Cybersecurity
Latest news, analysis, and updates in cybersecurity.

Critical Gitea Bug Hijacks Systems for Crypto Mining
A critical Gitea vulnerability is under active attack, letting hackers hijack servers for cryptocurrency mining, confirmed by CISA's urgent patch order.

Iran Cyberattack Shuts UK Power Plant Amid US Sanctions
US sanctions target six Iranian hackers following a destructive cyberattack that forced a UK power plant offline for four days, signaling a sharp escalation aga

OpenAI Confirms AI Hackers Are Already Routine
OpenAI's global affairs chief warned of routine, AI-driven cyberattacks in a confession that the primary threat model from advanced AI is a current reality, not

Finance Heist Hijacks Live Microsoft 365 Session for 30 Days
Cybercriminals stole a live Microsoft session token with one click, bypassing multifactor authentication to hijack a finance inbox for 30 days and reroute vendo

Australia Forces Roblox to Overhaul Child Safety Flaws
Australia's eSafety Commissioner found serious gaps in Roblox's protections, compelling the platform to make emergency fixes under court order and submit to ind

U.S. Charges Iran in Multi-Billion Dollar Hacking Heist
U.S. prosecutors charged 17 Iranians with stealing over $3 billion in intellectual property from American universities and companies for Iran's Revolutionary Gu

HHS Reveals True CareCloud Breach Impact: 3.7M Victims
The CareCloud healthcare data breach is officially ten times worse than first reported, now impacting 3.7 million people, a discrepancy that reveals major flaws

Fraud Ring Turns State Business Filings into $12 Million Weapon
Criminals stole nearly $12 million by hijacking legitimate companies and creating fake ones through New Jersey's public business registry, turning state documen

Pokémon Center Shipments Axed by Logistics Data Breach
A Pokémon Center logistics vendor breach didn't just expose data. It forced the cancellation of paid orders for limited edition merch, revealing how fragile col

Bank Outage Triggered by Third-Party IT Vendor Flaw
A critical vulnerability in a vendor tool used to manage bank IT systems caused outages, proving a bank's security is only as strong as its most vulnerable thir

Apple Spyware Alerts Swamp Targets In 110 Countries
An unprecedented wave of Apple spyware alerts hit targets across 110 countries, signaling a troubling shift from surgical government surveillance to mass-scale

Coldcard's $115 Million Security Breach Shatters Bitcoin Vault Myth
A critical five-year-old firmware bug in Coldcard wallets, which compromised the randomness used to create wallet seeds, has led to thefts exceeding $115 millio