Experts warn 2,000 hacked WordPress sites were secretly running a global crime ring

Compromised WordPress sites have been used by a global operation, using trusted websites to deliver malware, instruct infected devices, and even store stolen documents.

Your Expired Visa Card Could Be ‘Zombified’ to Make Contactless Payments

Plus: Apple sends out an “unprecedented” number of spyware warnings, Ukraine hits a Russian ecommerce giant with cyber and drone attacks, and more.

Experts warn expired credit cards can be brought back from the dead to make contactless payments

That expired card in your drawer might not be nearly as dead as you think: researchers made one pay $100 for a grocery run.

Even dead websites aren’t safe — experts warn hackers are spending millions on expired domains to enable malware scams

Roughly 65,000 expired domains change hands every day, and researchers have found one crime group spending an estimated $7 million on them to inherit the trust that comes attached to them.

This new malware can use Google passkeys even after a victim resets their password

A newly discovered toolkit can deeply compromise Gmail, Microsoft, Apple, and LinkedIn accounts

Private equity firm Apollo confirms data breach amid hacking wave targeting financial giants

The private equity giant confirms a breach, weeks after Google researchers said hackers were targeting financial companies.

Security experts targeted by fake crypto conference in scam to hand over details

Cybersecurity pros attending conferences are being targeted with AMOS and other infostealers, experts warn.

Senator asks US government watchdog to review how feds use hacking tools

Senator Ron Wyden sent a letter to the U.S. federal watchdog requesting a comprehensive review of how the FBI, DEA, ICE’s HSI, and the Secret Service use hacking tools and spyware against Americans.

Massive supply-chain attack sees terabytes of data belonging to some of the world’s biggest and most sensitive organizations leaked online

Hackers compromised a security tool, used it to steal the publishing keys of a popular AI tool, and released a poisoned version under that tool’s real name in a far-reaching attack