Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
North Korean Crypto Theft Hits Record $2B in 2025: Elliptic Analysis and Security Guidance
Blockchain analytics firm Elliptic estimates that North Korea–linked threat actors stole more than $2 billion in cryptocurrency during the first ...
Salesforce Rejects Ransom Demands as Scattered Lapsus$ Hunters Threaten Mass Data Leak via OAuth Exploits
Salesforce has notified customers it will not negotiate or pay ransom to the threat actors behind a wave of data ...
WireTap Attack Breaks Intel SGX DCAP Attestation with a Passive DDR4 Interposer
Researchers from the Georgia Institute of Technology and Purdue University have introduced WireTap, a physical-layer attack that compromises Intel Software ...
Solar 4RAYS identifies new East Asian cluster NGC4141 exploiting API logic to compromise federal web app
Solar 4RAYS has profiled a previously unidentified East Asian threat cluster, designated NGC4141, after the group compromised a federal agency’s ...
SORVEPOTEL Malware Abuses WhatsApp Web to Self‑Spread in Brazil
Trend Micro has identified a rapid‑propagation Windows threat dubbed SORVEPOTEL that weaponizes WhatsApp Web to distribute itself at scale. The ...
Discord disputes massive breach claim tied to outsourced support provider
Discord has publicly refused to pay a ransom to cybercriminals who claim they stole data on 5.5 million users. The ...
Mic‑E‑Mouse: Optical Mice Abused as “Microphones” in New Acoustic Side‑Channel Attack
Researchers at the University of California, Irvine have demonstrated Mic‑E‑Mouse, a novel acoustic side‑channel attack that repurposes modern high‑DPI optical ...
Outlook to Stop Rendering Inline SVG in Email to Reduce XSS Risk
Microsoft is rolling out a change to its email ecosystem: the web version of Outlook and the new Outlook for ...
Neon temporarily disabled after Broken Access Control exposes call data and transcripts
In late September 2025, the call-recording app Neon shot to the top of the Apple App Store—reaching the No. 2 ...
South Korea’s Daejeon Data Center Fires Expose Systemic Resilience Gaps Across Government IT
Two separate fires in one week at data centers in Daejeon, South Korea, triggered a nationwide disruption of public services ...
