TX court enjoins Samsung from using or selling consumer data, FCC exempts some Chinese tech at Pentagon's request, Man accused of stealing Snapchat access codes for 600 women for Northeastern Univ. coach, Ni8mare flaw allows takeover of N8N workflow automation platform, much more
Korea warns of hacking forum that steals and sells data, NZ High court enjoins publication of stolen medical data, UK government launches $282m cyber action plan, Threat actor stole and threatens to leak data from insurer Prosura, Command injection flaw found in D-Link DSL routers, much more
Ledger third-party payment processor exposed customer data, UL Solutions withdraws from FCC Cyber Trust Mark, NordVPN denies breach saying hackers obtained only dummy data, Thefts stemming from 2022 LastPass breach still ongoing, Russian threat group uses Viber to deliver malware, much more
Denmark says Russia was behind destructive cyberattacks, CISA staffers suspended after organizing polygraph test of acting director, Chinese cyberattacks on Taiwan jumped in 2025, OpenAI says prompt injection attack risks are here to stay, European Space Agency confirms breach, much more
Delay in keystroke led Amazon to imposter discovery, A second suspect was arrested in an attempted Italian ferry malware attack, Denmark blames Russia for destructive cyberattacks, LongNosedGoblin is targeting SE Asian and Japanese governments, NHS tech company hit with cyber incident, much more
Google is suing mass texting operation Darcula, AI-generated social media firm Doublespeed was hacked, Former Israeli Prime Minister Naftali Bennett's messages were leaked online, Korea launches massive probe of Coupang breach, Foreign power tried to install malware on Italian ferry, much more
Coupang's founder didn't show at parliamentary hearing, Majority of parked domains foist scams and malware, FTC orders Nomad to pay victims after hackers stole cryptocurrency, noyb alleges data exposure by TikTok, Grindr and AppFlyer, Hackers exploit critical flaws in Fortinet products, much more
ShinyHunters stole search and watch history of PornHub's premium members, Contributor to DraftKings breach and data theft pleads guilty, Email outage at German Bundestag was not a cyberattack but doubts linger, Handala group puts bounties on Israeli technicians' data, much more
Canada to probe billboard facial recognition use, Pope Leo weighs in on Italian spyware scandal, Oracle bug led to theft of sensitive NHS docs, Coupang founder will go MIA at parliamentary hearing, Asahi will change cyber posture after ransomware attack, Apple issues emergency updates, much more
A journalist's talks with an Iranian hacking leader ended with murder, Hackers attacked Aeroflot's still-insecure infrastructure, The war on disinformation has been dismantled, Trump's DOJ uses Americans' own data to limit voting rights, The Wassenaar Arrangement can help limit spyware exports
Cybercrims impersonate cops to get sensitive data on users, Throwaway phone numbers undercut SMS 2FA, Chinese inverters threaten the power grid, Second Irish HSE attack revealed, Irish Justice Minister apologizes for gaffe over PSNI data breach, Korea seeks punitive fines over breaches, much more
Stanford-developed AI system can beat human pentesters dirt cheap, US charges former Accenture manager with false security statements, Malaysian man sentenced for teaching how to use malware, 10k+ Docker Hub images expose credentials and secrets, Storm-0249 abuses EDR for attacks, much more
Cybersecurity
Man pleads guilty amid DOJ take-down of Social Engineering Enterprise gang, DOJ files more charges against Cyber Army of Russia Reborn member, Spanish cops bust teen hacker for stealing 64m records, Ukraine cyber corps claims attack on Russian logistics company Eltrans+, much more
Cybersecurity
Compromise NDAA bill is chock full of cyber provisions, FTC rejects petition from spyware company founder, Commonwealth Bank of Australia fined A$702k for breaching data rules, FBI warns of fake proof of life photos, Oz teen social media limits go live tomorrow, much more
Cybersecurity
NCSC warns prompt injection threats might be forever, Apple and Google issue new spyware warnings, Apache Tika critical flaw allows XXE injection attacks, Japanese high school student accused of using ChatGPT to attack internet cafe chain, US issues $10m reward for Iranian hackers, much more
Cybersecurity
Southeast Asian economies are becoming dependent on cyberscams, Cybercriminals are inflicting pain throughout India, Mr Deepfakes damaged people beyond the reach of the law, Soaring sales of Starlink are creating risks around the globe, Digital opsec for teens made easy
Cybersecurity
Intellexa had access to personal data of Predator spyware targets, Int'l partners release AI security guide for OT orgs, Phreeli cellco doesn't ask for identifying info, Taiwan suspends Rednote over fraud cases, Albiriox Android malware evolves quickly, NCSC debuts proactive notifications, much more
Cybersecurity
GRU cyber ops sanctioned into Skripal poisoning inquiry, Defenders scramble to patch React Server Components' critical flaws, AI agents match human attackers in smart contract exploits, AZ Atty. General sues Temu for customer data theft, Threat intel experts recorded DPRK IT recruiters, much more
Cybersecurity
US DOJ seizes Myanmar scam center website, Coupang execs sold company stock before breach was announced, Coupang is reviewing compensation for breach victims, Korea's Gmarket hit by string of unauthorized payments, Japan's Askul internet service resumes one month post-breach, much more
Cybersecurity
Indian government wants smartphone makers to preload state-owned security app, Indian government wants to bar comms apps from working on SIM-less devices, Korea launches probe into Coupang breach and threatens punitive damages, DPRK hackers target S. Koreans with fake tax invoices, much more
Cybersecurity
Someone reported today's Metacurity as a phishing email, and Google has moved it to the spam folder. Please check, and if today's issue is in spam, please let Google know it's a safe email.
Cybersecurity
Lazarus Group suspected of $30.6m breach of Upbit, Korea's shopping platform Coupang hacked by a former insider to access 30m customers' data, Lazarus Group and Kimsuky are DPRK's most prolific hackers, Korea arrests four for hacking 120K IP cameras, OnSolve CodeRED platform hit by attack, much more
Cybersecurity
An insider shared internal CrowdStrike screenshots on Telegram, Hackers stole Salesforce-stored data from 200+ companies, DOGE has purportedly disbanded, Harvard is the latest Ivy to get hacked, AI models can sabotage coding projects, Singapore raids scam-connected firm, much more
Cybersecurity
Scammers who go to unbelievable lengths, How to expose a DPRK hacker seeking IT work, A Kiwi hacker conference installed a literal anti-virus system, Trump is turning his back on supercharged disinformation, How the EU and US acted differently to the Collins Aerospace hack