Items tagged with cybersecurity
The team at Discord introduced some discord to our newsroom today. First, a company representative sent us a statement requiring us to update a previous article on its "Teen-By-Default" policy, and then it turned around and dropped a new...
Read more...
Update 2/24: This article was originally titled "Discord Drops Persona After Users Blast UK Age Checks And Data Practices". Per a statement we received from Discord after publishing, we've altered the title and acknowledge that its trial...
Read more...
iOS users may already be aware of the commercial spyware dubbed Predator, but may not know exactly what it's capable. Fortunately, malware researchers Nir Avraham and Hu Ke have published a detailed write-up on how the Predator spyware...
Read more...
PayPal just disclosed a data breach that exposed sensitive user information, including social security numbers. From July 1st, 2025 to December 12th, 2025, a software glitch in PayPal Working Capital (PPWC) loan applications allowed...
Read more...
Microsoft is addressing nearly 60 CVEs with its upcoming "Patch Tuesday" update for Windows 11, six of which are actively-exploited zero-day vulnerabilities. Per KrebsOnSecurity, the most sever CVEs are CVE-2026-21510, CVE-2026-21513...
Read more...
Discord has committed to a global rollout of "teen-by-default" settings. That means users who change some specific settings or attempt to access age-restricted content on the platform, may be prompted to verify their age. Discord age...
Read more...
Microsoft hasn't had an easy time with Windows 11 updates as of late, but in an unexpected move, the company just offered a very thoughtful, uncontroversial addition to Windows 11—the popular Sysmon (System Monitor) utility, which launched...
Read more...
As terrifying proof of how much artificial intelligence can compress the cyberattack lifecycle, researchers have documented a real-world AWS cloud intrusion that went from a simple credential leak to full administrative control in under 10...
Read more...
Microsoft Office is victim to a critical zero-day exploit, and Russian hacker groups are already weaponizing it in destabilizing efforts toward the Ukrainian government. While Westerners and most other readers likely have less to worry...
Read more...
Notepad++ reported that its built-in auto-update feature had been hijacked by Chinese state-sponsored hackers from June to September of 2025, and the credentials gathered by the bas actors enabled further exploits until December 2nd, 2025...
Read more...
Google has a deeply-vested interest in cybersecurity and unparalleled resources to take down bad actors. The latest target on Google's kill list was a malicious proxy network called IPIDEA, and through coordinated efforts inside and...
Read more...
An AI-powered toy company exposed more than 50,000 private chat logs between children and its products after leaving a web console almost completely unsecured. According to WIRED, anyone with a Gmail account could access transcripts of...
Read more...
Remember the WinRAR path handling exploit we reported on back in August? According to Google, that same flaw, officially dubbed CVE-2025-8088, is still being actively exploited, even though versions of WinRAR newer than v7.12 have been...
Read more...
SoundCloud, best known as a home to indie musicians including the popular "SoundClown" comedy remixers, has been hit with a major data breach that includes the avatars, email addresses, names, usernames, locations, and profile statistics...
Read more...
Beware, a sneaky new variation of the homogaph phishing method is proving yet again that what you see isn't always what you get. Cybercriminals are using a nearly invisible typographical trick to impersonate Microsoft and Marriott websites...
Read more...
Like the winter storm currently raging across the United States, a chilling wave of cybersecurity alarms is making the rounds as well. And with over 149 million users impacted across major email providers, Meta-owned Facebook & Instagram...
Read more...
Update 1/23:
A Google spokesperson reached out to us and provided the following statement on this story: “Based on our current detection, no apps containing this malware are found on Google Play. Android users are automatically protected...
Read more...
A few weeks ago, we covered DarkSpectre, a threat actor responsible for running numerous spyware campaigns that, combined, infected a total of at least 8.8 million Google Chrome, Mozilla FireFox, and Microsoft Edge users. One of the key...
Read more...
As AI gets more heavily integrated into Windows, enhanced cybersecurity is required to prevent it from being used against us. Take Reprompt, for example. Reprompt is a Copilot exploit, that can use multi-stage prompts to steal user data...
Read more...
Talk about a monumental security lapse: American retail giant Target has found its proprietary source code exposed on the dark web, as current and former employees close to the matter confirm the authenticity of the nearly 900GB data leak...
Read more...
Phishing scammers are getting really good at obtaining your personal information via a sophisticated method called Browser-in-Browser (BitB). To wit, a surge of Facebook BitB attacks are hitting unwitting users, but here's how to detect...
Read more...
A massive database purportedly containing the personal information of over 17 million Instagram users has surfaced on a popular hacking forum, sparking widespread concern over the security of the social media giant’s infrastructure. Meta...
Read more...
