News
RSS feedZheng Zhao was arraigned in California on a money laundering conspiracy charge tied to a scam network that defrauded 174 US victims of more than $36.9 million.
Microsoft says a China-linked actor used an agentic AI pentest tool and stolen ConnectWise application credentials to target over 2,250 Microsoft 365 tenants.
A joint US, German and UK advisory says the SafePay ransomware group has compromised at least 600 critical infrastructure victims since August 2024.
Attackers accessed Burger King Japan's membership system in early October, exposing names, emails and phone numbers of about 11.18 million app users.
The UK has frozen the assets of crypto payment processor Cryptomus and listed related payment firms, citing support for the Russian government.
Microsoft's Digital Crimes Unit and partners disrupted YAM Store and three phishing kits blamed for over one billion lures aimed at 75,000 organizations.
US prosecutors unsealed an indictment against 14 people accused of helping North Korean workers get remote IT jobs through US-based laptop farms.
The FBI seized seven domains supporting hacking tools tied to the China-linked Flax Typhoon group, as CISA set a short patch deadline for federal agencies.
German authorities took custody of a Russian national suspected of being a senior Qilin ransomware operative following his extradition from Japan.
A suspect tied to the ShinyHunters extortion collective was detained in Jordan and is reportedly helping the FBI identify other members.
A China-based ransomware group is exploiting Microsoft SharePoint flaws to hit water, telecom and government networks across Latin America and Iberia.
International police seized KillSec's leak site and servers and arrested a 16-year-old alleged ringleader plus two other suspected members.
Cameron Wagenius, known online as 'Kiberphant0m,' was sentenced for stealing call records from over 100 million AT&T customers and extorting telecom firms.
A court-authorized takedown disrupted the EvilTokens device-code phishing platform, which used AI throughout its attack chain against organizations worldwide.
Cryptocurrency exchange Bitget says attackers linked to North Korea's TraderTraitor group breached backend wallet infrastructure to steal hundreds of millions in crypto.
Gyazo, a widely used screenshot-sharing platform, took its service offline after attackers exploited a server flaw to steal tens of millions of records.
US authorities took down the NightmareStresser booter service, used since 2022 to launch hundreds of thousands of DDoS attacks worldwide.
US, Japanese, Australian, and German authorities detail how North Korea's WaterPlum hackers used fake job interviews to steal cryptocurrency worldwide.
CISA updates its exploited-vulnerabilities catalog to flag a critical VMware vCenter bug, patched in July, as now abused in ransomware attacks.
Texas utility CenterPoint Energy confirms customer data was stolen after a threat actor leaked records it says were pulled from an unprotected API.
US prosecutors charge five suspected Black Axe leaders extradited from South Africa over a decade-long romance scam and money-laundering scheme.
Researchers found over 5,400 compromised sites serving ClickFix malware payloads hidden in BNB Smart Chain smart contracts, resisting takedown efforts.
A breach at Thomson Reuters' C-Track court software may have exposed Social Security numbers and sealed case data across 11 U.S. states and Canada.
A dark-web service called Nexus advertised scans of 153M+ driver's licenses traced to identity-verification firm IDScan, prompting an FBI probe and lawsuits.
Berlin confirmed an extortion attempt tied to an August breach of its state administrative network and said it will not pay the attackers' demand.
The Australian Federal Police arrested two Perth men accused of running the TeamPCP software supply-chain extortion operation tied to the Shai-Hulud worm.
Healthcare distributor McKesson confirms a cybersecurity incident after the ShinyHunters group claimed to have stolen roughly 284 million patient-related data records.
Truffle Security found thousands of exposed AWS keys, many years old and never rotated, still granting administrator access to company cloud accounts.
CISA, NSA, FBI and DOE warn of an active campaign using AI-generated scripts to probe and manipulate Siemens S7 industrial controllers.
DOJ settlement resolves claims TikTok let millions of children under 13 use adult accounts and collected their data without parental consent.