OnTrac Hit by Cyberattack: Customer Personal Data Exposed, Ransom Payment Suspected
OnTrac suffered a cyberattack exposing customer personal data. Suspicions of a ransom payment arise as the company claims it re-secured the stolen files.
CyberWorldOps
Latest news
More news
Page 90 / 91 · 822 articles
Hermes AI Agent in YOLO Mode Automates Attack on Thai Ministry of Finance
An AI agent named Hermes in YOLO mode automated a cyberattack on the Thai Ministry of Finance, using custom tools and exposing internal vulnerabilities.
Hotel Trap: Wi‑Fi Gateway Attacks to Steal Microsoft 365 Accounts
Discover how cybercriminals compromise hotel Wi-Fi gateways via DNS hijacking to steal Microsoft 365 credentials and bypass MFA using OAuth tokens.
BlueNoroff Orchestrates Attacks via Fake Video Conferences: AI Deepfakes and Wallet Theft in the Crosshairs
BlueNoroff uses fake video conferences, AI deepfakes, and ClickFix malware to steal cryptocurrency wallets via compromised Telegram accounts.
The OTP Deception on Snapchat: Anatomy of an Attack That Compromised Over 750 Accounts
Learn how a massive Snapchat phishing attack compromised 750+ accounts by bypassing OTP 2FA via vishing, and discover how to protect your account from hackers.
"The Com": Dismantled – The Nihilist Network Targeting Minors and Businesses
Europol dismantled "The Com", a nihilist network targeting minors with CSAM and businesses with ransomware in a major transnational EU operation.
Chick-fil-A One: New Credential Stuffing Attack Exposes 13,322 Loyalty Accounts
A recent credential stuffing attack on the Chick-fil-A One app exposed 13,322 loyalty accounts. Discover how it happened and the company's response.
Two Critical Vulnerabilities in Bing: Command Execution as SYSTEM and Root via Malicious SVGs
On July 23, 2026, researchers from XBOW publicly disclosed technical details of two critical vulnerabilities affecting Microsoft Bing, identified as
AgentForger: When a Phishing Link Is Enough to Create a Persistent AI Insider
A CSRF flaw in ChatGPT Workspace, AgentForger, allowed a phishing link to create a persistent AI insider, risking data theft and remote command execution.