Hacker

A cyber attack on England’s Department for Education exposed around 607,000 records containing email addresses and phone numbers. Learn what happened and the cybersecurity risks.

Hackers claim to possess a database containing 160 million Decathlon customer records. The alleged breach remains unverified, with Decathlon yet to confirm the incident.

Russian state-backed hackers exploited a Zimbra zero-day vulnerability to steal emails, passwords, and 2FA recovery codes from government and enterprise organizations.

Attackers are exploiting GitHub Actions runners to target vulnerable cPanel and WHM servers, stealing credentials, cloud keys, API tokens, and sensitive configuration data.

A critical vulnerability in Motorola MR2600 routers allows attackers to bypass authentication, install malicious firmware, and gain persistent remote code execution.

A suspected China-linked cyber campaign is using fake Indian Income Tax filing software to deliver DcRAT malware and steal sensitive data from taxpayers and businesses.

A critical cPanel authentication bypass (CVE-2026-41940) was exploited in a cyber espionage campaign targeting government and military systems. Attackers gained root access, used SQL injection and custom malware tools, and exfiltrated over 4GB of sensitive data including defense and financial records.

Researchers reveal a phishing campaign using Google AppSheet emails to steal 30,000 Facebook accounts through fake Meta Support alerts and login pages

Cybercriminals exploit React2Shell vulnerability using Telegram bots and automation to hack 900+ companies and steal sensitive data from web apps.

New LOTUSLITE malware linked to Mustang Panda targets India’s banking sector and South Korean policy groups in advanced cyber-espionage attacks.