The recent breach at Citigroup highlights a serious lapse in cybersecurity protocols, raising questions about the institution's competence. While the precise method hackers used to obtain credit card details remains unclear, it is evident that a critical vulnerability allowed unauthorized access through simple scripting methods.
The attack sequence was straightforward: hackers first gained...
Fortinet has issued critical security patches addressing a previously unknown vulnerability in FortiWeb that cybercriminals are currently leveraging in active exploitation campaigns.
The security weakness, designated as CVE-2025-58034, was discovered and disclosed by Jason McFadyen from Trend Micro's Trend Research division.
This flaw enables authenticated attackers to achieve remote code...
The FBI has issued a public warning highlighting a significant threat posed by Russian intelligence-linked actors targeting popular encrypted messaging services like Signal and WhatsApp. These malicious entities have launched widespread phishing campaigns that have already compromised thousands of user accounts globally.
This alert marks the first official attribution directly connecting these...
A significant cybersecurity incident has compromised the Pajemploi platform, a French social security system designed for parents and professional childcare workers. The breach potentially affects approximately 1.2 million registered caregivers who provide services to private households.
Pajemploi operates under Urssaf, France's primary organization responsible for managing social security...
Federal agencies face a critical deadline to secure their email systems.
A dangerous security flaw in the widely-used Zimbra Collaboration Suite is under active attack.
This vulnerability, identified as CVE-2025-66376, allows attackers to inject malicious scripts through specially crafted emails.
Exploitation can lead to session hijacking and the theft of sensitive data from within the...
As smartphones grow increasingly advanced and widespread, their vulnerability to malicious threats, scams, and privacy breaches also rises. Android devices are no exception to this trend. In response, two reputable cybersecurity providers have introduced early testing versions of security solutions tailored for Android, currently available as free beta downloads.
Both ESET Mobile Security and...
Australian digital rights advocates are raising alarms as the nation implements new age verification rules, leading to a surge in VPN usage.
This spike highlights public concern over what experts call a porous and risky verification system.
There is a growing fear that authorities may next move to restrict or ban VPN services entirely.
Such a ban would pose severe threats to privacy and digital...
A recent cybersecurity investigation has exposed a troubling reality about data protection in the age of AI-powered customer service. Security expert Jeremiah Fowler, working with ExpressVPN, discovered three unprotected databases containing approximately 3.7 million records of sensitive customer information—all accessible to anyone who knew where to look.
What makes this discovery...
Cybersecurity experts have identified seven malicious packages on the Node Package Manager (npm) platform that leverage Adspect's cloud infrastructure to distinguish between security analysts and genuine targets, ultimately directing unsuspecting users toward fraudulent destinations.
Socket, an application security firm, revealed that these packages aim to redirect victims to cryptocurrency...
The notorious LulzSec collective has expanded its recent campaign,
shifting focus from Sony to new, high-profile targets.
While a previous breach of Sony Pictures made headlines,
the group's activities have now encompassed both law enforcement and gaming giants.
Nintendo's U.S. servers were compromised several weeks prior,
though the hackers claim they extracted no sensitive data.
In a public...