Hackers

Video game publisher Valve is notifying its Steam hardware customers in Europe of a data breach. Hackers stole customer data after compromising the shipping partner, CEVA Logistics.

Hackers breached the North Carolina Ports IT system, disrupting operations at ports in Wilmington, Morehead City, and Charlotte. The IT team activated a cybersecurity contingency plan and collaborated with partners including the North Carolina Department of Transportation and the North Carolina Department of [...] to address the breach.

Hackers exploited a SQL injection vulnerability to install the khunt post-exploitation toolkit inside an Oracle database, which was used to breach a corporate network.

Suspected Iran cyberattacks targeted a U.S. water supply, including a Georgia water treatment plant. Officials have warned for years that the nation’s 150,000 water treatment systems are vulnerable to hackers.

New York has awarded $9 million to protect water systems following cyberattacks on utilities in Minnesota and Michigan. The funding aims to address concerns about critical infrastructure vulnerabilities.

Hackers breached water utility systems in seven U.S. states, prompting warnings from the FBI and local operators. The cyberattacks targeted critical infrastructure, according to federal officials.

Hackers breached water utility systems in seven states, leading to warnings from federal officials and local operators. The FBI confirmed the cyberattacks on critical water infrastructure.

Hackers breached water utility systems in seven states, leading to warnings from federal officials and local operators. The FBI reported the cyberattacks impacting critical infrastructure.

Hackers modified a JavaScript file served by Adform to rewrite cryptocurrency wallet addresses. Adform detected the attack on July 27, 2026, removed the malicious code, notified clients, and reported the incident to authorities.

Ariana Grande is suing hackers who obtained and leaked unreleased photos and songs. The lawsuit aims to identify the individuals responsible for the unauthorized distribution of her music and videos.

Hackers are exploiting a vulnerability in the FastJson open-source Java library to launch remote code execution (RCE) attacks against US firms. The attacks allow remote code execution without requiring user interaction or elevated privileges.

North Korea has arrested hackers accused of laundering stolen funds from the country's bank using cryptocurrency. The case involves criminal activity related to financial crimes and digital currency.

OnTrac, a parcel delivery company, has notified customers of a data breach following a network hack. Hackers may have accessed personal details of its customers.

Hackers are altering DNS settings on Wi-Fi devices at hotels and conference centers to redirect users to fake Microsoft 365 login pages. This tactic is used to steal Microsoft 365 accounts by intercepting login credentials.

Chick-fil-A reported a cyberattack that exposed customer account information through its loyalty program. Hackers accessed data including names, email addresses, membership numbers, partial payment card details, and gift card balances by using credentials from a third-party source. The company logged out affected customers, removed stored payment methods, and advised users to reset passwords and monitor for suspicious activity.

Google is releasing a new feature called 'Selfie' that allows users to sign in or recover accounts using a selfie video. The feature aims to prevent hackers from accessing accounts.

Origin Energy confirmed a hack where hackers accessed Australian customers' personal data, including names, addresses, dates of birth, phone numbers, and partial bank account details. The company has 4.8 million customer accounts in Australia, offering electricity, natural gas, LPG, and internet services.

Hackers accessed personal and banking details of Origin Energy's Australian customers, including names, addresses, dates of birth, phone numbers, and partial bank account data. The company confirmed the breach affects its 4.8 million customer accounts in Australia, which provide electricity, fossil gas, LPG, and internet services.

South Korea disclosed a data breach involving the National Diplomatic Academy's online education system, which was compromised for ten months. Hackers stole personal information of current and former Ministry of Foreign Affairs employees, including overseas diplomats.

Estée Lauder is notifying customers of a data breach caused by a flaw in Oracle E-Business Suite used for HR operations. Hackers exploited this vulnerability to access customer data.

Hackers accessed South Korea's diplomatic academy's online education system for 9 months, stealing personal information of former and current employees of the Ministry of Foreign Affairs.

Hackers are stealing encrypted data now with the intention of decrypting it later using quantum computers, posing a future cybersecurity threat. The article also mentions other topics like Trump's market proposals, oil prices, and Iran's oil export stance.

Hackers defaced Kenya's presidency website, replacing its content with insults and a ransom note demanding 5 Bitcoin (approximately KSh 41.3 million or US$320,000). The ICT Cabinet Secretary confirmed the site was restricted for containment and forensic analysis.

Hackers are exploiting the update mechanism of ViPNet software to target Russian organizations, including government agencies. The attack involves an advanced threat actor leveraging the private networking product suite's update process.

The article highlights security risks of default settings on new smart devices, such as automatic data sharing and remote access, which can expose users to hackers and data brokers. It advises manually configuring privacy settings before connecting devices to a home network.

The European Union has imposed sanctions on Russian military intelligence officers, hackers, and private companies linked to a yearslong cyber spying campaign. The measures target individuals and entities accused of conducting cyber espionage.

AI is reducing the effectiveness of crypto security audits, and hackers are exploiting codebases of defunct decentralized finance protocols to steal customer funds.

Mount Royal University in Calgary confirmed that hackers breached its network, stealing and deleting data from file storage systems. The university stated that the attackers accessed and removed data before its deletion.

Hackers can exploit prompt injection vulnerabilities in 9 popular AI tools to create massive botnets. Large language models (LLMs) cannot distinguish between legitimate and malicious commands, allowing attackers to inject harmful instructions into emails or source code. Current 'push' attacks target individuals but are limited in scale due to the need to send injections directly to victims.

Kubota North America Corporation disclosed that hackers had access to some of its network systems for more than a month earlier this year.

The US has lifted an export ban on Anthropic's advanced AI tools. The company had previously suspended Fable and Mythos in June due to concerns about potential misuse by hackers.

Hackers infiltrated Polymarket’s website via a compromised third-party vendor, stealing millions in cryptocurrency from users. The company announced refunds for affected users.

Australia's security environment is degrading due to threats from autocratic regimes, hackers, and antisemitic extremists, according to the country's spy chief. ASIO Director-General Mike Burgess warned that the current terrorism threat level of 'probable' does not fully reflect the systemic and compounding nature of these threats.

Tata Electronics confirmed a cyberattack that impacted parts of its IT infrastructure, with hackers leaking data. The company made the confirmation in a statement to BleepingComputer.

Hackers have claimed to leak stolen data from Madison Square Garden. Additional updates include San Francisco gay bars implementing face scanners, France ending its relationship with Palantir, and Apple planning changes to its private email system.

Hackers are exploiting an unauthenticated information disclosure vulnerability in the Gravity SMTP WordPress plugin, which is active on 100,000 sites. The vulnerability allows threat actors to access sensitive data without authentication.

A cyber security expert warns that hackers exploit airport Wi-Fi through 'evil twin' hotspots and fake login pages to target passengers. The article highlights the risks of using unsecured airport networks for unsuspecting travelers.

An Ebola outbreak in Congo has led to a 40% increase in cases within a week, with confirmed deaths exceeding 200. The U.S. CDC has activated $107 million in funds, and hackers are demanding $75 million from Novo. An ACIP investigation has been launched regarding the outbreak.

Hackers are targeting dozens of colleges through Canvas, an educational platform. The article highlights the ongoing security threat affecting multiple institutions.

Digital healthcare company iRhythm Holdings disclosed a data breach in which hackers stole patients' personal and health information stored on third-party-hosted business applications.