CyberSecurity News

Nikki-Universal Co. Ltd., a leading chemical manufacturer, suffered a ransomware attack on December 22, 2024, resulting in the encryption of its data and the exfiltration of 761.8 GB of sensitive files.

The rapid growth of mobile applications has created opportunities for threat actors to exploit users, as seen in the emergence of FireScam malware targeting Android devices, cybersecurity researchers at Cyfirma report.

Richmond University Medical Center in Staten Island, New York, confirmed that a ransomware attack in May 2023 led to a data breach affecting over 670,000 individuals.

SquareX, a pioneer in Browser Detection and Response (BDR) solutions, has issued a warning about OAuth-based phishing attacks targeting Chrome extension developers, exposing users to session hijacking and data theft.

Cybercriminals who hacked Rhode Island’s RIBridges system, which supports health and benefits programs, have released stolen data on the dark web, prompting the state to encourage residents to protect their personal information.

A new cyberattack technique called “DoubleClickjacking” has been discovered, posing significant risks to internet security by bypassing traditional clickjacking protections.

Chinese hackers accessed U.S. Treasury Department workstations and unclassified documents after exploiting a vulnerability in a cloud-based service operated by BeyondTrust, which supports technical operations for the department.

Volkswagen inadvertently exposed personal information of 800,000 electric vehicle owners, including sensitive GPS data, due to a system misconfiguration in its software subsidiary Cariad.

FortiGuard Labs has observed an increase in activity from two botnets, FICORA and CAPSAICIN, during late 2024.

General Dynamics disclosed that a phishing campaign successfully targeted its personnel, compromising 37 employee benefits accounts.

Japan Airlines (JAL) experienced a cyberattack on Thursday that caused delays to 24 domestic flights but posed no threat to flight safety.

American Addiction Centers (AAC) has disclosed a data breach that compromised the personal information of 422,424 individuals.