Exploiting vulnerabilities in Johnson & Johnson web apps.

New GhostShell Hacking Group Targets Ukraine’s Drone Defense Sector.

Mozilla proposes privacy-preserving alternative to CAPTCHAs.

Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks.

FortiBleed campaign steals 110M credentials from FortiGate targets.

Japan’s army used USB drives with Chinese malware for a year.

New Mistic Backdoor Linked to KongTuke in ClickFix and ModeloRAT Campaigns.

Elite network says it was hacked after members’ personal data was left exposed.

Apple has removed VK, Russia's largest social media platform, and 15 other apps from the App Store, citing compliance with sanctions.

VK, which is backed by state-linked entities, said it received no prior warning and claimed it is not under sanctions.

Kremlin spokesperson Dmitry Peskov criticized the decision, suggesting users switch to Android.

$3 Million Reportedly Stolen in Polymarket Hack.

First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild.

Sports piracy ring linked to PirloTV disrupted in 44-domain takedown.

CL-STA-1062 Targets Southeast Asian Governments and Critical Infrastructure.

Poland busts SIM-swapping gang tied to millions in crypto theft.

China's 360 Security Technology unveils AI models for vulnerability discovery.

WhatsApp is now warning users attempting to message unknown numbers.

Bluekit phishing kit adopts browser-in-the-middle for login theft.

New macOS malware embeds fake errors to confuse AI analysis tools.

Suspected Cyberattack Sends Fake Emergency Alert to Phones Across Brazil.

Shopify Shop app users are seeing fake orders in purchase histories.

Alleged Robinhood Breach Exposes 14.5 Million User Records on Darkweb.