hacker

Hackers are hijacking hotel Wi-Fi networks to deliver fake browser updates that install CornFlake malware, stealing passwords, browser sessions, and Microsoft 365 tokens.

A cyber attack on England’s Department for Education exposed around 607,000 records containing email addresses and phone numbers. Learn what happened and the cybersecurity risks.

Hackers claim to possess a database containing 160 million Decathlon customer records. The alleged breach remains unverified, with Decathlon yet to confirm the incident.

Russian state-backed hackers exploited a Zimbra zero-day vulnerability to steal emails, passwords, and 2FA recovery codes from government and enterprise organizations.

Attackers are exploiting GitHub Actions runners to target vulnerable cPanel and WHM servers, stealing credentials, cloud keys, API tokens, and sensitive configuration data.

Google patches CVE-2026-0073, a critical Android zero-click flaw enabling remote shell access without user interaction. Update devices immediately.

A critical cPanel authentication bypass (CVE-2026-41940) was exploited in a cyber espionage campaign targeting government and military systems. Attackers gained root access, used SQL injection and custom malware tools, and exfiltrated over 4GB of sensitive data including defense and financial records.

Microsoft patches CVE-2026-32202, a Windows zero-click flaw exploited by APT28 hackers to bypass Defender SmartScreen and steal authentication hashes.

Cybercriminals exploit React2Shell vulnerability using Telegram bots and automation to hack 900+ companies and steal sensitive data from web apps.

New LOTUSLITE malware linked to Mustang Panda targets India’s banking sector and South Korean policy groups in advanced cyber-espionage attacks.