Data Breaches
The studio behind Grand Theft Auto has confirmed a security incident involving the unauthorized access of corporate data, with the notorious ShinyHunters group claiming responsibility and threatening a massive leak if a ransom is not paid by April 14. NEW YORK, NY — Rockstar Games has confirmed it is investigating a
Trending
In a significant blow to the infostealer ecosystem, Google has officially integrated Device Bound Session Credentials (DBSC) into Chrome 146, fundamentally changing how authentication cookies are protected on Windows and macOS. MOUNTAIN VIEW, CA — For over a decade, session hijacking has been the "skeleton key" for cybercriminals. By
Trending
A persistent threat cluster known as Glassworm has significantly upgraded its arsenal, deploying a specialized "ZigDropper" to compromise software developers by infecting the very IDEs used to build modern applications. AMSTERDAM, NL — Security researchers have uncovered a major evolution in the tactics of the Glassworm threat campaign. Previously
Threat Intelligence
In a sophisticated six-hour window of compromise, the official CPUID website was hijacked to serve malicious payloads to thousands of enthusiasts and IT professionals downloading system monitoring utilities. PARIS, FRANCE — The cybersecurity community is on high alert after CPUID, the developer of the ubiquitous system-profiling tools CPU-Z and HWMonitor, fell
Trending
A critical pre-authentication Remote Code Execution (RCE) vulnerability in the Marimo open-source Python notebook has seen active exploitation less than half a day after its public disclosure, highlighting the extreme speed of modern threat actors. SAN FRANCISCO, CA — Security teams are racing to patch installations of Marimo, a reactive Python
Trending
A sophisticated social engineering campaign dubbed "ClickFix" has pivoted to target macOS users, leveraging fake browser errors to trick victims into executing malicious scripts that bypass standard Apple security prompts. CUPERTINO, CA — For years, the prevailing wisdom suggested that macOS was a "walled garden" largely immune
Data Breaches
Hims & Hers Health, Inc., the multi-billion dollar telehealth platform known for its direct-to-consumer wellness products, has disclosed a cybersecurity incident that compromised sensitive customer support data. The company confirmed that unauthorized actors gained access to its third-party support environment earlier this year, leading to the exposure of personal information
Data Breaches
Hasbro, Inc. (Nasdaq: HAS), one of the world’s largest toy and board game manufacturers, has confirmed it is investigating a significant cybersecurity incident that has forced several internal systems offline. The breach, which was first detected in late March, is already impacting the company’s supply chain, with officials
Data Breaches
Canada’s telecommunications landscape is reeling from a series of high-profile security incidents as both Rogers Communications and Freedom Mobile confirmed separate data breaches affecting thousands of customers. The sequential nature of these attacks has raised urgent questions regarding the systemic resilience of the nation’s critical communication infrastructure and
Cybersecurity 101
Supply chain attacks are a rapidly evolving class of cyber threats that exploit the complex web of trust between organizations and their external partners. In today’s interconnected digital landscape, businesses rely on a vast network of vendors, service providers, and open-source components to build, deliver, and maintain their software.
Cyber Attacks
Crunchyroll, the world’s largest anime streaming platform, has launched an investigation into claims that a threat actor has exfiltrated nearly 100GB of sensitive user data. The alleged breach was first brought to light after a prominent hacker group posted samples of the database on a known cybercrime forum, claiming
Data Breaches
Navia Benefit Solutions, a prominent administrator of health and employee benefits, has disclosed a major data breach affecting approximately 2.7 million people. The incident, involving unauthorized access to a database containing sensitive personal and health-related information, underscores the growing vulnerability of third-party benefit administrators in the healthcare supply chain.