LATEST POST
Governments are hacking people with ‘zero-click’ spyware by showing them online ads
TechCrunch reports: Security researchers at digital rights unit The Citizen Lab say government spyware makers are abusing global advertising networks to target and hack devices by serving malicious online adverts. A new report published Thursday by the University of Toronto lab, which investigates surveillance and digital rights abuses, said an Israeli company called Discover-Tech allows […]
Hackers Are Serving Malware To iPhones Via Hundreds Of Infected Websites
Forbes reports: Crypto thieves are targeting iPhone users at scale with a sneaky kind of cyberattack that only requires victims to view an ad or visit an infected webpage, researchers tell Forbes. Hundreds of websites have been compromised as part of the hack, they say and, in one case, a malware ad was served over […]
Police services across Ontario suspend use of Crime Stoppers after CBC investigation
CBC reports: More Ontario police units have now paused their use of the Crime Stoppers program, after CBC News revealed the extent of a massive data leak. The Toronto, York Region, Halton Region, Windsor, Kingston, Cornwall and Hamilton police services all announced they have suspended their partnerships with local Crime Stoppers chapters and are asking […]
FBI says SafePay ransomware gang ‘among most active’ with more than 600 victims since 2024
The Record reports: At least 600 organizations across the U.S. and Europe have been breached by the SafePay ransomware gang since August 2024, according to a new advisory from international law enforcement agencies. The FBI and cybersecurity agencies in Germany as well as the U.K. said SafePay is now “among the most active ransomware groups […]
A Hacker Used AI Agents to Breach Over 100 Company Websites for Just $5,000
Cyber Security News reports: A Chinese-speaking hacker used AI agents to break into more than 100 company websites while spending an estimated $5,000 on AI tokens, according to a Reuters investigation in October. The operation shows how one person can direct software to carry out complex attacks with little ongoing human input. The targets included […]
Educational Testing Service data breach may impact millions of students, officials say
CBS News reports: The California Department of Education (CDE) on Friday disclosed the breach involving the Educational Testing Service (ETS), which is under contract to provide state and federally required testing to all students enrolled in the state’s public schools. ETS provides support for the state’s assessment programs, including the California Assessment of Student Performance […]
ConnectWise suspends Cloud Backup service after supply chain attack
The Record reports: IT management software company ConnectWise shut down several of its services this weekend after Microsoft and other cybersecurity companies warned of a supply chain attack impacting its cloud backup system. ConnectWise initially said on Friday that it was investigating “attempts of unauthorized access associated with the ConnectWise Cloud Backup environment,” and confirmed […]
US bans DeepSeek from federal civilian agencies
ITPro reports: The US Department of Homeland Security (DHS) has banned the use of DeepSeek by civilian federal agencies, citing security concerns. The ban covers any technology built with the aid of the company’s AI models, and applies to agencies including the Department of the Treasury, the Department of State, and the Department of Justice, […]