News
RSS feedAhmad Umar Agha, known as Th3Pr0, was sentenced in Virginia for state-directed hacking, including the 2013 fake White House explosion tweet that briefly rattled markets.
US authorities seized the main domain of Russian-speaking bulletproof host Virtualine, which served ransomware gangs, sextortion operations and CSAM distributors.
Binance says attackers drained roughly $6.3 billion in crypto from its hot wallets; blockchain analysts attribute the theft to North Korea-linked TraderTraitor.
Zheng Zhao was arraigned in California on a money laundering conspiracy charge tied to a scam network that defrauded 174 US victims of more than $36.9 million.
Microsoft says a China-linked actor used an agentic AI pentest tool and stolen ConnectWise application credentials to target over 2,250 Microsoft 365 tenants.
A joint US, German and UK advisory says the SafePay ransomware group has compromised at least 600 critical infrastructure victims since August 2024.
Attackers accessed Burger King Japan's membership system in early October, exposing names, emails and phone numbers of about 11.18 million app users.
The UK has frozen the assets of crypto payment processor Cryptomus and listed related payment firms, citing support for the Russian government.
Microsoft's Digital Crimes Unit and partners disrupted YAM Store and three phishing kits blamed for over one billion lures aimed at 75,000 organizations.
US prosecutors unsealed an indictment against 14 people accused of helping North Korean workers get remote IT jobs through US-based laptop farms.
The FBI seized seven domains supporting hacking tools tied to the China-linked Flax Typhoon group, as CISA set a short patch deadline for federal agencies.
German authorities took custody of a Russian national suspected of being a senior Qilin ransomware operative following his extradition from Japan.
A suspect tied to the ShinyHunters extortion collective was detained in Jordan and is reportedly helping the FBI identify other members.
A China-based ransomware group is exploiting Microsoft SharePoint flaws to hit water, telecom and government networks across Latin America and Iberia.
International police seized KillSec's leak site and servers and arrested a 16-year-old alleged ringleader plus two other suspected members.
Cameron Wagenius, known online as 'Kiberphant0m,' was sentenced for stealing call records from over 100 million AT&T customers and extorting telecom firms.
A court-authorized takedown disrupted the EvilTokens device-code phishing platform, which used AI throughout its attack chain against organizations worldwide.
Cryptocurrency exchange Bitget says attackers linked to North Korea's TraderTraitor group breached backend wallet infrastructure to steal hundreds of millions in crypto.
Gyazo, a widely used screenshot-sharing platform, took its service offline after attackers exploited a server flaw to steal tens of millions of records.
US authorities took down the NightmareStresser booter service, used since 2022 to launch hundreds of thousands of DDoS attacks worldwide.
US, Japanese, Australian, and German authorities detail how North Korea's WaterPlum hackers used fake job interviews to steal cryptocurrency worldwide.
CISA updates its exploited-vulnerabilities catalog to flag a critical VMware vCenter bug, patched in July, as now abused in ransomware attacks.
Texas utility CenterPoint Energy confirms customer data was stolen after a threat actor leaked records it says were pulled from an unprotected API.
US prosecutors charge five suspected Black Axe leaders extradited from South Africa over a decade-long romance scam and money-laundering scheme.
Researchers found over 5,400 compromised sites serving ClickFix malware payloads hidden in BNB Smart Chain smart contracts, resisting takedown efforts.
A breach at Thomson Reuters' C-Track court software may have exposed Social Security numbers and sealed case data across 11 U.S. states and Canada.
A dark-web service called Nexus advertised scans of 153M+ driver's licenses traced to identity-verification firm IDScan, prompting an FBI probe and lawsuits.
Berlin confirmed an extortion attempt tied to an August breach of its state administrative network and said it will not pay the attackers' demand.
The Australian Federal Police arrested two Perth men accused of running the TeamPCP software supply-chain extortion operation tied to the Shai-Hulud worm.
Healthcare distributor McKesson confirms a cybersecurity incident after the ShinyHunters group claimed to have stolen roughly 284 million patient-related data records.