Data Breaches & Scandals

ClarityCheck promised 'private and secure' face searches—then researchers found 9 million exposed photos of kids and adults
Data Breaches & Scandals

ClarityCheck promised ‘private and secure’ face searches—then researchers found 9 million exposed photos of kids and adults

A people-search tool left 9 million unprotected face photos exposed for months. Researchers found images…

By Miora Danielle Raveloarison
41 fake download sites show you Steam, then install malware—and hovering over the link won't save you
Data Breaches & Scandals

41 fake download sites show you Steam, then install malware—and hovering over the link won’t save you

Scammers are using a deceptive technique to trick users into downloading malware. Even hovering over…

By Miora Danielle Raveloarison
Aylo pays $120 million to settle child abuse lawsuits — but the fine comes with a stunning 'no admission of liability' clause
Data Breaches & Scandals

Aylo pays $120 million to settle child abuse lawsuits — but the fine comes with a stunning ‘no admission of liability’ clause

Pornhub's parent company Aylo settles for $120M over child sexual abuse material but admits no…

By Miora Danielle Raveloarison

More News

CopyFail exploit CVE-2026-31431 gives hackers instant root access to millions of Linux machines worldwide
Data Breaches & Scandals

CopyFail exploit CVE-2026-31431 gives hackers instant root access to millions of Linux machines worldwide

Critical Linux vulnerability CopyFail allows hackers instant root access to millions of PCs and servers. Patches exist but many machines…

By Rivo Raphaël Chreçant
Brazilian DDoS protection firm secretly enabled botnet attacks on rival ISPs, KrebsOnSecurity reveals
Data Breaches & Scandals

Brazilian DDoS protection firm secretly enabled botnet attacks on rival ISPs, KrebsOnSecurity reveals

A Brazilian DDoS protection company allegedly weaponized its platform to attack competitors, then blamed a breach when discovered by KrebsOnSecurity.

By Rivo Raphaël Chreçant
Bluekit phishing kit just added AI—now criminals can launch 40 targeted attacks in minutes
Data Breaches & Scandals

Bluekit phishing kit just added AI—now criminals can launch 40 targeted attacks in minutes

Criminals are weaponizing AI to automate phishing attacks. A new kit called Bluekit includes 40 templates and AI features to…

By Rivo Raphaël Chreçant
SAP npm packages just got hijacked by hackers calling themselves mini Shai-Hulud — stealing developer credentials at scale
Data Breaches & Scandals

SAP npm packages just got hijacked by hackers calling themselves mini Shai-Hulud — stealing developer credentials at scale

Five security firms expose coordinated supply chain attack on SAP npm packages. Developers' credentials stolen via malware-laced code.

By Rivo Raphaël Chreçant