Category: Cyber Security
-
A cybersecurity executive has been accused of stealing and selling confidential data from his former employer, sparking one of the most serious trade secret cases in recent years. Prosecutors claim the executive used insider access to profit from proprietary tools and strategies developed by the company’s security division. The Department of Justice revealed that the…
-
The Qilin ransomware by the numbers story paints a striking picture of how one group rose to dominate the cyber-extortion landscape. In 2025 alone, Qilin claimed responsibility for more than 700 confirmed attacks, placing it among the most aggressive ransomware operations worldwide. First emerging in 2023, Qilin quickly evolved into a large-scale criminal enterprise. Its…
-
A cyberattack on a third-party supplier serving Dublin Airport Authority (DAA) and Cork Airport may have compromised the personal data of millions of travelers. The Dublin Airport supplier cyberattack appears to have exposed files containing passenger and boarding information from flights during August 2025. While DAA confirmed that its own systems were not breached, the…
-
A new malware campaign uses the RedTiger infostealer to compromise Discord accounts, browser data, and crypto wallets. Cybercriminals distribute the malware through gaming channels, presenting it as cheats, mods, or performance boosters. Researchers warn that the RedTiger infostealer Discord accounts campaign is spreading quickly across gaming and social communities. Because the malware disguises itself as…
-
Cybersecurity researchers have uncovered a new phishing campaign called CoPhish, which abuses Microsoft Copilot Studio agents to steal OAuth tokens. The attack leverages legitimate Microsoft infrastructure, making it difficult to detect or block through traditional security filters. The CoPhish attack OAuth tokens campaign primarily targets Microsoft 365 users. By creating convincing Copilot agents within Microsoft’s…
-
A new wave of cyberattacks is targeting websites running outdated WordPress plugins. Security researchers warn that hackers are exploiting known vulnerabilities in GutenKit and Hunk Companion, two popular plugins that remain unpatched on thousands of websites. The large-scale campaign began in early October 2025, according to Wordfence, which detected over 8.7 million attack attempts in…
-
Hackers are targeting LastPass users with fake inheritance requests claiming a family member has uploaded a death certificate to access their vault. The phishing campaign, discovered in mid-October 2025, is linked to the financially motivated threat group CryptoChameleon. Phishing campaign exploits LastPass inheritance feature The attackers send emails that mimic LastPass’s legitimate inheritance process—a feature…
-
Mozilla has announced a new policy that forces all Firefox extension developers to disclose whether they collect or share user data. The change will take effect on November 3, 2025, and aims to bring more transparency to the browser’s ecosystem. From that date, every new Firefox add-on must include a browser_specific_settings.gecko.data_collection_permissions key in its manifest.json…
-
A defective-block data exposure incident has left Irish homeowners deeply concerned after hackers breached a key engineering firm. The company played an important role in Ireland’s government-funded defective-block grant scheme. As a result, officials warn that sensitive homeowner data and structural reports may have been accessed during the attack. What happened The Housing Agency confirmed…
-
A growing transparency breach by Meta & TikTok has drawn the attention of European regulators. The European Commission accuses both platforms of breaching the Digital Services Act (DSA) by restricting researcher access and failing to provide transparent reporting tools. The investigation could result in heavy fines and tighter oversight of two of the world’s largest…