Cybersecurity Risks Escalate as Hackers Abuse npm Mirrors for Phishing Redirects In a disturbing trend that highlights the evolving tactics of cyber threat actors, hackers have been exploiting npm and its mirrors to host malicious HTML pages designed to impersonate Cloudflare CAPTCHAs. These phishing redirect pages are then used to divert visitors to attacker-controlled websites, … Read more
A major art museum in Los Angeles has revealed that a data breach last year exposed sensitive information about its visitors and employees, including social security numbers and medical records. The Los Angeles County Museum of Art (LACMA) detected suspicious activity on its systems in July 2025, but it took over a month to confirm … Read more
A new feature has been added to Microsoft’s PowerToys toolset, a collection of utilities designed to enhance and streamline Windows functionality. The latest update includes a handy tool called Window Hopper that makes it easier for users to switch between multiple windows within an application. This nifty utility works in a similar way to the … Read more
Cybersecurity teams have made significant strides in strengthening authentication protocols, but a growing threat remains: identity verification risks during onboarding and recovery processes. Despite multi-factor authentication (MFA) and conditional access becoming increasingly common, attackers are exploiting weaknesses in these critical moments to gain unauthorized access. When employees join or leave an organization, account access is … Read more
Threat Actors Use Voice AI Agents to Phish iPhone Passcodes in Sophisticated Scheme A new phishing-as-a-service (PhaaS) platform called AnonyMousKIT has been uncovered, using voice artificial intelligence agents to trick victims into revealing their iPhone passcodes. This brazen scheme allows threat actors to unlock and resell stolen Apple devices, while also accessing sensitive data stored … Read more
Cybercriminals have discovered a new way to use the npm package manager to host phishing redirect pages, exploiting a weakness in the system that allows them to store malicious HTML files on legitimate domains. This technique has been spotted in at least 24 packages, which were found to contain identical code that impersonates Cloudflare CAPTCHAs … Read more
A Major Cultural Institution’s Data Breach Exposes Sensitive Information of Thousands The Los Angeles County Museum of Art (LACMA) has revealed that a significant data breach occurred last year, compromising sensitive information of its employees and visitors. The incident, which was discovered on July 11, 2025, exposed not only personal details but also sensitive financial … Read more
A massive distributed denial-of-service (DDoS) attack has crippled Norway’s shared government digital services since Monday, leaving a trail of disruption and speculation in its wake. The assault on the Norwegian Digitalization Agency’s (Digdir) infrastructure has targeted public-facing services, forcing users to endure frustrating errors, slow server responses, and unusually long login times. The impact is … Read more
Cybersecurity experts have uncovered a sophisticated PhaaS platform that uses voice AI agents to phish iPhone passcodes, exploiting vulnerabilities in Apple’s Activation Lock feature. The platform, known as AnonyMousKIT, has been active since early 2024 and is linked to a sprawling ecosystem of stolen iPhones, compromised Apple IDs, and accessed iCloud backups. At its core, … Read more
**Cybersecurity experts are sounding the alarm on a new vulnerability management system that’s revolutionizing the way organizations approach identity exposure and active attack paths. But what exactly does this mean, and why should you care?** A recent breakthrough in artificial intelligence (AI) has given rise to a cutting-edge vulnerability management platform called Frontier AI. This … Read more