Data Breaches
The world’s largest travel platform has issued an urgent warning to customers after an unauthorized third party accessed sensitive booking information, triggering a massive wave of targeted phishing attacks. AMSTERDAM, Netherlands — Booking.com has confirmed a significant data security incident that has exposed the personal details and travel itineraries
Data Breaches
The studio behind Grand Theft Auto has confirmed a security incident involving the unauthorized access of corporate data, with the notorious ShinyHunters group claiming responsibility and threatening a massive leak if a ransom is not paid by April 14. NEW YORK, NY — Rockstar Games has confirmed it is investigating a
Trending
In a significant blow to the infostealer ecosystem, Google has officially integrated Device Bound Session Credentials (DBSC) into Chrome 146, fundamentally changing how authentication cookies are protected on Windows and macOS. MOUNTAIN VIEW, CA — For over a decade, session hijacking has been the "skeleton key" for cybercriminals. By
Trending
A persistent threat cluster known as Glassworm has significantly upgraded its arsenal, deploying a specialized "ZigDropper" to compromise software developers by infecting the very IDEs used to build modern applications. AMSTERDAM, NL — Security researchers have uncovered a major evolution in the tactics of the Glassworm threat campaign. Previously
Threat Intelligence
In a sophisticated six-hour window of compromise, the official CPUID website was hijacked to serve malicious payloads to thousands of enthusiasts and IT professionals downloading system monitoring utilities. PARIS, FRANCE — The cybersecurity community is on high alert after CPUID, the developer of the ubiquitous system-profiling tools CPU-Z
Trending
A critical pre-authentication Remote Code Execution (RCE) vulnerability in the Marimo open-source Python notebook has seen active exploitation less than half a day after its public disclosure, highlighting the extreme speed of modern threat actors. SAN FRANCISCO, CA — Security teams are racing to patch installations of Marimo, a
Trending
A sophisticated social engineering campaign dubbed "ClickFix" has pivoted to target macOS users, leveraging fake browser errors to trick victims into executing malicious scripts that bypass standard Apple security prompts. CUPERTINO, CA — For years, the prevailing wisdom suggested that macOS was a "walled garden" largely immune
Data Breaches
Hims & Hers Health, Inc., the multi-billion dollar telehealth platform known for its direct-to-consumer wellness products, has disclosed a cybersecurity incident that compromised sensitive customer support data. The company confirmed that unauthorized actors gained access to its third-party support environment earlier this year, leading to the
Data Breaches
Hasbro, Inc. (Nasdaq: HAS), one of the world’s largest toy and board game manufacturers, has confirmed it is investigating a significant cybersecurity incident that has forced several internal systems offline. The breach, which was first detected in late March, is already impacting the company’s supply chain, with officials
Data Breaches
Canada’s telecommunications landscape is reeling from a series of high-profile security incidents as both Rogers Communications and Freedom Mobile confirmed separate data breaches affecting thousands of customers. The sequential nature of these attacks has raised urgent questions regarding the systemic resilience of the nation’s critical communication infrastructure
Cybersecurity 101
A clear guide to supply chain cyberattacks — how they work and spread, the major types, why they are so dangerous, real-world examples, and how organizations strengthen their supply chain security.
Cyber Attacks
Crunchyroll, the world’s largest anime streaming platform, has launched an investigation into claims that a threat actor has exfiltrated nearly 100GB of sensitive user data. The alleged breach was first brought to light after a prominent hacker group posted samples of the database on a known cybercrime forum, claiming