In 2025, phishing attacks increasingly used omni-channel methods, bypassing traditional email filters by exploiting social media, search engines, and malvertising channels. Attackers also used advanced tools like Phishing-as-a-Service kits and sophisticated evasion techniques to evade detection and bypass security controls. #ScatteredLapsus$Hunters #Evilginx #PushSecurity
Category: Cyber Security News
700Credit experienced a data breach affecting over 5.8 million individuals due to a security vulnerability in a third-party API. The stolen data included sensitive personal information, prompting the company to offer free identity protection services. #700Credit #APIBreach #IdentityTheft
Users trying to access SoundCloud via VPN are experiencing a 403 ‘forbidden’ error due to recent configuration changes. The platform is working to resolve the issue that has persisted for four days, affecting users in regions with restrictions. #SoundCloud #VPN #403Error #configurationChanges
An unsecured 16TB MongoDB database exposed over 4.3 billion professional records, including sensitive personal information and LinkedIn data, facilitating social-engineering attacks. The breach was discovered by researchers Bob Diachenko and nexos.ai and was secured shortly after; the dataset may have been used for malicious purposes. #MongoDB #LinkedInLeak…
A new sophisticated malware campaign exploits GitHub using AI-crafted projects to lure victims, primarily targeting IT professionals and cybersecurity experts. The malware, PyStoreRAT, is highly evasive, adaptable, and capable of deploying additional harmful software, representing a significant evolution in cyber threats. #PyStoreRAT #GitHubThreat #AI-DrivenAttack #SupplyChainAttack…
A significant data breach at 700Credit exposed the personal information of at least 5.6 million individuals, including names, addresses, DOB, and SSNs. The company is advising affected individuals to take protective measures, including credit monitoring and freezes. #700Credit #DataBreach #IdentityTheft…
A popular Google Chrome extension called Urban VPN Proxy has been secretly collecting user prompts and conversations from AI chatbots, including ChatGPT and Google Gemini, and exfiltrating this data to remote servers. Despite its marketing as a secure VPN, the extension was updated to enable default AI data harvesting, raising concerns…
Britain’s MI6 leader warns of escalating hybrid threats from Russia, including cyberattacks, propaganda, and sabotage, emphasizing the need for technological mastery and human wisdom. The agency plans to enhance its impact and outplay adversaries in every mission domain to protect national security. #MI6 #RussiaCyberattacks #HybridThreats #BritishIntelligence…
British car manufacturer Jaguar Land Rover (JLR) experienced a significant data breach in August, leading to production halt and a financial loss of over $890 million. The cyberattack compromised employee and contractor data, impacting the broader supply chain and costing the British economy nearly $2.5 billion. #JLR #Cyberattack #SupplyChain #BritishEconomy…
Two recent data breaches exposed the personal information of millions from financial institutions, including Prosper Marketplace, 700Credit, and SitusAMC. These incidents highlight ongoing cybersecurity vulnerabilities in the finance sector, underscoring the importance of robust data protection measures. #ProsperMarketplace #700Credit #SitusAMC…
Soverli, a Swiss cybersecurity startup, has raised $2.6 million to develop a sovereign smartphone platform that enhances user security by allowing multiple isolated operating systems on standard mobile devices. This innovative OS can run alongside Android or iOS, providing increased security and continuity even if the main platform is compromised. #Soverli…
Google has identified multiple China-linked threat groups exploiting the React2Shell vulnerability (CVE-2025-55182) to deliver malware and conduct espionage activities. The widespread exploitation involves various malware strains and tactics across different cyber espionage campaigns. #React2Shell #CVE-2025-55182…
Militant groups are increasingly experimenting with artificial intelligence to enhance their recruitment, propaganda, and cyberattack capabilities. National security experts warn that AI’s malicious use by extremist organizations like ISIS could pose significant threats, from deepfake disinformation to potential biological weapon development. #ISIS #Deepfakes…
Japan is preparing for its first public-private sector cybersecurity tabletop exercise to enhance resilience against large-scale cyberattacks targeting critical infrastructure. The drill aims to simulate cascading disruptions in Tokyo, improving coordination and response strategies. #JapanCyberDefense #InfrastructureAttack…
The Pierce County Library System experienced a significant cyberattack in April 2025, exposing the personal data of over 340,000 individuals. The attack was claimed by the INC ransomware gang and highlights the increasing vulnerability of public institutions to cyber threats. #INC #PierceCountyLibrary…