Browsing: Cyber Incidents

Google has released an out-of-band (emergency) security update for its Chrome browser after confirming that a previously unknown vulnerability was actively exploited by attackers in the wild. The flaw is classified as a zero-day, meaning it was abused before a fix was publicly available, placing users at immediate risk. The vulnerability affects Chrome’s internal handling of web content and could allow a remote attacker to compromise the browser simply by tricking a user into visiting a specially crafted website. In practical terms, successful exploitation may enable unauthorized code execution within the browser process, potentially leading to data theft, session hijacking,…

An Australian regional food co-operative has been named by a ransomware group in connection with an alleged cyber incident, according to recent reporting from cybersecurity monitoring sources. The Qilin ransomware group has listed Mount Barker Co‑operative on its darknet leak site, claiming it gained unauthorised access to the organisation’s systems and copied internal data. The group alleges that approximately 40 GB of data, consisting of tens of thousands of files, was obtained. At the time of reporting, these claims have not been independently verified. No publicly available evidence has been released to confirm the nature or extent of any data…

A school district in the United States has confirmed a cyber theft of approximately $461,000, after attackers gained unauthorized access to financial systems linked to a capital improvement fund. The incident was disclosed by officials of the Cambridge Central School District, triggering a multi-agency investigation. According to district administrators, the fraud was detected when irregular financial transactions were identified during routine reviews. Preliminary findings suggest that cybercriminals used financial deception techniques, commonly associated with business email compromise (BEC) schemes, to divert funds without triggering immediate alerts. Local authorities and federal agencies, including law enforcement cyber units, are now involved in…

As Valentine’s Day approaches, Indian cybercrime authorities have issued a high alert warning citizens about a sharp rise in online fraud and digital scams. Law enforcement agencies report that cybercriminals actively exploit this period by targeting users through romance scams, fake gift offers, phishing links, and UPI-based frauds. According to media reports, including coverage by Times of India, cybercrime complaints tend to spike significantly in the days leading up to February 14, making this one of the most vulnerable periods of the year for online users. Types of Scams Reported Ahead of Valentine’s Day Cybersecurity officials and investigators have identified…

Russia has effectively blocked WhatsApp across the country and stepped up regulatory and technical pressure on Telegram, signaling a sharper turn in its approach to encrypted communication platforms. The move has disrupted everyday messaging for millions and raised broader concerns about digital access, privacy, and cybersecurity. Reports from users across multiple regions indicate that WhatsApp services stopped functioning normally, with messages failing to send or receive. The disruption followed regulatory actions that removed the platform from Russia’s approved digital services ecosystem. While officials have avoided calling it a formal ban, network-level blocking has made the app largely unusable without technical…

North Korea–linked operators are actively using LinkedIn as a recruitment and access channel to infiltrate private companies worldwide. Instead of fake-looking profiles, these actors rely on real or convincingly impersonated professional identities, complete with verified work histories, endorsements, and long-term activity to build credibility. Their approach is patient and deliberate. They connect as software engineers, security researchers, or contractors, apply for remote roles, and gradually earn trust through technical discussions and collaboration offers. Once engaged, they aim to secure legitimate access to corporate systems such as internal repositories, cloud environments, VPNs, or development platforms. Investigations show that this is not…

Brussels, Europe —The European Commission has confirmed a cybersecurity incident involving its Mobile Device Management (MDM) system, resulting in the exposure of limited internal staff data. The breach has raised concerns about the security of enterprise mobility platforms used by large government institutions. What Happened According to official disclosures, unauthorized access was detected in a system used to manage and secure mobile devices issued to European Commission personnel. MDM platforms typically control device configurations, security policies, and access permissions for smartphones and tablets used for official work. Investigations revealed that certain staff-related information stored within the MDM environment was accessed…

A high-value cyber investment fraud has come to light in Aligarh, Uttar Pradesh, after a retired senior banker was cheated of over ₹1.10 crore in a fake stock market investment scheme that has now prompted police action across multiple states. The victim, Dinesh Kumar Sharma, a retired Deputy General Manager from Punjab National Bank, was approached in early November via a WhatsApp message urging him to invest in stocks promising unusually high returns. The link led him to what appeared to be a legitimate investment portal, and the fraudsters used persuasive messaging and fabricated profits to convince him to transfer…

A ransomware attack has disrupted operations at BridgePay Network Solutions, a U.S.-based payment processing platform used by merchants, local governments, and service providers across the country. The incident caused a widespread outage, preventing businesses from processing card payments and accessing key transaction systems. The disruption began when multiple BridgePay services suddenly went offline, including payment gateways, hosted checkout pages, reporting dashboards, and merchant management portals. As the outage continued, the company confirmed that the cause was a cybersecurity incident involving ransomware. According to BridgePay, the attack resulted in system encryption, not a routine technical failure. The company stated that it…

In recent days, multiple websites, social media posts, and shared links have claimed to provide access to so-called “Epstein Files” or “Epstein Emails.” Some of these claims specifically reference domains such as email.epstein, presenting them as official or government-released sources. These claims are false and unverified. From a cybersecurity and information-integrity perspective, the spread of such links represents a growing risk, as trending global topics are increasingly used to distribute misinformation, phishing content, and malicious files. What Is Actually Verified All legitimate information related to the case involving Jeffrey Epstein exists only through formal legal and government channels. There has…