Data Breaches & Scandals

Amazon's Customer Support Trapped Identity Theft Victims in a Kafkaesque Nightmare — FTC just fined them $2.25 million
Data Breaches & Scandals

Amazon’s Customer Support Trapped Identity Theft Victims in a Kafkaesque Nightmare — FTC just fined them $2.25 million

Amazon refused to help identity theft victims access fraud records, violating federal law. The FTC…

By Rivo Raphaël Chreçant
Signal's Backup Recovery Key Just Became Russia's Master Skeleton Key—FBI Issues Urgent June Warning
Data Breaches & Scandals

Signal’s Backup Recovery Key Just Became Russia’s Master Skeleton Key—FBI Issues Urgent June Warning

FBI warns Russian intelligence hackers now steal Signal backup recovery keys to permanently access private…

By Rivo Raphaël Chreçant
Chrome's Featured Adblock for YouTube Extension Harbors Hidden Code Injection Capability—10M Users at Risk
Data Breaches & Scandals

Chrome’s Featured Adblock for YouTube Extension Harbors Hidden Code Injection Capability—10M Users at Risk

A Chrome extension with 10M+ installs and a Featured badge was found capable of executing…

By Rivo Raphaël Chreçant

More News

DOJ seizes CFAKE and SOCFAKE in first deepfake porn crackdown under TAKE IT DOWN Act
Data Breaches & Scandals

DOJ seizes CFAKE and SOCFAKE in first deepfake porn crackdown under TAKE IT DOWN Act

The DOJ shut down two major deepfake porn sites in the first enforcement action under the TAKE IT DOWN Act,…

By Rivo Raphaël Chreçant
ShinyHunters exploited Oracle PeopleSoft zero-day at 47 universities before patch existed
Data Breaches & Scandals

ShinyHunters exploited Oracle PeopleSoft zero-day at 47 universities before patch existed

Criminal group exploited unpatched Oracle flaw to breach 47 US universities, stealing student and staff data before the company released…

By Rivo Raphaël Chreçant
Splunk Enterprise's 9.8 critical flaw lets attackers run code without login — CVE-2026-20253 forces emergency patches
Data Breaches & Scandals

Splunk Enterprise’s 9.8 critical flaw lets attackers run code without login — CVE-2026-20253 forces emergency patches

A critical vulnerability in Splunk Enterprise allows unauthenticated attackers to execute arbitrary code. CVSS 9.8 rating triggers emergency patching across…

By Rivo Raphaël Chreçant
FBI and Google just dismantled Outsider Enterprise—a Chinese phishing ring operating a million weaponized URLs
Data Breaches & Scandals

FBI and Google just dismantled Outsider Enterprise—a Chinese phishing ring operating a million weaponized URLs

FBI and Google took down a Chinese phishing operation using a million URLs to steal passwords and credit cards. Here's…

By Rivo Raphaël Chreçant