CISA warns hackers are exploiting max severity GitLab flaw — urges all businesses to patch immediately

A 10/10 GitLab flaw was added to CISA’s KEV, giving government agencies just three days to patch.

Microsoft Cloud accounts stolen in highly complex impersonation and passkey phishing campaign

Passkeys have all but eliminated password theft, so what now? Criminals have a solution.

‘It 100% sounded just like her’: AI voice scams are getting frighteningly convincing — here’s how to protect your family
‘It 100% sounded just like her’: AI voice scams are getting frighteningly convincing — here’s how to protect your family

A viral voice scam shows that even if you recognize the voice of a friend or loved one, that’s no guarantee that it’s really them.

Expert finds this £3 Temu Wi-Fi extender is full of security issues, and definitely not the bargain you’d hoped for
Expert finds this £3 Temu Wi-Fi extender is full of security issues, and definitely not the bargain you’d hoped for

A £3 Temu Wi-Fi extender contained hidden administrator access, shared credentials, remote login capabilities, command injection, and weak update protection.

US Treasury wants banks to be better at filing file cyber scam reports after noting nearly $13 billion in losses since 2023

Banks need to get better at reporting issues, so the US Treasury has shared a list of red flags and explained how the scams usually go.

A new Android attack combines malware and ransomware in a cocktail of cybercrime

Unique malware variant spotted targeting Android users, taking photos with victim cameras before deploying an encryptor.