CyberInsider

Three suspected Russian cyber-espionage clusters are abusing legitimate authentication features across WhatsApp, Google, and Microsoft to compromise academics, diplomats, defense personnel, researchers, and government-linked individuals. One cluster, tracked as UNC7005, has gone so far as to trick victims into linking WhatsApp accounts to attacker-controlled devices and recording their audio and video through fake calls. Google …

The post Russian hackers abuse WhatsApp device linking to spy on high-value targets appeared first on CyberInsider.

A Chinese-speaking cybercrime group is using AI-assisted tooling to automate attacks against vulnerable Windows and Linux web servers worldwide. Tracked as UAT-10147 by Cisco Talos, the threat group targets internet-facing servers for data theft and search engine optimization (SEO) fraud, combining publicly available exploits, offensive security frameworks, custom malware, and increasingly sophisticated AI-generated attack workflows. …

The post Chinese hackers use AI to automate attacks on 170,000 servers appeared first on CyberInsider.

Apple American Group LLC, a major Applebee’s franchise operator in the United States, has disclosed a data breach incident. The event has reportedly exposed sensitive personal information, including Social Security numbers, financial data, health records, and biometric information. The total number of affected people remains unclear, but state filings indicate that at least 8,447 people …

The post Largest Applebee’s franchisee says hackers stole sensitive data appeared first on CyberInsider.

US agencies are warning that threat actors are actively using AI-generated exploitation scripts to target Siemens S7 programmable logic controllers (PLCs) deployed across critical infrastructure. The activity focuses on Internet-exposed and poorly secured industrial systems, with attackers using AI to accelerate the development of tools that can interact directly with PLC memory, configuration data, and …

The post AI-powered cyberattacks are targeting critical infrastructure in the US appeared first on CyberInsider.

Socket researchers have uncovered a network of 77 Firefox extensions tied to cryptocurrency wallet theft, credential harvesting, and deceptive software distribution. Of those, 40 were confirmed malicious, while another 37 disguised sports-score applications as unrelated browser utilities and appear connected to the same broader publishing operation. Socket’s Threat Research team linked the extensions through shared …

The post 40 malicious Firefox extensions caught stealing crypto wallet data appeared first on CyberInsider.

A large-scale malware operation dubbed StopAndProtect uses thousands of compromised WordPress websites to distribute malware, issue commands, and store data stolen from infected computers. The campaign combines ransomware, credential theft, surveillance, lateral movement, and hands-on data collection, with logs revealing more than 6,000 unique IP addresses linked to infections. The operation was discovered by Check …

The post 2,000 WordPress sites hijacked by StopAndProtect malware operation appeared first on CyberInsider.

Mozilla has released Firefox 154 with expanded protections against websites connecting to devices on local networks, new AI-assisted tab organization, and support for NVIDIA GeForce NOW on Windows. The latest update also addresses 58 CVE entries, including multiple high-severity memory safety, sandbox escape, and privilege-escalation vulnerabilities. Local network protections expand to WebSockets One of the …

The post Firefox 154 blocks silent WebSocket access to local network devices appeared first on CyberInsider.

European standards body ETSI has begun the approval process for a new cybersecurity standard for VPN products, part of a wider package of 17 standards designed to support the EU Cyber Resilience Act (CRA). The VPN standard, EN 304 620, introduces defined technical and privacy requirements that could eventually give VPN vendors a recognized way …

The post Europe is creating a common security standard for VPN services appeared first on CyberInsider.

Microsoft Defender users are reporting widespread scan failures after a recent security intelligence update, with Quick and Full scans crashing the antivirus engine and Offline scans reportedly freezing near completion. Reports from system administrators, home users, and Microsoft’s support forum indicate the issue is tied to recent Defender updates rather than malware compromising affected PCs. …

The post Bad Microsoft Defender update causes Windows crashes on scans appeared first on CyberInsider.

OpenAI has temporarily slowed the development and scaling of its frontier AI models after determining that its existing monitoring, alignment, and security measures needed to be strengthened as models become increasingly capable of conducting cybersecurity tasks. The company said it deliberately reduced the pace of scaling while it worked to ensure that its safeguards could …

The post OpenAI slows model development over concerns about cyber capabilities appeared first on CyberInsider.