Data Breaches & Scandals

ClarityCheck promised 'private and secure' face searches—then researchers found 9 million exposed photos of kids and adults
Data Breaches & Scandals

ClarityCheck promised ‘private and secure’ face searches—then researchers found 9 million exposed photos of kids and adults

A people-search tool left 9 million unprotected face photos exposed for months. Researchers found images…

By Miora Danielle Raveloarison
41 fake download sites show you Steam, then install malware—and hovering over the link won't save you
Data Breaches & Scandals

41 fake download sites show you Steam, then install malware—and hovering over the link won’t save you

Scammers are using a deceptive technique to trick users into downloading malware. Even hovering over…

By Miora Danielle Raveloarison
Aylo pays $120 million to settle child abuse lawsuits — but the fine comes with a stunning 'no admission of liability' clause
Data Breaches & Scandals

Aylo pays $120 million to settle child abuse lawsuits — but the fine comes with a stunning ‘no admission of liability’ clause

Pornhub's parent company Aylo settles for $120M over child sexual abuse material but admits no…

By Miora Danielle Raveloarison

More News

ShinyHunters exploited Oracle PeopleSoft zero-day at 47 universities before patch existed
Data Breaches & Scandals

ShinyHunters exploited Oracle PeopleSoft zero-day at 47 universities before patch existed

Criminal group exploited unpatched Oracle flaw to breach 47 US universities, stealing student and staff data before the company released…

By Rivo Raphaël Chreçant
Splunk Enterprise's 9.8 critical flaw lets attackers run code without login — CVE-2026-20253 forces emergency patches
Data Breaches & Scandals

Splunk Enterprise’s 9.8 critical flaw lets attackers run code without login — CVE-2026-20253 forces emergency patches

A critical vulnerability in Splunk Enterprise allows unauthenticated attackers to execute arbitrary code. CVSS 9.8 rating triggers emergency patching across…

By Rivo Raphaël Chreçant
FBI and Google just dismantled Outsider Enterprise—a Chinese phishing ring operating a million weaponized URLs
Data Breaches & Scandals

FBI and Google just dismantled Outsider Enterprise—a Chinese phishing ring operating a million weaponized URLs

FBI and Google took down a Chinese phishing operation using a million URLs to steal passwords and credit cards. Here's…

By Rivo Raphaël Chreçant
Attackers hijacked 400 Arch Linux packages this week to steal developer credentials and install hidden rootkits
Data Breaches & Scandals

Attackers hijacked 400 Arch Linux packages this week to steal developer credentials and install hidden rootkits

Over 400 open-source packages were compromised to steal developer credentials and deploy invisible rootkits. What you need to know.

By Rivo Raphaël Chreçant