Hackers use pixel-large SVG trick to hide credit card stealer
A massive campaign impacting nearly 100 online stores using the Magento e-commerce platform hides credit card-stealing code in a pixel-sized Scalable Vector Graphics (SVG) image.…
Latest Cybersecurity News — Page 59
View all →
IBM Identity and Verify Access Vulnerabilities Allow Remote Attacker to Access Sensitive Data
A critical security bulletin highlights multiple vulnerabilities in Verify Identity Access and Security Verify Access products. If left unpatched, these widespread security flaws could allow…
MIWIC26: Nicole Bucala, CEO of DataBee, A Comcast Company
Organised by Eskenzi PR in media partnership with the IT Security Guru, the Most Inspiring Women in Cyber Awards aim to shed light on the remarkable women in…
EvilTokens Uses Stolen Microsoft 365 Tokens, AI to Supercharge BEC
EvilTokens is a new Phishing-as-a-Service (PhaaS) platform that turns stolen Microsoft 365 tokens and AI into an end‑to‑end factory for Business Email Compromise (BEC) at…
Storm-1175 Deploys Medusa Ransomware Within 24 Hours of Flaw Disclosure
A notorious group of hackers is currently causing major disruption globally by deploying the devastating Medusa ransomware. Tracked by Microsoft Threat Intelligence as Storm-1175, these…
Chaos malware expands from routers to Linux cloud servers
Chaos, Go-based malware first documented by Lumen’s Black Lotus Labs, has historically targeted routers and edge devices. A new variant observed in March 2026 shows…
Timeshare owners warned to watch out for cartel-linked scams
If you own a timeshare and have been searching for a way out, you need to know who may be targeting you. In February, the…
Masjesu Botnet Emerges as DDoS-for-Hire Service Targeting Global IoT Devices
Ravie LakshmananApr 08, 2026IoT Security / Network Security Cybersecurity researchers have lifted the curtain on a stealthy botnet that’s designed for distributed denial-of-service (DDoS) attacks. Called…
Keir Starmer was warned about Post Office prosecution practices as director of public prosecutions
Keir Starmer was asked to “take a closer look” at the Post Office’s prosecution practices in 2011 in his role as director of public prosecutions…
Bendigo Bank IT restructure continues with Infosys, Genpact deals
Bendigo and Adelaide Bank has revealed a major shake-up of its technology operations, signing a seven-year IT service delivery deal with Infosys and six-year deal…
RCE Bug Lurked in Apache ActiveMQ Classic for 13 Years
A remote code execution (RCE) vulnerability that lurked in Apache ActiveMQ Classic for 13 years could be chained with an older flaw to bypass authentication,…
Iran-linked hackers target water, energy in US, FBI and CISA warn
Nation-state actors have exploited flaws in industrial programmable logic controllers, leading to disruption and financial losses. Source link