-
Meta says an Instagram recovery tool bug allowed attackers to abuse password resets, affecting 20,225 accounts and exposing users without 2FA to account takeover risk.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Instagram glitch exposed Mark Zuckerberg’s email addresses and phone number, plus contact details of other top users, through a password reset flaw.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
32 Red Hat npm packages compromised by Miasma malware expose cloud tokens, CI/CD secrets and developer credentials in supply chain attack.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Atlas Menu Data Breach exposes 64,000 GTA V and CS2 cheat service users, leaking emails, IPs, support tickets and hashed passwords.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
iFood confirms a data breach affecting 1.2 million customers in Brazil, while hackers on BreachForums claim the actual theft is much larger.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
North Korean Lazarus Group targets npm developers with brandjacking packages that mimic trusted tools, drop malware and put credentials at risk.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Five Eyes warns that Chinese spies are using fake job ads on LinkedIn, Indeed, and Upwork to target military staff and steal sensitive data.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Proofpoint says TA4922, a suspected China aligned cybercrime group, is targeting UK and European organisations with tax, payroll and benefits themed malware campaigns.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Alcasec, the “Robin Hood of Spanish Hackers,” is jailed for 31 months after admitting to stealing and selling Spanish citizens’ banking data.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Fake ChatGPT desktop app ads pushed password-stealing malware by abusing trusted AI links, hiding from scanners, and tricking users into downloads.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
