OpenAI’s ChatGPT Atlas browser is facing significant cybersecurity vulnerabilities, as highlighted by the firm NeuralTrust. Researchers discovered that attackers could exploit the browser’s dual functionality—navigating websites and accepting AI commands—by crafting deceptive URLs that bypass safety protocols, enabling harmful actions like phishing or unauthorized data access. Notably, Atlas stores OAuth tokens unencrypted, further compromising user security. In response, OpenAI acknowledged these challenges and is enhancing its defenses against prompt-injection attacks, advising users to enable logged-out …

Tata Consultancy Services (TCS) has refuted claims made by UK media regarding the termination of its $1 billion contract with Marks & Spencer (M&S) due to a cyberattack. TCS clarified that the decision to end the service desk contract was part of a routine competitive tender process initiated well before the cyber incident occurred in April 2025, emphasizing that the matters were unrelated. M&S, which faced significant operational disruptions and financial losses estimated at around …

Twitter (X) is implementing mandatory re-enrollment for users employing hardware security keys for two-factor authentication by November 10, 2025, as part of a strategy to enhance online security amid growing cyber threats. Additionally, Tata Consultancy Services (TCS) has denied accusations from UK retailer Marks & Spencer (M&S) regarding responsibility for a significant cyber attack that led to M&S terminating a $1 billion contract, asserting that such claims are unfounded and predate the breach. This incident …

During the Pwn2Own Ireland 2025 hacking competition, cybersecurity researchers from Team Z3 opted to privately report a zero-click remote code execution vulnerability in WhatsApp to Meta, foregoing a potential $1 million public demonstration payout. This decision, aligned with ethical hacking standards, emphasizes user safety over public spectacle, as zero-click vulnerabilities pose significant risks due to their undetectable nature. Meta, the parent company of WhatsApp, has committed to addressing this critical flaw swiftly, leveraging a coordinated …

The Department of Telecommunications (DoT) recently hosted a webinar to mark National Cyber Security Awareness Month, focusing on enhancing cyber resilience within the telecom sector. Attended by approximately 250 professionals, the event highlighted the critical role of collaborative efforts in ensuring cyber safety. Experts discussed the alarming prevalence of phishing attacks, accounting for 90% of global cyber breaches, and emphasized the importance of robust Governance, Risk, and Compliance frameworks. The commissioning of the Telecom-CSIRT setup …

The Water Saci campaign has showcased an alarming evolution in cyber threats, particularly in Latin America, where attackers have transitioned from traditional phishing tactics to sophisticated malware propagation via WhatsApp Web. As of October 2025, the campaign employs advanced script-based techniques, including self-propagation through hijacked WhatsApp sessions and dynamic credential theft via fake banking overlays. This shift reflects a broader trend in cybercrime, where attackers exploit popular communication platforms to enhance stealth and effectiveness. The …

The Russian cyber espionage group COLDRIVER, also known as Star Blizzard, has adopted a new attack method called ClickFix, as revealed by the Zscaler ThreatLabz team. This development introduces two malware families, BAITSWITCH and SIMPLEFIX, allowing the group to conduct highly targeted cyber attacks against individuals within strategically important organizations, such as NGOs and think tanks. By employing selective malware dissemination based on user characteristics, COLDRIVER enhances the sophistication of its operations. This evolution in …

A significant data breach has exposed approximately 183 million email accounts, predominantly Gmail, due to infostealer malware rather than a direct compromise of Google’s servers. The dataset, identified by Have I Been Pwned and compiled by Synthient LLC, contains plaintext email-password combinations harvested from malware-infected personal devices. Experts caution that this malware can capture more than login credentials, potentially allowing hackers to bypass two-factor authentication. Users are advised to utilize Google’s Security Checkup, enable two-step …

The World Uyghur Congress has called upon major European insurers to reassess their ties with Chinese firms Hikvision and Dahua, citing substantial evidence of human rights violations and cybersecurity risks linked to their technologies. This appeal follows allegations that their surveillance systems have facilitated ethnic monitoring of Uyghurs, recognized as crimes against humanity, and have been used to compromise military operations during conflicts, such as in Ukraine. The organization urges internal audits and a reevaluation …

Russian air defense systems engaged in a significant operation to repel a series of drone attacks targeting Moscow, resulting in the closure of two major airports—Domodedovo and Zhukovsky. Over five hours, authorities reported that 28 drones were intercepted, emphasizing the ongoing threat posed by Ukraine’s military actions, which aim to disrupt Russian infrastructure critical to its military efforts. While no immediate details on damage were disclosed, the incident highlights the escalating conflict and Ukraine’s strategy …

The Department of Telecommunications (DoT) has introduced amended cybersecurity rules to combat the rising incidence of cyber frauds, including phishing. This includes the establishment of a mobile number validation (MNV) platform, which will enable banks, financial institutions, and other entities to verify KYC details directly with telecom providers. While some stakeholders express concerns about privacy implications and the broad scope of the rules, officials assert that the regulations primarily target telecom operators, allowing other industries …

A recent Asia Pacific eCrime report by CrowdStrike highlights the escalating threat of AI-driven cybercrime in India, warning that the country could jeopardize its $5 trillion economic aspirations if cybersecurity measures are not strengthened. India accounted for a significant percentage of ransomware victims, with 35% targeted by FunkLocker and 32% by KillSec, raising alarms about inadequate defenses among corporations. The report underscores a rapid evolution in cybercriminal tactics, particularly with a 442% rise in voice-based …