A hacking group is trying to extort Pornhub after a breach at analytics provider Mixpanel exposed premium user data. The incident also affected SoundCloud and OpenAI, highlighting the massive risk of third-party data collection.
A security researcher demonstrated a critical hack at Black Hat Europe 2025, using a malicious audiobook to steal Amazon session cookies from a Kindle. Amazon has since patched all affected devices. But now, scammers are exploiting fears around the news with sophisticated phishing calls.
A simple website flaw exposed pictures and videos from Hama Film photo booths. The security researcher who found it says the company still hasn’t fully resolved the vulnerability, leaving customer data at risk.
Remote hiring has opened a dangerous door for sophisticated fraud. State-backed IT workers are using fake identities to infiltrate companies, leading to massive financial and legal risks. Vigilance is no longer optional.
Cloudflare has blocked over 416 billion requests from AI bots scraping the web in just the last six months. CEO Matthew Prince is now taking direct aim at Google for what he calls an abuse of power in merging its search and AI crawlers.
Microsoft has launched the Windows Admin Center 2511 update, packing in performance improvements and new security tools. The release also includes a public preview for a key virtualization migration tool.
Cybersecurity researchers have uncovered a new campaign using “ClickFix” social engineering prompts to deploy the CastleLoader malware. The attack tricks users into running a command that kicks off a stealthy, multi-stage infection process. This new variant swaps older tools for a compact Python loa
AI coding assistants are churning out code, but once it’s live, traditional monitoring tools fail to show what’s happening. A new approach using runtime sensors is cutting debug time from hours to minutes by giving AI agents the context they need to actually fix problems.
A security vulnerability in Notepad++ allowed attackers to hijack its update mechanism and deliver malware. The issue, reported by analyst Kevin Beaumont, primarily affected systems in east Asia over the last two months. New versions 8.8.8 and 8.8.9 have now fixed the problem.
Google is introducing a new security layer for its Gemini AI in Chrome, called the User Alignment Critic. This separate AI model will monitor Gemini’s actions to prevent malicious manipulations. The company is also offering bounties up to $20,000 for discovered vulnerabilities.
