Latest about Cyber Security
Anonymous video chat app leaks data on millions of users — more than 22 million records exposed, including 3 million containing names and email addresses
A not-so-private anonymous video chat app has compromised credentials, including usernames, emails, and network information, thanks to a misconfigured Kibana dashboard.
Over 5,000 malicious domains targeting 2026 US Midterm elections spotted going live – and they could be used for fraud, phishing, or worse
Malicious actors are not targeting vote counters, but rather the voters themselves.
Rapid7 observes new Palo Alto VPN flaw exploited in the wild to bypass GlobalProtect authentication
A flaw fixed last month is now being used in real-life attacks, and security researchers are urging users to patch.
Compromised Red Hat npm packages downloaded over 80,000 times in one week – supply chain attack still ongoing
Security researchers spotted a new campaign using the same methods as TeamPCP.
Ransomware groups grow revenue by almost 40% in Q1 2026
Initial Access Brokers are removing a major pain point helping ransomware operators steal more.
Thousands of compromised websites abused by DriveSurge in active ClickFix and FakeUpdates campaigns
SilentPush is warning about an Intial Access Broker campaign called DriveSurge that uses thousands of websites to deploy a backdoor.
OpenAI Codex tool with over 29,000 downloads linked to malicious npm supply chain attack stealing authentication tokens
A tool started benign and turned sour after a little while, stealing tokens and granting persistent access.
Multiple Linux distros hit by major 'CIFSwitch' flaw that gives attackers root access
If you're using Linux, make sure you patch up and disable unnecessary file sharing features.
