CyberNews Tens of millions of users of two popular online platforms have had their personal data exposed in massive data breaches. Suno, an artificial intelligence music generator, and Paidwork, a gig-work platform, have both been targeted by hackers who stole sensitive information from their databases. The breach is believed to have occurred in November 2025 for … Read more
A Japanese Frozen-Food Chain’s Supply Disrupted by Ransomware Attack A ransomware attack on Nichirei, a leading frozen-food supplier and logistics firm in Japan, has sent shockwaves through the country’s food supply chain. The cyberattack, which is believed to have been carried out by Russia-linked group RansomHouse, disrupted operations at Nichirei’s 141 logistics centers and warehouses, … Read more
Financial institutions in Europe and the US are inadvertently exposing sensitive customer information to third-party advertising, analytics, and personalization platforms via cookie tracking technology. This alarming trend raises serious concerns about compliance, security, and data privacy. Jscrambler’s latest research has shed light on this pattern of behavior among financial services companies. The study found that … Read more
A malicious Android application has been discovered distributing a devastating four-stage surveillance platform that can harvest sensitive user data, run banking-app overlays, and take full control of infected devices. Dubbed “BH Alert,” this fake emergency alert app is masquerading as an official Bahraini civil-defense application, preying on users’ trust during times of crisis. Developed by … Read more
As attackers continue to evolve and adapt their tactics, a disturbing trend has emerged in the world of cybersecurity. Threat actors are learning to exploit trusted AI toolchains and workflows, making malicious activity increasingly difficult to detect. This emerging threat is exemplified by Sandworm_Mode, a self-propagating worm that spreads through malicious npm packages and leverages … Read more
A major fintech company, Upbound Group, has revealed that a sophisticated cyberattack has resulted in $13 million worth of fraudulent lease-to-own agreements through its Acima platform. The attack, which compromised sensitive customer information and documents, allowed threat actors to obtain goods under fake leases, leaving the company to foot the bill for unpaid merchandise. Upbound … Read more
GitHub is drastically revamping its bug bounty program, leaving many security researchers and bug hunters reeling. As of July 27, 2026, the popular code-sharing platform will slash public bug bounty payouts by at least half for all severity levels. This means that even critical vulnerabilities, which have historically been worth $20,000 to $30,000 or more, … Read more
A Malicious App Exploits Fear to Deploy Android Surveillance Malware, Leaving Users Vulnerable to Devastating Consequences In a disturbing trend that highlights the ease with which malicious actors can exploit user trust, researchers have uncovered a fake Bahrain alert app that delivers a four-stage Android spyware via phony Google Play sites. This malware, dubbed BH … Read more
Cyberattackers have discovered a new way to evade detection by leveraging artificial intelligence (AI) coding assistants and continuous integration (CI) pipelines. By hiding malicious activity within these trusted tools, attackers can make their exploits virtually indistinguishable from normal activity, posing a significant challenge for security teams. One early example of this emerging threat is Sandworm_Mode, … Read more
South Korea’s National Diplomatic Academy was breached by hackers for ten months, exposing personal data of 6,000 individuals, including diplomats stationed abroad. The incident occurred when an unknown threat actor exploited a vulnerability in the academy’s server in April 2025 and continued to siphon sensitive information until February 2026. The compromised online education system, introduced … Read more