A cybersecurity researcher who infiltrated North Korean hacker servers for 22 months discovered that 1,640 companies across 57 countries were impacted, with hundreds suffering severe intrusions via fake job interview lures.
Hackers targeted water and wastewater utilities in at least a dozen US states, causing temporary loss of monitoring and control. US authorities suspect Iranian involvement, while President Trump dismissed the claim.
Hackers have stolen approximately $130 million in cryptocurrency from offline Coldcard hardware wallets by exploiting a vulnerability in seed phrase generation.
Un ataque a los monederos fríos de Coldcard permitió a hackers robar cerca de 70 millones de dólares en bitcoin en 41 minutos, exponiendo una falla de seguridad en dispositivos considerados muy seguros.
A firmware exploit in Coldcard air‑gapped Bitcoin hardware wallets led to theft of over $114 million in Bitcoin, highlighting that even offline wallets remain vulnerable.
Michigan and Minnesota reported cyberattacks on multiple water systems, with nine impacted in Michigan and over 30 in Minnesota. Authorities are investigating, with federal warnings pointing to Iranian hackers. Officials confirmed all systems operated safely, with no known public health concerns.
Michigan confirmed nine water systems were impacted by cyberattacks, following similar incidents in Minnesota affecting over 30 systems. Officials assure safety, but some localized disruptions occurred. The FBI is investigating, with warnings about Iranian hackers.
Defcon's 2023 badges feature the Baochip-1x, an open-source chip designed by Andrew 'bunnie' Huang, offering verifiable security, transparency, and a second life as a removable hardware security token
Ariana Grande's eighth album, 'Petal,' is a moody, dark departure from her previous work, exploring themes of rage, fame, and co-dependence through fuzzed-up production and muted vocals, contrasting with her recent 'Wicked' role and previous album, 'Eternal Sunshine.'
Russian state-sponsored group TA488 is exploiting a maximum-severity Microsoft Outlook Exchange Server vulnerability (CVE-2026-42897) to install sophisticated OWAReaper malware, stealing credentials and gaining persistent access to OWA accounts.
The UK's Cyber Choices programme, also known as Cyber Prevent, is successfully diverting young hackers like 16-year-old Lucas from cybercrime by offering positive encouragement and professional training opportunities, addressing the rising issue of teenage hacking groups.
Iran-affiliated hackers are linked to cyberattacks on dozens of Minnesota water and wastewater utilities, causing disruptions like telecommunications outages and boil-water notices. This marks a significant state-sponsored targeting of civilian infrastructure in the US, raising concerns about further attacks.
A cyber-attack on the UK's Department for Education (DfE) and Police National Legal Database (PNLD) has exposed over 740,000 pieces of data, including personal details of officials, educators, police officers, and members of the public. Hackers, identifying as ExfilSquad, are demanding payment in exchange for not releasing all stolen data.
U.S. agencies warn that Iranian state-backed hackers are actively targeting American water and energy industrial control systems, expanding attacks beyond Rockwell products to include Schneider Electric and Siemens, potentially causing outages and unsafe conditions.
Hackers stole over $31.6 million across two separate crypto bridge exploits targeting AFX and Verus Protocol within hours. Blockaid reported AFX lost $24.15 million and Verus Ethereum Bridge lost $7.5 million, highlighting ongoing security risks for cross-chain bridges.
Origin Energy confirmed a hack accessed customer names, addresses, phone numbers, and partial bank data for an unspecified number of its 4.8m Australian accounts. The company is investigating with authorities, while experts warn of identity theft risks.
Hackers stole over $31.6 million in two separate crypto bridge exploits targeting AFX's Arbitrum bridge ($24.15M) and the Verus Ethereum Bridge ($7.5M) within hours. Blockaid detected both attacks, with the AFX incident likely due to compromised validator keys, underscoring persistent security risks for cross-chain bridges.
List of 7 essential WordPress plugins for enhancing SEO, security, spam protection, contact forms, analytics, and affiliate link management.
GO2 Health in Brisbane's Everton Park experienced a phishing attack in April, accessing patient data including DVA ID numbers from its main email mailbox. Patients were notified almost three months later, raising concerns about delayed alerts following another recent medical data breach.
Cybersecurity firms report hackers are actively exploiting critical vulnerabilities in popular WordPress software, affecting potentially tens of millions of websites despite recent patches and forced updates. Users are urged to update immediately to mitigate risks.
Owen Flowers (18) and Thalha Jubair (20) received 5.5-year prison sentences for a 2024 cyber-attack on Transport For London (TfL). The hack, carried out as part of the Scattered Spider collective, disrupted services, stole millions of customer data, and cost TfL £39m.
Two men linked to the "Scattered Spider" hacking group received five-year, six-month prison sentences in the UK after pleading guilty to cybercrime charges. The group is tied to high-profile ransomware, cryptocurrency extortion, and attacks on UK and US companies, including London's transport network and Caesars Entertainment.
Angelo Martino, a former ransomware negotiator, was sentenced to over five years in prison for conspiring with hackers to deploy BlackCat ransomware. The U.S. seized over $10 million in crypto and assets purchased with stolen funds. Martino is the third person jailed in the scheme.
A popular npm package for the Injective blockchain was compromised in a supply chain attack, with malware designed to steal crypto wallet private keys and seed phrases. The malicious code, present in version 1.20.21 of the @injectivelabs/sdk-ts package, has been removed, and affected versions deprecated, with no funds on the network reported at risk.
