Trust Wallet’s browser extension was compromised, resulting in the theft of approximately $7 million from nearly 3,000 cryptocurrency wallets. Users are being urged to update their extension and remain vigilant against phishing scams targeting their recovery seed phrases. #TrustWallet #ChromeExtensionV2.68 #CryptoTheft
Category: Cyber Security News
A Lithuanian national was arrested for distributing malware disguised as KMSAuto, infecting 2.8 million systems globally to steal cryptocurrencies via clipper malware. The investigation highlights the risks of using illegal software and the widespread impact of this cybercrime campaign. #KMSAuto #ClipperMalware
France’s CNIL fined Nexpublica France €1.7 million for inadequate cybersecurity practices following a data breach. The incident exposed sensitive user documents, highlighting lapses in data protection and GDPR compliance. #Nexpublica #CNIL #DataBreach #GDPR…
Two U.S. banks, Artisans’ Bank and VeraBank, were impacted by a ransomware attack on Marquis Software, affecting hundreds of thousands of customers’ data. The breach was traced to a SonicWall firewall vulnerability, highlighting risks in third-party vendor security. #MarquisSoftware #SonicWallVulnerability…
Sax LLP, a leading US accounting firm, experienced a major data breach affecting over 220,000 individuals, with the attack remaining undisclosed for more than 16 months. The breach involved the theft of sensitive personal data, and delayed notification has undermined the effectiveness of subsequent credit monitoring services. #SaxLLP #DataBreach #Cyberattack…
A former Coupang employee attempted to destroy evidence by smashing his MacBook Air and disposing of it in a river, but forensic investigation recovered the device. The breach affected over 33 million accounts, with limited user data accessed and no transfer to third parties, according to Coupang. #CoupangDataBreach #ForensicInvestigation…
Cybercriminals are increasingly using sophisticated ClickFix tools like ErrTraffic v2 to trick users into executing malicious scripts through visual deceptions and fake glitches. These tools are sold cheaply, with high conversion rates, and can target multiple platforms while bypassing modern defenses. #ErrTraffic #ClickFix
The OWASP Top 10 for Agentic Applications 2026 introduces a security framework tailored to autonomous AI systems, highlighting emerging risks such as goal hijacking, supply chain malware, and unexpected code execution. This framework aims to standardize industry understanding and improve defenses against sophisticated AI-targeted attacks. #OWASP #AgenticAI #SecurityFramework
Cybersecurity experts have uncovered a targeted spear-phishing campaign using malicious npm packages to facilitate credential theft across critical infrastructure sectors. Attackers leveraged package hosting for resilient, embedded phishing elements that mimic secure document-sharing platforms, with a focus on organizations in manufacturing, healthcare, and industrial automation. #Evilginx #npmsecurity…
Coupang, South Korea’s largest online retailer, recovered a smashed laptop from a river linked to an insider data breach affecting 33.7 million customers. The company is cooperating with authorities and has announced a voucher compensation scheme, but faces ongoing legal and political scrutiny. #Coupang #DataLeak #SouthKorea…
Coupang, a major South Korean e-commerce company, announced a $1.17 billion compensation plan following a data breach affecting 33.7 million customers. The breach was caused by a former employee’s unauthorized access, but the company recovered the stolen data and seized the intruder’s devices. #Coupang #DataBreach #CustomerCompensation #Cyberattack #Korea…
Fortinet alerts organizations about the re-emergence of a five-year-old vulnerability in FortiOS (CVE-2020-12812) that allows attackers to bypass two-factor authentication. This flaw has been exploited by ransomware groups and state-sponsored actors, emphasizing the need for urgent system updates. #CVE-2020-12812 #FortiWebVulnerability…
A critical vulnerability in MongoDB, known as MongoBleed (CVE-2025-14847), allows attackers to remotely read sensitive data from server memory without authentication. Due to active exploitation and widespread MongoDB deployments, organizations are urged to apply patches or disable zlib compression to prevent breaches. #MongoBleed #NoSQLVulnerability…
Fortinet warns that attackers continue to exploit a critical FortiOS vulnerability (CVE-2020-12812) that allows bypassing two-factor authentication on vulnerable FortiGate firewalls. Organizations with specific LDAP configurations remain at risk, despite patches issued in 2020. #FortiOS #CVE-2020-12812
Microsoft is upgrading Copilot with GPT 5.2, enhancing its ability to perform complex office and coding tasks efficiently. The new GPT 5.2 model outperforms previous versions in industry benchmarks and is available across web, Windows, and mobile platforms. #GPT5252 #MicrosoftCopilot