Opinion | My finance expertise was no defence against online scammers
Hong Kong police do a good job in combating cybercrime, but artificial intelligence (AI) is now driving a tsunami of losses with even the most…
Latest Cybersecurity News — Page 593
View all →
SAP npm package attack highlights risks in developer tools and CI/CD pipelines
“The fact that the malware was designed to harvest GitHub and npm tokens, GitHub Actions secrets, and cloud credentials from AWS, Azure, GCP, and Kubernetes…
The most severe Linux threat to surface in years catches the world flat-footed
Publicly released exploit code for an effectively unpatched vulnerability that gives root access to virtually all releases of Linux is setting off alarm bells as…
What’s new, updated, or recently released in Microsoft Security
New capabilities in Microsoft Agent 365; new Microsoft Defender and GitHub integration At Microsoft, security innovations are purpose-built to help every organization protect end-to-end with…
Understanding Evil: How to Reverse Engineer Malware
How do security teams know exactly what malware is doing and how to stop it? In a recent episode of Tradecraft Tuesday, I was joined…
New Bluekit phishing service includes an AI assistant, 40 templates
A new phishing kit named Bluekit offers more than 40 templates targeting popular services and includes basic AI features for generating campaign drafts. Available templates…
OpenAI Rolls Out ‘Advanced’ Security Mode for At-Risk Accounts
For anyone who fears their ChatGPT and Codex accounts might be targeted by attackers, OpenAI announced on Thursday that it is adding an optional new…
How Criminals Created SMS Blasters to Fake Cellphone Towers and Hack Thousands of Phones in Canada
How Criminals Created SMS Blasters to Fake Cellphone Towers and Hack Thousands of Phones in Canada Skip to content We use cookies to ensure that…
Attackers Exploit cPanel Authentication Bypass 0-Day After PoC Release
A critical zero-day vulnerability, tracked as CVE-2026-41940, is currently being actively exploited across the web hosting industry. This CVSS 9.8 flaw allows unauthenticated remote attackers…
Misconfigured Server Run by Hackers Leaks 345,000 Stolen Credit Cards
Researchers came across a misconfigured server that was left unprotected by a group of hackers. This server, discovered on 16 April, was linked to an…
Cisco releases open-source toolkit for verifying AI model lineage
Enterprises pulling models from Hugging Face and other open repositories rarely keep records of how those models are altered after download, leaving organizations with little…
More PayPal emails hijacked to deliver tech support scams
Scammers have found another way to get deceptive messages delivered through PayPal’s legitimate services. In December 2025, we reported that PayPal closed a loophole that…