News

Website owners are being urged to secure their systems after Australia’s national cybersecurity agency warned of an active global hacking campaign targeting websites running popular content management systems (CMS), including WordPress and Joomla. The attacks focus on exploiting known software and plugin vulnerabilities to install malicious webshells, giving attackers long-term access to compromised servers. According […]

U.S. cybersecurity officials are considering a significant policy shift that would reduce the time federal agencies have to fix critical vulnerabilities from weeks to just three days, as artificial intelligence continues to accelerate cyberattacks and increase the scale and sophistication of threats targeting government systems. Advanced tools like Anthropic Mythos and OpenAI GPT-5.4-Cyber are reshaping

Cybercriminal group ShinyHunters has claimed responsibility for a major data breach involving Alert 360, one of the largest home and business security providers in the United States. The group alleges that over 2.5 million records were exposed after the company refused to meet ransom demands. According to the hackers, approximately 10GB of compressed data—containing personally

Cybercriminals are once again exploiting tax season—this time by leveraging the name of Elon Musk in a sophisticated IRS-themed phishing campaign. According to new research from Cofense, attackers are sending convincing spoofed emails designed to trick recipients into handing over sensitive financial information, ultimately enabling account takeovers and identity theft. The fraudulent email appears legitimate

A cybersecurity researcher has uncovered a dangerous zero-day vulnerability in Adobe Reader that could allow attackers to steal sensitive local files and potentially take full control of a victim’s system—all by convincing users to open a malicious PDF. The flaw was discovered by researcher Haifei Li using his exploit detection platform EXPMON. Despite being reported

A recent cyberattack has disrupted services at Intoxalock, leaving thousands of drivers across the United States unable to start their vehicles. The company, known for its court-ordered ignition interlock devices that require a breath sample before a car can start, confirmed that the incident began on March 14 and forced a temporary shutdown of key

Teen sextortion scams are rapidly increasing as cybercriminals target young people on social media, messaging apps, and online gaming platforms. Authorities like the Federal Bureau of Investigation warn that these scams are becoming one of the most dangerous online threats facing teenagers today. Sextortion occurs when scammers trick victims into sending explicit photos or videos

Artificial intelligence company Anthropic has filed a lawsuit against the U.S. Department of Defense, seeking to block the Pentagon from placing the AI lab on a national security blacklist. The legal action marks a significant escalation in the company’s dispute with the U.S. military over restrictions on how its artificial intelligence technology can be used.

Cybersecurity researchers have disclosed a new attack technique showing how artificial intelligence (AI) assistants with web browsing or URL-fetching capabilities can be abused as covert command-and-control (C2) relays. The method could allow attackers to hide malicious communications within legitimate enterprise traffic, making detection significantly more difficult. The technique, called “AI as a C2 proxy,” demonstrates

Earlier this week, the hacker group ShinyHunters confirmed their involvement in a significant data breach at Panera Bread, which led to the theft of over 14 million customer records. The stolen information includes personal details like names, email addresses, phone numbers, home addresses, and account data. Panera Bread has acknowledged the breach and described the