A major cryptocurrency mixing service, Cryptomixer, has been shut down by Europol and international partners. The service allegedly helped launder 1.3 billion euros for cybercriminals involved in ransomware and dark web markets since 2016.
OpenAI has cut ties with analytics provider Mixpanel following a data breach that exposed API user information. The breach involved profile data including names, email addresses, and approximate locations. Only OpenAI platform users are affected, not regular ChatGPT users.
OpenAI is sending breach notifications to all users after a security incident at analytics provider Mixpanel. The company stresses that only API users might be affected, and no sensitive data was exposed. This appears to be a case of extreme transparency rather than a major security crisis.
Over half of enterprises lack confidence in securing non-human identities as these machine accounts experience exponential growth. The gap between deployment and security could create massive vulnerabilities in digital infrastructure.
Firefox shipped with a dangerous WebAssembly vulnerability that affected 180 million users for six months. The memory corruption bug could allow attackers to execute arbitrary code through carefully crafted payloads. Mozilla has now patched the issue in Firefox 145 and ESR 140.5+.
China’s APT31 hacking group has been conducting espionage against Russia’s IT sector since at least 2022. The sophisticated campaign abuses legitimate cloud services like Microsoft OneDrive and Yandex Cloud for command-and-control. Researchers suspect the true targets may include Russian government
A new variant of the ClickFix scam is tricking users with fake Windows Update pages. The scam uses clipboard commands to install dangerous malware that steals sensitive information. Security experts warn this campaign has been active since early October.
Government spies and cyber-mercenaries are actively breaking into Signal and WhatsApp accounts using sophisticated spyware. They’re bypassing encryption entirely by exploiting phones and app features. High-value individuals worldwide are being targeted.
A new Russian-linked malware campaign is hiding StealC V2 inside Blender 3D files distributed on platforms like CGTrader. The attack exploits Blender’s Auto Run feature to execute malicious Python scripts that download additional payloads. Researchers have been tracking this operation for at least s
A New Zealand hacker conference built their own air quality monitoring system using Adafruit components to track CO2 levels across their venue. The DIY solution gave attendees real-time data about virus transmission risks during a measles outbreak. It’s a brilliant example of hackers solving public
