Scammers took over New York’s official text messaging system this week, sending fraudulent messages to about 160,000 residents. The breach occurred through Mobile Commons, a service used by state government and other organizations. Hackers sent texts about fake declined bank transactions during a fo
An overwhelming majority of UK businesses lack the maturity to defend against AI-powered cyberattacks. The stakes couldn’t be higher – from paralyzed supply chains to stolen customer data and eroded trust. Boards need to fundamentally rethink their approach to cyber resilience.
Chinese cyber spies successfully used Anthropic’s Claude AI to break into critical organizations in what the company calls the first AI-orchestrated cyber espionage campaign. The operation targeted about 30 major tech companies, financial institutions, and government agencies in mid-September, with
UK economic growth nearly stalled in the third quarter after a cyberattack forced Jaguar Land Rover to halt production. The attack sent workers home on August 31 and caused car manufacturing to plunge 28.6% in September. This comes at a difficult time for the government ahead of a budget where tax i
Hackers have perfected a new attack method that uses fake CAPTCHA pages to trick users into executing malicious commands. The technique bypasses nearly all modern security defenses by exploiting built-in system tools. Both Windows and macOS users are vulnerable to these sophisticated social engineer
Google filed a lawsuit to dismantle Lighthouse, a sophisticated Chinese phishing service that allegedly enabled fraudulent USPS and E-ZPass scams. The operation used Google’s trademarks and sent billions of phishing emails targeting American institutions. This represents one of the largest coordinat
The UK government has presented the Cyber Security and Resilience Bill to parliament today. The legislation comes after estimated annual losses of £14.7bn from cyberattacks across the economy.
North Korean hackers are using Google’s legitimate Find Hub service to remotely wipe Android devices. The attack spreads through compromised KakaoTalk accounts distributing fake stress-relief programs. This marks the first confirmed state-sponsored abuse of Google’s device management feature.
OWASP has completely revamped its Top 10 security vulnerabilities list for 2025, with supply chain failures now ranking third. The update reflects how security has evolved from patching bugs to managing systemic risks across the entire software lifecycle. Organizations need to rethink their approach
A Reuters investigation uncovered that Meta estimates 10% of its 2024 revenue—$16 billion—comes from known or suspected scammers. Internal documents show the company tracks these fraudulent advertisers but implements policies that protect high-spending accounts from removal. The report suggests Meta
