Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3801 articles
Abnormal AI researchers report that ATHR combines spoofed security-alert emails, phone routing and AI voice agents to harvest credentials and six-digit codes. The platform is reportedly sold for $4,000 plus 10% of profits.
Kaspersky identified 26 FakeWallet apps impersonating crypto wallets to steal seed phrases through phishing and trojanized apps sideloaded with iOS provisioning profiles. Apple removed the apps after disclosure.
The FTC says it is preparing to enforce the Take It Down Act: beginning in May, platforms must remove reported sexual deepfakes within 48 hours. The article also covers the law’s first guilty plea and FTC concerns about AI-enabled voice-cloning scams.
Italy’s data protection regulator fined Poste Italiane and Postepay €12.5 million over monitoring by the Postepay and BancoPosta apps, citing invasive processing, inadequate disclosure and safeguards, and excessive data retention.
Tyler Robert Buchanan, described as an alleged Scattered Spider leader, pleaded guilty to wire fraud and aggravated identity theft. Prosecutors say the group stole at least $8 million in cryptocurrency using SMS phishing and SIM swaps; sentencing was scheduled for Aug.
Tyler Buchanan pleaded guilty to conspiring with Scattered Spider members to hack companies and steal cryptocurrency. He admitted to SMS phishing, credential theft and SIM swapping; prosecutors say victims lost at least $8 million in cryptocurrency.
The UAE Cyber Security Council says nearly 25% of publicly accessible files contain sensitive personal data, while 68–77% of privately shared files may be exposed. Its Cyber Pulse advisory recommends encryption and stronger access controls.
The CBI arrested a suspected SIM-card supplier in Operation Chakra-V. Investigators allege a POS-agent network procured about 10,000 illegally issued SIMs for use in cyber fraud schemes; the investigation is ongoing.
Sophos reports two campaigns abusing QEMU for covert access, credential harvesting and payload delivery. The campaigns involved exploitation of SolarWinds Web Help Desk and Citrix NetScaler vulnerabilities.
Wiz’s Databricks integration adds workspace, identity, configuration, and Unity Catalog data visibility to its Security Graph, connecting sensitive assets with cloud identities and resources to help teams identify security risks and attack paths.
Wiz Code now inventories CI/CD pipelines and flags risks including dangerous triggers, excessive permissions, exposed secrets, risky AI-agent configurations, and compromised third-party actions.
Boost Security released SmokedMeat, an open-source tool that demonstrates how a CI/CD pipeline vulnerability can lead to runner compromise, credential theft, cloud access and further exposure in a team’s infrastructure.
The European Commission selected four provider groups for cloud contracts worth up to €180 million over six years. The Cloud Sovereignty Framework includes security and supply-chain transparency criteria, and providers must limit non-EU third-party influence.
Meta Bug Bounty and PortSwigger partnered to support vulnerability discovery with Burp Suite tooling, educational resources, and collaboration opportunities. PortSwigger will provide Burp Suite Professional licenses to selected HackerPlus Silver researchers.
Attackers put callback-phishing text in Apple ID name fields, causing legitimate Apple account-change alerts to carry fake purchase warnings. The emails pass SPF, DKIM, and DMARC checks; scammers urge recipients to call them.
A policy roundup covers EU privacy measures, UK warnings about AI-enabled cyber threats, updated HIPAA security guidance, and US surveillance oversight findings, alongside analysis of privacy risks in foundation models.
Starting April 15, NIST will prioritize NVD enrichment for CVEs tied to CISA’s KEV, U.S. federal software, or critical software under EO 14028. Other CVEs will remain listed but marked “Not Scheduled.”
The roundup covers an exploited Acrobat Reader zero-day, agentic memory attacks, AI security testing, reported data exposures, malware distribution, law-enforcement actions, and changes to security tools and policy.
NIST will prioritize which CVEs receive detailed NVD enrichment as submissions outpace manual capacity. The article describes how the change may affect defenders and industry proposals to improve reporting and fill information gaps.
Hsinchu Logistics suffered an outage described as consistent with ransomware, disrupting its website and driver PDA systems. Some services returned by Friday; the company warned customers about possible follow-on phishing.
GitLab 18.11 introduces an AI agent that proposes fixes for confirmed SAST findings, alongside agents for CI pipeline setup and delivery analytics. The release also adds controls for GitLab Credits spending.
After 330 Tycoon 2FA domains were seized, attackers shifted to other phishing kits, and attacks involving four platforms rose from about 20 million to over 23 million, Barracuda reports.
After a law-enforcement takedown disabled 330 Tycoon 2FA domains, Barracuda data showed its monthly attack volume falling while rival PhaaS services grew. Researchers also report rising device-code phishing, but its link to the takedown is unclear.
Google says Gemini-powered systems analyze hundreds of billions of signals to detect deceptive ads. In 2025, it removed or blocked 8.3 billion ads, including 602 million associated with scams, and acted on over four times as many user reports as in 2024.
