CyberInsider

Apple American Group LLC, a major Applebee’s franchise operator in the United States, has disclosed a data breach incident. The event has reportedly exposed sensitive personal information, including Social Security numbers, financial data, health records, and biometric information. The total number of affected people remains unclear, but state filings indicate that at least 8...

US agencies are warning that threat actors are actively using AI-generated exploitation scripts to target Siemens S7 programmable logic controllers (PLCs) deployed across critical infrastructure. The activity focuses on Internet-exposed and poorly secured industrial systems, with attackers using AI to accelerate the development of tools that can interact directly with PLC mem...

Socket researchers have uncovered a network of 77 Firefox extensions tied to cryptocurrency wallet theft, credential harvesting, and deceptive software distribution. Of those, 40 were confirmed malicious, while another 37 disguised sports-score applications as unrelated browser utilities and appear connected to the same broader publishing operation. Socket’s Threat Research t...

A large-scale malware operation dubbed StopAndProtect uses thousands of compromised WordPress websites to distribute malware, issue commands, and store data stolen from infected computers. The campaign combines ransomware, credential theft, surveillance, lateral movement, and hands-on data collection, with logs revealing more than 6,000 unique IP addresses linked to infection...

Mozilla has released Firefox 154 with expanded protections against websites connecting to devices on local networks, new AI-assisted tab organization, and support for NVIDIA GeForce NOW on Windows. The latest update also addresses 58 CVE entries, including multiple high-severity memory safety, sandbox escape, and privilege-escalation vulnerabilities. Local network protections...