January 27 Grubhub confirms data breach amid extortion claims Grubhub data breach confirmed as sources say ShinyHunters group allegedly demands Bitcoin payment to prevent release of stolen customer support data.
January 26 Malicious Google Chrome extensions hijack accounts Malicious Chrome extensions steal login data by impersonating Workday, NetSuite and SAP SuccessFactors platforms, cybersecurity researchers say.
January 25 Google Fast Pair flaw lets hackers hijack headphones Google responds to WhisperPair Fast Pair security flaws by releasing patches to manufacturers and updating certification requirements for protection.
January 22 Web skimming attacks target major payment networks Web skimming campaigns use obfuscated JavaScript code to steal credit card data from checkout pages without detection by security systems.
January 21 FBI warns QR code phishing used in North Korean cyber spying The North Korean hacking group Kimsuky is using QR code phishing to target Americans with fake questionnaires and malicious websites, the FBI warns.
January 20 Illinois DHS data breach exposes 700K residents' records Illinois residents affected by DHS breach can take protective steps, including credit freezes, identity monitoring and password management to prevent fraud.
January 19 Apple warns millions of iPhones are exposed to attack Apple iPhone security flaw affects 800 million devices as only half of users updated to iOS 26.2 to fix critical Safari and WebKit vulnerabilities.
January 16 January scams surge: Why fraud spikes at the start of the year January scams surge as criminals exploit updated personal data from brokers, targeting consumers with fake account verification and tax notices during peak financial season.
January 13 5 simple tech tips to improve digital privacy Privacy tips for iPhone and Android users reveal built-in phone settings to reduce tracking and limit data sharing without advanced technical expertise.
January 13 Teen hackers recruited through fake job ads Criminal network "The Com" uses fake job posts to recruit teens for cybercrime, with recent arrests including 19-year-old Thalha Jubair accused of $115 million attacks.