A massive data breach affecting over 12 million people has been revealed by Japanese telecommunications giant KDDI, exposing email addresses and passwords used by customers of five internet service providers (ISPs) in the country. The incident highlights the importance of robust cybersecurity measures and the need for organizations to stay vigilant against attacks. KDDI is … Read more
Mexico’s National Cybersecurity Plan Faces its First Major Test at the FIFA World Cup The Mexican government’s ambitious cyber plan has been put to the ultimate test as it hosts several matches of the highly anticipated FIFA World Cup 2026. The tournament has created a “target-rich environment” for cybercriminals, hacktivists, and nation-state threat actors, according … Read more
Ubiquiti Issues Urgent Security Updates for UniFi OS After Discovery of Critical Flaws Ubiquiti, a leading provider of network management and security solutions, has released emergency patches to fix seven critical vulnerabilities in its UniFi OS. Among these is a maximum-severity flaw that can be exploited by hackers to inject malicious commands into affected systems. … Read more
Federal Agencies Ordered to Patch Critical Vulnerability in Popular AI Development Tool The US Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent directive for federal agencies to prioritize patching a recently discovered vulnerability in Langflow, a widely used visual framework for building artificial intelligence agents. The flaw, tracked as CVE-2026-55255, is being actively … Read more
A staggering 12 million people have had their sensitive information compromised in a massive data breach at Japanese telecommunications giant KDDI, one of the country’s largest mobile providers. The breach, which was first discovered on June 17, exposed email addresses and passwords of millions of customers across five internet service providers (ISPs) in Japan. KDDI, … Read more
Mount Royal University Falls Victim to Cyberattack, Exposing Sensitive Data A disturbing breach has hit Mount Royal University in Calgary, Alberta, Canada, leaving thousands of students and employees vulnerable. Hackers claiming affiliation with the threat group CMD Organization have accessed a university network, stolen sensitive data, and even deleted some files to hinder recovery efforts. … Read more
In a significant move that’s likely to be welcomed by YouTube users worldwide, DuckDuckGo has rolled out a new feature that blocks most video ads on the popular platform. The ad-blocking mechanism is built into the latest versions of the browser for iOS, Mac, and Windows, while Android users can enable it manually through their … Read more
**AI-Powered Service Desk Attacks: The Growing Threat** A recent report from IBM found that a staggering 16% of breaches involve attackers using AI-powered tools, with phishing and deepfake impersonation attacks being the most common. This trend has significant implications for security teams, particularly when it comes to the service desk. As a critical entry point … Read more
A China-linked threat cluster has been exploiting a vulnerability in Roundcube webmail servers at universities across the United States and Canada, stealing credentials and deploying backdoor malware. The campaign, tracked by cybersecurity researchers at Proofpoint as “UNK_MassTraction,” has been active since May and targets physics, engineering, and national security-related research departments. Researchers have identified a … Read more
A Sneaky Credential Thief Has Been Lurking on Popular Package Managers A group of malicious packages has been discovered on both the Node Package Manager (npm) and the Python Package Index (PyPI), compromising the credentials of users who rely on popular payment platforms such as Paysafe, Skrill, and Neteller. These fake software development kits (SDKs) … Read more