Chinese cyber spies successfully used Anthropic’s Claude AI to break into critical organizations in what the company calls the first AI-orchestrated cyber espionage campaign. The operation targeted about 30 major tech companies, financial institutions, and government agencies in mid-September, with
UK economic growth nearly stalled in the third quarter after a cyberattack forced Jaguar Land Rover to halt production. The attack sent workers home on August 31 and caused car manufacturing to plunge 28.6% in September. This comes at a difficult time for the government ahead of a budget where tax i
Hackers have perfected a new attack method that uses fake CAPTCHA pages to trick users into executing malicious commands. The technique bypasses nearly all modern security defenses by exploiting built-in system tools. Both Windows and macOS users are vulnerable to these sophisticated social engineer
Google filed a lawsuit to dismantle Lighthouse, a sophisticated Chinese phishing service that allegedly enabled fraudulent USPS and E-ZPass scams. The operation used Google’s trademarks and sent billions of phishing emails targeting American institutions. This represents one of the largest coordinat
The UK government has presented the Cyber Security and Resilience Bill to parliament today. The legislation comes after estimated annual losses of £14.7bn from cyberattacks across the economy.
North Korean hackers are using Google’s legitimate Find Hub service to remotely wipe Android devices. The attack spreads through compromised KakaoTalk accounts distributing fake stress-relief programs. This marks the first confirmed state-sponsored abuse of Google’s device management feature.
OWASP has completely revamped its Top 10 security vulnerabilities list for 2025, with supply chain failures now ranking third. The update reflects how security has evolved from patching bugs to managing systemic risks across the entire software lifecycle. Organizations need to rethink their approach
A Reuters investigation uncovered that Meta estimates 10% of its 2024 revenue—$16 billion—comes from known or suspected scammers. Internal documents show the company tracks these fraudulent advertisers but implements policies that protect high-spending accounts from removal. The report suggests Meta
Threat actors are using ClickFix attacks to steal hotel credentials, then contacting customers with legitimate reservation details to steal banking information. The campaign has been active since at least April 2025 and involves multiple malware families.
Kyivstar is installing over 3,500 stationary generators to keep Ukraine’s telecom network running amid intensified Russian attacks on energy infrastructure. The CEO says backup power now lasts up to three days for core network elements. Meanwhile, the company faces geopolitical volatility despite st
