Cybersecurity News
-
Fitness Communication Platform Database Left Unprotected
A data security incident has affected Hello Gym, a communication platform serving fitness centers across North America. The breach involved an exposed database containing 1.6 million audio recordings, and sensitive customer and…
-
Researchers Find Cross-Platform Malware Targeting Sensitive Data and Crypto Wallets
Cybersecurity researchers at Mosyle, a device management and security provider, have discovered a new and highly stealthy malware strain, according to a report first shared with 9to5Mac. Called ModStealer that has been…
-
Critical Security Update Released for Adobe Commerce
Recently, a significant security flaw was identified in Adobe Commerce involving the Commerce REST API (CVE-2025-54236). This vulnerability could potentially allow attackers to take over customer accounts. While there are no reports…
-
Malicious Facebook Ads Distribute Fake “Meta Verified” Browser Extensions
A recent report by security researchers at Bitdefender details a malicious campaign spreading through Facebook ads that promote fake “Meta Verified” browser extensions. The campaign targets Facebook users, especially content creators and…
-
Report Shows Over Half of Enterprise Web Assets Lack WAF Protection
A new report from CyCognito, a cybersecurity exposure platform, has uncovered a significant blind spot in enterprise web security: more than half of internet-facing enterprise assets are not protected by Web Application…
-
Plex Confirms Security Incident Involving User Account Data
Plex, a popular personal media server and streaming platform, has disclosed a recent security incident that exposed limited user account data. In an official announcement, the company stated that an unauthorized third…
-
Wiz Discovers Nx Supply Chain Attack Involving AI Malware
Researchers at Wiz, a cloud security software company, have released new findings on the recent compromise of the Nx JavaScript framework, revealing a multi-phase supply chain attack that affected thousands of users…
-
VirusTotal’s AI Code Insight Finds Hidden Malware Campaign in SVG Files
A recent cybersecurity report from VirusTotal, a leading online malware detection and analysis platform, reveals a sophisticated malware campaign delivered through seemingly harmless SVG files. These malicious files utilized advanced phishing techniques…
-
Shadowserver Highlights Elevated Activity in HTTP-Based Network Scans
The Shadowserver Foundation, a non-profit security organization, has identified a significant uptick in high-severity activities involving hosts performing HTTP-based scans across diverse networks worldwide. These activities often include attempts to detect and…