Watch out, hackers are abusing Apple account notifications to distribute malware, steal money and data

Researchers found a new callback phishing campaign abusing Apple’s email notification system.

‘We’ve identified a security incident’: Vercel breach confirmed after hackers claim stolen data for sale online

Cloud development platform confirms theft of “non-sensitive data” and says customers were already notified.

The Weird, Twisting Tale of How China Spied on Alysa Liu and Her Dad

Years before the figure skater became an Olympic superstar, a Chinese operative tried to stalk her father and monitored other US residents deemed dissidents against China. And that’s just the beginning.

Cloud development platform Vercel was hacked
Cloud development platform Vercel was hacked

Vercel, a major development platform that hosts and deploys web apps, was compromised, and the hackers are attempting to sell stolen data. A person claiming to be a member of ShinyHunters, which was behind the recent hack of Rockstar Games, posted some data online, including employee names, email addresses, and activity time stamps. Vercel confirmed […]

Palantir posts mini-manifesto denouncing inclusivity and ‘regressive’ cultures

Palantir’s ideological bent has come under more scrutiny as it’s worked with ICE and positioned itself as a defender of “the West.”

‘Update immediately’: 60,000 WordPress websites at risk after experts discover flaw that allows hackers to create hidden admin accounts

A critical WordPress plugin flaw allows attackers to bypass authentication and gain full administrative control, exposing websites to data theft and malware attacks.
…

It Takes 2 Minutes to Hack the EU’s New Age-Verification App

Plus: Major data breaches at a gym chain and hotel giant, a disruptive DDoS attack against Bluesky, dubious ICE hires, and more.

Man who hacked US Supreme Court filing system sentenced to probation

Nicholas Moore hacked into three U.S. government networks using stolen credentials, and then bragged about it and posted victims’ personal data on Instagram under the handle @ihackedthegovernment.

Hackers are abusing unpatched Windows security flaws to hack into organizations

A security researcher published details of three security vulnerabilities in Windows Defender, and the code used to exploit them. Now, hackers are taking advantage of the vulnerabilities in real-life attacks, according to a cybersecurity firm.