Cybersecurity
Latest news, analysis, and updates in cybersecurity.

Russian Signal Phishing Hijacks VIP Accounts in Support Scam
Russian actors are phishing Signal users for recovery keys, targeting officials, military figures and journalists without breaking encryption.

200,000 Tata Files Expose iPhone 18 Pro Leak on Dark Web
A Tata Electronics breach reportedly put iPhone 18 Pro test photos and supplier maps on the dark web, raising Apple's supply-chain risk.

AI Threats Push Apple Security Updates Into Overdrive
Apple is shipping security fixes faster as AI threatens to turn bugs into attacks before scheduled updates arrive.

Private Key Crypto Hacks Bleed $6.7B From Web3's Vaults
Private key theft, not code bugs, now accounts for about 40% of crypto's $16.69B hack losses.

CI/CD Vulnerabilities Hand Attackers Keys to Millions of Repos
Cordyceps could let outsiders hijack CI/CD workflows, steal secrets, and compromise millions of open source repositories.

14.2 Million Email Accounts Exposed by KDDI Data Breach
A third-party software flaw may have exposed 14.2 million email accounts across six Japanese ISPs using KDDI's platform.

Cardano Wallet Exploit Rips $2.4M From SecondFi Users
SecondFi lost $2.4M after a Cardano wallet flaw exposed 374 wallets, while 129M ADA was moved to custody before worse damage.

Klue Supply Chain Hack Spirals After Hackers Rob Icarus
Klue's breach has morphed into a thief-robs-thief extortion fight, with customers stuck between Icarus and a second hacker group.

18 Severe Flaws Push Chrome 149 Update Into a Must-Do
Chrome 149 fixes 18 severe vulnerabilities, including four critical bugs. No active exploits are flagged, but the patch shouldn't wait.

Fake OpenAI Invites Lure Security Staff into ChatGPT Trap
Attackers are using real OpenAI invite emails to lure security staff into fake ChatGPT workspaces built for data theft.

Clean GitHub Repo Tricks AI Coding Agents Into Malware
A clean GitHub repo can trick AI coding agents into fixing setup errors that execute malware and open a reverse shell.

Gaslight macOS Malware Tricks the AI Tools Hunting It
Gaslight hides fake errors in a Rust binary to mislead AI analysis tools before defenders understand what the macOS malware does.