cyber security news

Burger King Japan Confirms Data Breach Exposing 11.18M User Records

Burger King Japan has confirmed a data breach that exposed about 11.18 million records linked to members of its official…

51 minutes ago

Critical ChatGPT GitHub Connector Flaw Could Allow Attackers to Steal Private Repository Secrets

A critical flaw in ChatGPT’s GitHub integration has the potential to turn a routine repository review into a secret-theft attack.…

59 minutes ago

Citrix XenServer Vulnerabilities Could Allow Malicious VM Users to Compromise Host Systems

Citrix has disclosed four XenServer vulnerabilities, including three that could let a malicious user with elevated rights inside a virtual…

2 hours ago

Hackers Use ClickFix and Python Tunnels to Prepare Systems for Ransomware Attacks

Hackers are using ClickFix tricks to install malware loaders and Python tunnels on Windows systems, creating access that could support…

2 hours ago

Chinese Phishing Network Linked to 1 Billion Messages Targeting 75,000 Organizations

A Chinese-run phishing network has been linked to one billion phishing emails targeting 75,000 organizations, according to a report published…

2 hours ago

Just Viewing an Online Ad Can Infect Your Device With Spyware, Researchers Reveal

Simply viewing an online advertisement can be enough to infect a device with powerful spyware, without the user clicking, downloading…

2 hours ago

AI Agents Create an Unseen Credential Surface That Exposes API Keys and Cloud Secrets

AI agents can expose API keys and cloud secrets during ordinary work, even when no malware is present. When an…

3 hours ago

UK Legal Aid Agency Data Breach Exposes Personal Records Dating Back to 1978

The UK Legal Aid Agency (LAA) has confirmed that its 2025 cyberattack stole personal records dating back to 1978. An…

4 hours ago

KGB RAT Malware Bypasses Windows Defender to Steal Credentials and Control PCs

A Windows remote access trojan called KGB RAT gives attackers a way to spy on infected computers, collect credentials and…

4 hours ago

Critical Next.js Vulnerabilities Allow Hackers to Execute Malicious Code Remotely

Next.js has released security updates for two critical vulnerabilities that could let remote attackers run malicious code without logging in.…

4 hours ago