Osaka Metropolitan University cancels classes after suspected ransomware attack
A suspected ransomware attack knocked out around 500 servers at one of Japan's largest universities and may have exposed data on at least 130,000 people.
Latest News — Page 3
Pwn2Own Ireland day one: Galaxy S26, OpenAI Codex and LiteLLM hacked
Researchers earned $419,500 on the first day of Pwn2Own Ireland 2026 in Dublin, with 15 successful attempts against phones, printers, smart home devices and AI tools.
WordPress 7.1.3 fixes seven security flaws, including XSS and SQL injection bugs
The WordPress project released version 7.1.3 on October 6 with seven security fixes and four bug fixes, urging site owners to update immediately.
Hackers exploit Ninja Forms and WooCommerce plugin XSS flaws to plant hidden WordPress admins
Patchstack says a single campaign is abusing stored XSS bugs in Ninja Forms and WPC Product Bundles to create admin accounts, a magic login link and a file manager backdoor.
ASOS confirms data breach after hackers push 'HACKED' alert through its app
UK fashion retailer ASOS confirmed customers' names and contact details may have been exposed after attackers used its app to send an extortion message.
Fake ChatGPT and Gemini sites hijack ad accounts with live browser-in-the-browser phishing
Island researchers found fake AI product sites that lure advertising staff into a fake Google sign-in window, where a human operator harvests passwords and MFA codes in real time.
LibreOffice fixes spreadsheet flaw that runs code with no macro warning; OpenOffice waits
LibreOffice 26.2.5 and 26.8.0 close a flaw that lets a crafted spreadsheet load a remote Java database driver and execute code silently. Apache OpenOffice has no fix yet.
Perforce patches CVSS 10 flaw that leaves P4 Search containers on a documented default token
Perforce has fixed six flaws in P4 Search, including a maximum-severity authentication bypass that hands unauthenticated attackers the highest privilege on the service.
Alleged Ploutus ATM malware developer appears in US court after arrest
A Venezuelan man added to the FBI's most wanted list in March has appeared before a Nebraska court over an ATM jackpotting campaign that drained more than $5.4 million.
FBI removes Accenture contractor after unapplied patch led to ShinyHunters breach
The FBI says the breach that exposed data on thousands of its employees happened because a third-party contractor never applied a security patch that had already been issued.
Booba ransomware gang claims 344 GB from University of Illinois Chicago medical school
UIC says College of Medicine systems were briefly disrupted and data was stolen in a ransomware attack. The Booba gang, which researchers link to a Frag rebrand, claimed the intrusion.
MediaTek's October bulletin fixes 43 flaws, including two critical modem memory bugs
MediaTek's monthly security bulletin lists two critical out-of-bounds write flaws in modem firmware affecting more than 50 chipsets, alongside nine high-severity issues in video, AI and modem components.