Polymarket says hackers stole users’ funds

The prediction market giant Polymarket said it’s refunding users who had funds stolen due to a third-party breach.

A new unpatchable flaw in Apple chips opens the door to an iPhone jailbreak 

European offensive cybersecurity company Paradigm Shift released details of a flaw and a technique to exploit it that opens the door for hackers to unlock and break into older iPhones.

Hackers leak facial recognition records tied to millions of Madison Square Garden visitors

A cybercriminal group has published what it claims are millions of records stolen from Madison Square Garden Entertainment. The leak is drawing attention not just because of its size, but because it includes facial recognition data, internal threat ass…

Cybercriminals allegedly hacked tens of thousands of Fortinet firewalls used by major companies all over the world

An alleged Russian-speaking group of cybercriminals is reportedly compromising and targeting several major companies that use Fortinet Firewalls and VPNs through previously known passwords.

Oracle warns of security bug that hackers abused to breach 100+ companies

The tech giant warned of a security flaw that a cybercrime gang said it’s exploiting as part of a mass-hacking campaign. Google said it notified more than 100 organizations that had potentially vulnerable servers.

Cybercriminals claim breach of Oracle PeopleSoft servers at 100-plus organizations

The ShinyHunters hacking gang claims to have compromised the Oracle PeopleSoft servers of more than 100 organizations, including many universities.

WhatsApp says it caught new spyware attacks linked to NSO Group in violation of court order

The messaging giant announced that it disrupted a phishing campaign targeting its users with NSO’s spyware.

Former cyber executive turned whistleblower accuses IBM of covering up several data breaches

IBM and two of its subsidiary companies were allegedly breached during the mid-2010s, which a lawsuit filed by a former cybersecurity executive accuses IBM of not disclosing and actively covering up.

Google and FBI warn of ransomware group that sends fake IT workers to hack victims in person

Cybercriminals, part of a gang known as Silent Ransom Group, have sent people pretending to be IT support employees to law firms’ offices, where the criminals have stolen data using USB drives or remote access tools.

Instagram is alerting users who were targeted by hackers during AI chatbot attacks

Hackers appeared to take over victims’ accounts even after Meta said it fixed its AI-powered support chatbot, which granted hackers access to victims’ accounts.