Cybersecurity News: Latest Updates on Threats and Trends

Cybersecurity is constantly evolving to keep pace with new threats. Our cybersecurity news roundup brings you the latest on malware, ransomware, data breaches, and emerging cybersecurity trends. Learn how these updates impact businesses, governments, and individuals alike, and gain insights into best practices for protecting your digital assets. Stay one step ahead with essential information to keep your data safe and your systems secure.

Oracle Data Breach Allegations 2025

Oracle Denies Shocking Data Breach Claims: Hacker Alleges Theft of 6 Million Records

Ravi Jain
A hacker known as "rose87168" is claiming to have breached Oracle Cloud, alleging the theft of six million sensitive records and offering this data for sale. Oracle has strongly refuted these claims, asserting that their cloud services were not compromised and no customer data was lost. Despite Oracle's denial, cybersecurity experts are advising users to take precautionary measures like monitoring access logs and rotating credentials. The alleged breach purportedly exploited a vulnerability in a software package used by Oracle, with the hacker claiming to have provided proof of access. The cybersecurity community is currently divided on the validity of these claims. Technijian, a cybersecurity firm, recommends proactive security measures for Oracle Cloud users, regardless of the breach's confirmation. ... Read More
California Cryobank Data Breach

California Cryobank Confirms Data Breach: Sensitive Information Potentially Compromised

Ravi Jain
California Cryobank (CCB) has confirmed a data breach in March 2025 impacting an unknown number of U.S. residents. The breach, detected in April 2024, potentially compromised sensitive personal and financial data, including Social Security numbers and financial account details, raising concerns about biometric data exposure. CCB is offering affected individuals one year of free credit monitoring. Law firms are investigating potential class action lawsuits due to concerns of negligence in data security. Individuals are advised to take steps to protect themselves, such as enrolling in credit monitoring and freezing their credit. The article also includes a cybersecurity company, Technijian, promoting its services in light of the breach. ... Read More
GitHub Supply Chain Attack: CI/CD Secrets Exposed

GitHub Supply Chain Attack Exposes 23,000 Repositories – What You Need to Know

Ravi Jain
A significant supply chain attack on GitHub compromised approximately 23,000 repositories by exploiting a popular GitHub Action. The attackers tampered with the tj-actions/changed-files Action to steal sensitive CI/CD secrets from build logs. This incident underscores the growing threats to open-source security, necessitating immediate action from developers to rotate secrets and adopt more secure practices. The article details the attack's timeline, impact, and crucial steps for users to secure their GitHub repositories and CI/CD pipelines, emphasizing the shared responsibility in maintaining a secure development ecosystem. ... Read More
Website hacking attack

35,000+ Websites Hacked in Massive Cyberattack – Users Redirected to Chinese Gambling Sites!

Ravi Jain
A widespread cyberattack compromised over 35,000 websites by injecting malicious scripts that redirect visitors to Chinese gambling platforms. This attack, discovered in February 2025, injects code that takes over the entire browser window, often targeting users in Mandarin-speaking regions. Security researchers believe this campaign might be connected to the Megalayer exploit, known for distributing Chinese-language cyber threats. The article advises website owners to audit their code, block malicious domains, monitor for unauthorized changes, implement strong security policies, and keep their software updated to prevent such attacks. The impact on website owners includes traffic loss and reputational damage, while visitors face forced redirection to gambling sites. ... Read More
SpyLend Malware

SpyLend Malware on Google Play: Indian Users at Risk of Credential Theft!

Ravi Jain
A new Android malware called SpyLend is targeting Indian users through a fake finance app on the Google Play Store. This malware steals login credentials, personal data, and financial information by exploiting permissions and monitoring the clipboard. SpyLend uses tactics like blackmail and fake loan applications to trick users into downloading malicious APKs. The malware also evades detection using WebView API and a custom Command & Control server to harvest user credentials. Enterprises and users are advised to follow cybersecurity measures such as avoiding unknown apps, checking permissions, and using anti-malware tools to stay safe. ... Read More