#cybersecurity

New FTC data and recruiter guidance point to a sharp rise in fraudulent job offers, with scammers exploiting remote-work expectations and desperate applicants.

Meta has paused work with data vendor Mercor after a security incident, while other AI labs assess whether proprietary training-data workflows were exposed.

The telehealth company says hackers accessed a third-party ticketing system in February and stole customer support data, highlighting the growing risk around outsourced service platforms.

Security researchers told 404 Media that TeleGuard uploads users’ private keys to company servers and exposes enough information to make message decryption trivial, raising serious doubts about its end-to-end encryption.

A report cited by 9to5Mac says Meta has alerted about 200 users who downloaded a spyware-laced fake version of WhatsApp, underscoring how mobile impersonation attacks keep slipping past user trust.

European defense firms have tested a drone platform described as quantum-safe, an early sign that post-quantum security is starting to enter real-world unmanned systems development.

Decentralized finance platform Drift froze deposits and withdrawals after confirming an active attack, while outside security firms estimated losses ranging from roughly $136 million to $285 million.

Hasbro disclosed a cyberattack detected on March 28, warning investors that interim business continuity measures may need to remain in place for several weeks.

AI recruiting startup Mercor says it was among the companies affected by a compromise of the open-source LiteLLM project, confirming a security incident as extortion actors also claimed to hold stolen company data.

CareCloud disclosed that hackers accessed one of its patient-record repositories for more than eight hours in March, underscoring the continued vulnerability of health data infrastructure.

The Federal Communications Commission has halted all new equipment authorizations for routers not manufactured in the United States, a sweeping national security measure that leaves existing approved devices in legal limbo — and raises hard questions about who will fill the supply gap.

The FCC has ruled that virtually all consumer wireless routers sold in the US must be domestically manufactured, effectively banning popular foreign brands from retail shelves. Existing devices remain legal to use, but the supply chain shock will reshape home networking.

The US Space Force has established dedicated cyber defense squadrons at Cape Canaveral and Vandenberg to protect launch operations from malicious hacking, as adversaries increasingly target the digital infrastructure supporting US space missions.

A cyberattack on Des Moines-based Intoxalock left thousands of drivers who rely on breath-test ignition locks unable to start their vehicles across the country, exposing the fragility of cloud-connected compliance hardware.

Shardul Shah of Index Ventures breaks down Google's record $32 billion acquisition of cybersecurity firm Wiz and what it reveals about the future of cloud security competition.

Security flaws found in consumer robots — including hardcoded keys in the Unitree G1 humanoid — expose a fundamental vulnerability in physical AI that could prove far more dangerous in industrial settings.

Security researchers discover 151 malicious packages using invisible Unicode characters to hide payloads from code review tools and terminal displays.

A peer-to-peer botnet dubbed KadNap has infected 14,000 routers, mostly Asus devices in the US, using a Kademlia-based design that resists shutdowns.

A Department of Government Efficiency staffer reportedly copied sensitive Social Security records to a personal USB drive, raising alarm over data security practices.

Google traced an iPhone-hacking toolkit used by Russian espionage to a U.S. defense contractor, raising proliferation concerns.