A California jury has ordered Google to pay $314.6 million in damages after finding the company guilty of using Android users’ mobile data without their permission. This case was heard in San Jose and focused on how Google collected system and log data from Android phones over cellular networks, even when those phones were idle … Continued
A major security warning has surfaced for cryptocurrency users after researchers uncovered over 40 malicious extensions on the Mozilla Firefox Add-ons Store. These extensions were not harmless tools, they were dangerous fakes created to steal users’ crypto wallet information, including secret keys and seed phrases. Many of these fake add-ons managed to stay on the … Continued
Recently, a Chinese hacking group exploited multiple zero-day vulnerabilities in lvanti’s Connect Secure Appliance (CSA) to target sensitive organizations in France. This includes the French government, telecom providers, and companies from sectors like transport, finance, and media. The hacking campaign was discovered in September 2024 and has been linked to a threat group known as … Continued
A critical vulnerability has been discovered in Cisco’s Unified Communications Manager (Unified CM) and Session Management Edition (SME), which allows an attacker to gain root access without any authentication. This means that someone sitting anywhere in the world could take complete control of a vulnerable system, simply by exploiting a flaw in the software. The … Continued
Cybercriminals have found a new way to launch phishing attacks, by using a generative AI tool called v0, created by the web development platform Vercel. This tool was designed to help developers build websites easily using plain language prompts. But now, attackers are using it to quickly create fake login pages that can trick users … Continued
A new cyberattack campaign has been discovered targeting users in Taiwan, and its believed to be carried out by a Chinese threat group known as Silver Fox, also tracked as Void Arachne or Storm-0558. The attackers are using a fake installer for an AI tool called DeepSeek to trick victims into installing malware on their … Continued
We talk a lot about cybersecurity in terms of firewalls, zero trust, and endpoint protection. But there’s one key area that’s often overlooked, the browser. Today, more than 85% of modern work is done through a web browser. Whether it’s logging into SaaS apps, accessing internal tools, or copying data, the browser has quietly become … Continued
Microsoft has announced that it will remove the password management feature from the Microsoft Authenticator app by August 2025. This change will happen in phases, and it’s important for all users who rely on the app to store or autofill their passwords to prepare in advance. The company has shared a clear timeline for how … Continued
A dangerous hacking group known as Scattered Spider is now going after airlines, according to a new warning from the FBI. These attackers are using very smart and sneaky tricks to break into airline systems across the United States and Canada. Scattered Spider, also called Muddled Libra or UNC3944, has been behind some big cyberattacks … Continued
Glasgow City Council has issued a serious warning to residents after a new parking fine scam began circulating. This scam comes just days after the council experienced a major cyber attack that affected several of its services. The scam involves fake text messages that appear to be from the council, asking people to pay a … Continued
