Cybersecurity - Page 12
Cybersecurity news: data breaches, exploited flaws and the patches that fix them, plus police action, with what is confirmed and how to stay safe.
Stories from Cybersecurity come first, newest first, then stories from connected topics (Cybersecurity, vulnerabilities, phishing, AI security, Japan), each labelled with where it comes from. This view is not indexed by search engines.
Latest
FirstVDS Says Hackers Used a VMmanager Flaw to Copy Customer Data
Russian host FirstVDS says attackers used a VMmanager 6 flaw to copy passwords, cloud credentials and crypto wallets without leaving traces on servers.
Hollys Coffee Says Hackers Leaked Members’ IDs, Passwords and Addresses
Korean coffee chain Hollys says hackers reached its membership system between 3 Sept and 7 Oct, leaking IDs, passwords and addresses of older members.
Cysic Halts Its Cross-Chain Bridge After Unauthorised Mint of 10 Million CYS
Cysic has shut its cross-chain bridge after an attacker minted 10 million CYS on BNB Smart Chain. It says user wallets were not hit; losses under review.
Hex-Rays to Acquire HexAI, Maker of AI Agents for Security Research
CTech: Hex-Rays, maker of IDA Pro, is acquiring Israeli HexAI (ex-Ventris) for a reported $30m–$35m. Price unconfirmed; not said to have closed.
Vietnam Unveils Three Draft Post-Quantum Cryptography Standards
Vietnam's Government Cipher Committee has published three draft post-quantum standards, including a home-grown signature scheme, ahead of a 2035 switch.
OpenCode Console Breach Ran Up Charges on Users’ AI Accounts
OpenCode Console users report unauthorised AI charges after a breach. Anthropic and Google blocked keys, OpenAI is refunding, and the incident is ongoing.
Napoleon Perdis Says About 339,055 Customer Records Were Hit in Supplier Breach
Napoleon Perdis says about 339,055 customer records were accessed in a cyber attack on former records supplier Retail Express. No card details were held.
ConnectWise Resets Credentials as Cloud Backup Stays Offline
ConnectWise is resetting accounts and credentials as three services stay suspended; Huntress reports a second backdoored tenant, The Hacker News says.
ACINQ Ships Second Eclair Security Patch in Five Days After Browser API Fix
ACINQ's Eclair v0.14.5 adds security hardening fixes days after v0.14.4 blocked browser API calls. Operators can upgrade without closing channels.
Yamato Transport Says About 5.26 Million Pay-Later Customer Records Were Taken
Yamato Transport says hackers took about 5.26m customer records from its Kuroneko pay-later service, plus delivery and merchant data. No card data.
Latest on TSN
Explore the TSN Atlas: Every topic we cover, mapped. Click a bubble to dive in.