending artificial intelligence, deepfake media, and commercial cloaking infrastructure to push highly convincing investment scams at scale, according to...

India's CERT-In Warns of High-Severity TP-Link Router Flaws Affecting Archer NX200, NX210, NX500, and NX600 Models

India's CERT-In Warns of High-Severity TP-Link Router Flaws Affecting Archer NX200, NX210, NX500, and NX600 Models

India's Computer Emergency Response Team (CERT-In) has issued a high-severity warning for multiple vulnerabilities affecting TP-Link Archer NX200, NX210, NX500, and NX600 routers, flaws that could...

Infinite Campus Issues Data Breach Warning After ShinyHunters Extortion Attempt

Infinite Campus Issues Data Breach Warning After ShinyHunters Extortion Attempt

Infinite Campus, a leading provider of student information systems for K-12 schools across the United States, has formally notified its customers of a security incident involving unauthorized access...

Crunchyroll Investigates Alleged Breach After Hacker Claims Theft of 6.8 Million User Records

Crunchyroll Investigates Alleged Breach After Hacker Claims Theft of 6.8 Million User Records

Anime streaming platform Crunchyroll is investigating a potential data breach after a threat actor claimed to have stolen personal information tied to roughly 6.8 million users, raising fresh...

HackerOne Discloses Employee Data Breach After Navia Hack Exposed SSNs and Benefits Data

HackerOne Discloses Employee Data Breach After Navia Hack Exposed SSNs and Benefits Data

Bug bounty platform HackerOne is notifying employees that their personal information was exposed following a breach at Navia, one of its U.S. benefits administrators, in an incident that highlights...

ShinyHunters Claim Data Theft from Ameriprise Financial in Latest Cybersecurity Scare

ShinyHunters Claim Data Theft from Ameriprise Financial in Latest Cybersecurity Scare

Ameriprise Financial has become the focus of a fresh cybersecurity claim issued by the notorious hacking collective ShinyHunters. The group publicly stated on underground leak forums that it had...

North Korean Hackers Exploit VS Code Auto-Run Tasks to Deploy StoatWaffle Malware

North Korean Hackers Exploit VS Code Auto-Run Tasks to Deploy StoatWaffle Malware

A North Korean-linked threat actor known as WaterPlum, also referred to as Contagious Interview, has been identified targeting developers through a sophisticated malware campaign leveraging Visual...

Mazda Discloses Data Breach Affecting Employees and Business Partners

Mazda Discloses Data Breach Affecting Employees and Business Partners

Mazda Motor Corporation has disclosed a cybersecurity incident involving unauthorized access to a warehouse management system used for handling automotive parts procured from Thailand. The breach...

Tycoon2FA Phishing Platform Rebounds Days After Global Takedown

Tycoon2FA Phishing Platform Rebounds Days After Global Takedown

The phishing-as-a-service platform Tycoon2FA has rapidly resumed operations just days after a coordinated international takedown led by Europol and Microsoft. Despite the seizure of hundreds of...

Mandiant Says Voice Phishing Is Replacing Email Phishing as Attackers Target SaaS Identities

Mandiant Says Voice Phishing Is Replacing Email Phishing as Attackers Target SaaS Identities

Voice phishing is rapidly overtaking traditional email phishing as one of the most effective initial access techniques used by attackers, according to Mandiant's newly released M-Trends 2026...

Trivy Supply Chain Attack Spreads Infostealer via Docker, Fuels CanisterWorm and Kubernetes Wiper Attacks

Trivy Supply Chain Attack Spreads Infostealer via Docker, Fuels CanisterWorm and Kubernetes Wiper Attacks

Cybersecurity researchers have uncovered a widening supply-chain attack centered on Trivy, the widely used open-source vulnerability scanner, after threat actors pushed trojanized container images to...

Microsoft Warns of IRS Tax-Season Phishing Campaign Hitting 29,000 Users With ScreenConnect, Datto, and SimpleHelp

Microsoft Warns of IRS Tax-Season Phishing Campaign Hitting 29,000 Users With ScreenConnect, Datto, and SimpleHelp

Microsoft has warned of fresh tax-season phishing campaigns that are impersonating the Internal Revenue Service (IRS), accountants, and tax professionals to steal credentials, capture two-factor...