Collaborate Disseminate
Attackers accessed systems holding data tied to millions of Oyster and contactless users Transport for London has confirmed that a 2024 breach exposed the data of more than 7 million people – a far larger crowd than the few thousand customers originall… Continue reading Transport for London says 2024 breach affected 7M customers, not 5,000
Of the 90 zero-days GTIG tracked in 2025, 43 hit enterprise tech Zero-day exploitation targeting enterprise tech products reached an all-time high last year, with China-linked cyber-espionage groups remaining the most prolific state-backed users, accor… Continue reading Google says spyware makers and China-linked groups dominated zero-day attacks last year
MOIS-linked MuddyWater crew has a new, custom implant An Iranian cyber crew believed to be part of the Iranian Ministry of Intelligence and Security (MOIS) has been embedded in multiple US companies’ networks – including a bank, software firm, and airp… Continue reading Iran intelligence backdoored US bank, airport, software outfit networks
Contractors tasked with improving AI reportedly had access to intimate footage captured through wearables Britain’s privacy watchdog is asking questions about Meta’s AI-powered smart glasses after reports that human contractors reviewing recordings fro… Continue reading UK watchdog eyes Meta’s smart glasses after workers say they ‘see everything’
Attack infrastructure attributed to ‘several Iran-nexus threat actors’ Multiple Iranian hacking crews have been targeting internet-connected surveillance cameras across Israel and other Middle Eastern countries since the war started on February 28, acc… Continue reading ‘Hundreds’ of Iranian hacking attempts have hit surveillance cameras since the missile strikes
Think before you download OpenClaw, the AI agent that can manage just about anything, is risky all by itself, but now fake installers for it are wreaking havoc. Users who searched Bing’s AI results for “OpenClaw Windows” were directed to a malicious Gi… Continue reading Malware-laced OpenClaw installers get Bing AI search boost
Crooks claim 2 GB haul from AWS instance via React2Shell exploit Data analytics giant LexisNexis has confirmed its Legal & Professional division suffered a data breach days after the Fulcrumsec cybercrime crew claimed responsibility for the hack.… Continue reading LexisNexis confirms data breach at Legal & Professional arm, some customer records affected
Follows suggestions iPhone-pwning toolset bears hallmarks of zero-days that targeted Russian diplomats Russian cybersecurity outfit Kaspersky is waving away claims that an iPhone exploit kit recently uncovered by Google was developed by the same people… Continue reading Kaspersky dismisses claims Coruna iPhone exploit kit is connected to NSA-linked operation
Retains eight-weekly Extended Stable releases but warns fortnightly updates are the best way to stay safe Google will halve the time between releases of its Chrome browser to two weeks, across versions of the software for desktop operating systems, And… Continue reading Google feels the need for security speed, so will ship Chrome updates every two weeks
Probably not an isolated incident only as researchers have already found 2,863 live API keys exposed A developer says their company is on the hook for more than $82,000 in unauthorized charges after a stolen Google Gemini API key racked massive usage c… Continue reading Dev stunned by $82K Gemini bill after unknown API key thief goes to town