For individuals

Developer-security company Snyk acquired Helois, a startup specializing in capturing security-relevant data from live applications.

Anyone who hasn't mitigated two zero-day security bugs in Ivanti VPNs may already be compromised by a Chinese nation-state actor.

The updated disclaimer follows Google’s agreement to settle a class-action privacy lawsuit.

The vulnerability in a popular hospitality industry gadget allows attackers to take over the device, pivot into the user's network, or brick the device entirely, rendering HVAC unusable.

While most CEOs around the world noted generative artificial intelligence's potential in reinventing their businesses, 77% said that the technology could bring upon an increased likelihood of cybersecurity breaches, reports VentureBeat.

Ten threat operations were behind 44% of all cybersecurity incidents last year, with Russian state-sponsored hacking group APT28 and Cobalt Group being among the most prolific attackers, TechRadar reports.

Money laundering and illicit banking networks were reported by the United Nations Office of Drugs and Crime to have been shared by North Korean state-sponsored threat operations, including the Lazarus Group, with criminals in various countries across Southeast Asia, including Cambodia, Laos, Myanmar, and Thailand, according to Reuters.

Ukrainian police and Europol have collaborated to arrest a Ukrainian hacker involved in the compromise of a major U.S. cloud service provider with cryptocurrency mining malware that enabled the theft of more than $2 million worth of cryptocurrency since 2021, reports The Record, a news site by cybersecurity firm Recorded Future.

BleepingComputer reports that phishing attacks involving fraudulent antivirus subscription renewal emails have facilitated the theft of $34,000.