A major cyber fraud operation has been discovered targeting mobile banking users across Southeast Asia. A criminal group known as GoldFactory has been distributing modified versions of real banking apps that look completely genuine. These fake apps contain hidden malware designed to steal financial information from victims. More than 11,000 devices in Indonesia, Thailand, and … Continued
A newly disclosed vulnerability in the popular Angular web framework has raised significant concern across the developer and cybersecurity communities. The flaw — tracked as CVE-2025-66412 — affects Angular’s template compiler, enabling attackers to execute malicious code by weaponizing SVG animation attributes. This issue is especially dangerous because of how commonly SVG files are used … Continued
The CodeRED emergency alert platform recently suffered a major cyberattack that forced the company to shut down its entire older system. CodeRED is widely used across the United States to send important emergency notifications like weather warnings and evacuation alerts. Because of the attack, the legacy platform became unusable and had to be taken offline … Continued
A new Android malware called Albiriox has been discovered, and security experts warn that it is one of the most advanced threats targeting banking and crypto users today. It works as a “Malware-as-a-Service,” where cybercriminals pay a subscription to use it. Researchers first saw signs of Albiriox around September 2025 in private underground forums. Soon … Continued
The French Football Federation has confirmed that it recently suffered a cyber-attack involving its member database. The incident was traced to unauthorized access within the administrative software used by clubs. Investigators found that a single compromised account allowed attackers into the system. As soon as this was discovered, the federation disabled the account and reset … Continued
The cyber-espionage group Bloody Wolf has expanded its operations across Central Asia. They first started targeting organisations in Kyrgyzstan in mid-2025. Later, the same activity was observed spreading into Uzbekistan. Their main targets include government, finance and IT sectors. The attackers send spear-phishing emails that look like official government messages. These emails often pretend to … Continued
NordVPN has officially rolled out its Black Friday 2025 deal, offering a massive 77% discount on select long-term plans. Most of these discounted plans also include three extra months free, making this one of the company’s biggest promotions of the year. The offer has been highlighted across major tech platforms for its unusually large price … Continued
Cybersecurity is entering a new era in 2026. Threat actors are expected to use AI to speed up and expand attacks, while defenders will use AI agents to improve security operations. This shift brings new risks, including emerging “shadow agent” threats and a growing need for stronger identity and access management. Ransomware and data-theft extortion … Continued
OpenAI has reported a security incident that came from its third-party analytics vendor, Mixpanel. The issue began when an attacker gained unauthorized access to part of Mixpanel’s systems on November 9, 2025. Mixpanel later shared the affected dataset with OpenAI on November 25. After reviewing it, OpenAI confirmed that some API customer data was included. … Continued
Security researchers have introduced a new technique called HashJack, which uses the “#” part of a URL to hide malicious instructions. This portion of a link is normally ignored by servers, making the attack hard to detect. When an AI browser or assistant loads the link, it reads the hidden instructions from the fragment. This … Continued
