Rockstar Games’ Grand Theft Auto VI is heading towards a 19 November 2026 release, but the loudest conversation around the title this month is not coming from the studio’s official marketing. It is being driven by a new wave of leak claims and online speculation that suggest major changes to the game’s story structure, character dynamics and wider design, even as Rockstar itself has confirmed only a […]
A transfer of about $606,000 in bitcoin by the U. S. government to Coinbase has revived attention on one of the crypto market’s longest-running fallout stories, linking a small on-chain movement to the far larger question of how assets tied to the 2016 Bitfinex hack will ultimately be handled and what that could mean for Bitfinex’s outstanding recovery obligations and its UNUS SED LEO token. Blockchain-tracking reports […]
Cookeville Regional Medical Center has begun notifying 337,917 people that personal and medical information was exposed after a ransomware attack discovered on 14 July 2025, a breach that has taken about nine months to fully assess and disclose at scale. The Tennessee hospital said an unauthorised third party accessed or acquired files between 11 July and 14 July 2025, with the compromised data varying by individual and […]
Ukrainian municipal authorities and healthcare institutions have come under a coordinated wave of cyberattacks that security officials say was designed to steal sensitive information from web browsers and WhatsApp accounts, widening concern over espionage operations aimed at essential public services during wartime. The campaign, attributed by Ukraine’s Computer Emergency Response Team to threat cluster UAC-0247, struck local government bodies and municipal medical facilities, including clinical and […]
Cyber criminals are pushing a Windows information stealer called NWHStealer through bogus software downloads that masquerade as Proton VPN installers, gaming mods and hardware utilities, in a campaign that security researchers say relies less on classic phishing and more on users searching for tools they believe are legitimate. Malwarebytes said on April 15 that it had identified multiple active distribution chains tied to the stealer, with malicious […]
Attackers are exploiting trust in Adobe’s brand to deliver covert remote access, using a fake Acrobat Reader download page to install ConnectWise ScreenConnect through a fileless, memory-heavy attack chain that is designed to leave few traces on disk and make forensic analysis harder. Security researchers who uncovered the campaign said the operation began with a phishing site made to resemble Adobe’s official software page, where victims were […]
Comcast customers notified about the company’s 2023 Xfinity data breach are being offered cash payments, reimbursement for documented losses and identity-protection services under a proposed $117.5 million class-action settlement, opening what could become one of the largest consumer redress exercises tied to a telecom cyber incident in the United States. The settlement applies to people in the United States and its territories who were sent individual notice […]
Losses from hacks, phishing and other Web3 security incidents climbed to about $482.6 million in the first quarter of 2026, even as projects expanded audits, compliance work and other defensive controls. The biggest change was not simply the amount lost, but where attackers found success: away from pure code exploits and deeper into off-chain operations, user manipulation and privileged access. Data published by security firm Hacken shows […]
More than 100 Chrome extensions presented as harmless tools for games, social media sidebars and translation have been tied to a coordinated data-harvesting operation that security researchers say exposed user identities, browser sessions and browsing activity through a shared command-and-control network. The campaign, uncovered by Socket’s Threat Research Team and independently checked in part by BleepingComputer, involved 108 extensions listed under five publisher identities and accounted for […]
Federal investigators in the United States, working with Indonesian police, have dismantled the W3LL phishing network, a cybercrime operation that authorities say enabled the theft of thousands of account credentials and supported more than $20 million in attempted fraud. The action, led by the FBI’s Atlanta field office, included the seizure of infrastructure linked to the service and the detention in Indonesia of an alleged developer identified […]
A newly disclosed security flaw in Axios, one of the most widely used HTTP client libraries in the JavaScript ecosystem, has raised concern across software and cloud security teams after official advisories warned it could be chained into remote code execution or a broader compromise of cloud infrastructure. The issue, tracked as CVE-2026-40175, affects Axios versions earlier than 1.15.0 and was published through GitHub’s advisory system on […]
Mirax, an emerging Android banking trojan being marketed as a malware-as-a-service operation, is drawing attention from mobile security researchers after reports that it can do more than steal banking credentials. Analysts say the malware can remotely control infected phones and repurpose them as residential proxy nodes, giving cybercriminals a way to hide malicious traffic behind ordinary consumer devices while pursuing financial fraud across Europe. The threat stands […]
Kraken said on April 13 that it is being extorted by a criminal group threatening to publish videos showing parts of its internal systems and limited client data, as the cryptocurrency exchange sought to reassure users that its core platform had not been breached and customer funds remained safe. The company’s public statement said the threat followed unauthorised access tied to a small number of accounts rather […]
Basic-Fit has disclosed a cyber breach affecting about one million members across several European markets, with roughly 200,000 of those accounts in the Netherlands, exposing a wide range of personal and financial details and sharpening concerns over how consumer-facing digital platforms protect routine lifestyle data. The company said the unauthorised access was detected by internal monitoring systems and halted within minutes, but not before information had been […]
Rockstar Games has confirmed that a data breach affected company information, saying a “limited amount of non-material company information” was accessed through a third-party incident and that the episode has had no impact on its operations or players. The disclosure lands at a sensitive moment for one of the world’s most closely watched game developers, with Grand Theft Auto VI still one of the industry’s biggest commercial […]
Google has moved to harden Chrome against one of cybercrime’s most effective tactics by making Device Bound Session Credentials publicly available for Windows users in Chrome 146, a step designed to stop attackers reusing stolen session cookies to enter accounts without passwords or multi-factor authentication. The change binds a signed-in web session to the user’s device, meaning a cookie lifted by malware should quickly become unusable on […]
Millions of Android users, including a large share of cryptocurrency wallet customers, were exposed to a software supply-chain weakness after a flaw in the widely used EngageSDK library was found to allow hostile apps on the same device to break through normal app boundaries and reach sensitive data. The issue centred on an “intent redirection” vulnerability inside the third-party Android kit, which is used for push notifications […]
Google has begun rolling out a new Chrome security feature designed to blunt one of the most effective tools used by cybercriminals to hijack online accounts: stolen session cookies. The protection, called Device Bound Session Credentials, is entering public availability for Windows users in Chrome 146, with expansion to macOS slated for a later release. Google says the system is intended to make stolen authentication cookies far […]
A Microsoft-tracked cybercrime group is using adversary-in-the-middle techniques to hijack Microsoft 365 sessions, bypass multifactor authentication and reroute employee pay into attacker-controlled bank accounts, in what researchers describe as a geographically focused campaign against users in Canada. Microsoft said the actor, tracked as Storm-2755, combined search-result poisoning, fake sign-in pages and session replay to move from account takeover to payroll fraud, causing direct financial loss for at […]
Circle Internet Group shares slid nearly 10 per cent on Thursday, closing at $85.10, after a fresh Wall Street “sell” call added to investor unease over the stablecoin issuer’s margins and over criticism of its handling of funds tied to the Drift Protocol exploit. Market data showed the stock ended the session down 9.89 per cent, extending a volatile stretch for one of crypto’s most closely watched […]
A cross-border espionage campaign that targeted journalists, civil society figures and some government-linked entities across the Middle East and North Africa between 2023 and 2024 has been tied by researchers to BITTER, a long-tracked South Asian threat actor, marking what investigators describe as the first documented case linking the group to attacks on civil society in the region. The attribution remains qualified rather than definitive: Lookout said […]
STX RAT, a newly identified remote access trojan, has drawn attention in the cyber-security sector after researchers tied it to an attempted intrusion against a financial-services environment and linked it to broader opportunistic delivery campaigns that include trojanised software and script-based loaders. The malware stands out because it combines hidden remote control with data theft, while delaying some of its most suspicious behaviour until it has an […]
Attackers have planted a stealthy Magecart credit-card skimmer on nearly 100 Magento-based online shops by hiding the malicious code inside an invisible SVG image, according to incident findings published this week, in what security specialists describe as another sign that payment-page attacks are becoming harder for merchants and scanners to detect. The operation was identified on April 7 and affected 99 stores, with stolen payment data sent […]
Atomic Stealer operators have opened a fresh lane into Apple computers by shifting a popular ClickFix scam away from Terminal and into Script Editor, a built-in macOS tool that many users would regard as less suspicious. The change matters because Apple moved in March to add stronger friction around Terminal-based copy-and-paste attacks in macOS Tahoe 26.4, and threat researchers now say attackers have adapted within weeks rather […]
