News
Brazilian and German police arrested suspects behind a 2023 scheme that exploited a service-provider flaw to drain Commerzbank customer accounts.
The ShinyHunters extortion group breached cloud communications provider RingCentral in July, exposing personal data tied to 1.6 million accounts.
Ukraine's National Police dismantled 94 scam call centers running investment fraud and bank-impersonation schemes, seizing cash, crypto access and gear.
A months-delayed disclosure reveals hackers accessed patient records at a healthcare billing vendor for five days in October 2025, exposing data on 3.8 million people.
Connor Riley Moucka admitted to hacking Snowflake customer accounts and extorting victims, in a scheme US officials say affected over 100 million individuals.
Belarusian national Maksim Silnikau was sentenced to 16 years for building and running Ransom Cartel, which extorted at least 18 companies worldwide.
Amazon attributed a string of npm package compromises, including the widely used debug and chalk libraries, to the North Korea-linked Sapphire Sleet group.
Hackers targeted exposed industrial controllers at over 30 Minnesota water systems, prompting a CISA alert on internet-facing operational technology.
A firmware bug in COLDCARD hardware wallets let attackers predict private keys, draining an estimated $88.6 million in Bitcoin from thousands of addresses.
Stadler Rail says the Everest ransomware gang demanded $12.3 million after breaching a data platform it shared with a supplier, but the company refused to pay.
Hackers spent ten months inside a South Korean diplomatic training system, stealing personal data on current and former foreign ministry staff.
German, US, and Indonesian authorities took down the infrastructure behind the Kratos phishing-as-a-service kit and arrested its alleged operator.
Four arrests in Spain, Portugal, and Panama as police break up a network that laundered fraud proceeds through 800+ bank accounts.
US prosecutors indicted the alleged operators of Media Land and ML.Cloud, hosting services tied to over $62 million in ransomware damages.
A UK court sentenced Owen Flowers and Thalha Jubair to five and a half years each for the 2024 Transport for London cyberattack.
Progress Software disabled ShareFile Storage Zone Controller accounts and urged customers to power off servers, citing a credible external threat.
Ex-DigitalMint negotiator Angelo Martino was sentenced for carrying out BlackCat (ALPHV) ransomware attacks while working incident response.
Armenian national Karen Vardanyan admitted deploying Ryuk ransomware on U.S. company networks, with the group collecting some $15 million in bitcoin.
Peter Stokes, a dual US-Estonian citizen arrested in Finland, faces fraud and hacking charges over alleged involvement in Scattered Spider extortion attacks.
Sysdig researchers say the JadePuffer ransomware operation was conducted end-to-end by an autonomous LLM agent, from initial access to encryption and extortion.
Google, the FBI, Lumen, and Shadowserver dismantled NetNut, a residential proxy network of at least 2 million compromised Android devices used by hundreds of threat actors.
A coordinated multinational operation backed by Europol and major cybersecurity firms has disrupted the criminal infrastructure behind the Amadey loader and StealC infostealer, recovering 27 million stolen credentials.
Hackers compromised a third-party vendor to inject malicious code into the Polymarket frontend, draining approximately $3 million from users before the platform committed to full reimbursement.
A Russian state-sponsored phishing campaign targeting Signal users has evolved to steal backup recovery keys, granting attackers persistent access to victims' full message history.
A massive credential leak dubbed 'FortiBleed' exposed VPN and admin passwords for ~74,000 Fortinet devices worldwide; CISA urges immediate hardening.
Law enforcement from four countries cleaned nearly 15,000 malware-infected WordPress sites and seized 100+ servers tied to the Evil Corp cybercrime group.
A third-party vendor breach at the Texas Parks and Wildlife Department exposed driver's license numbers, passport numbers, and contact details for over 3 million Texans.
The report highlights how gaps in legal cooperation and fragmented judicial frameworks are leaving the continent exposed to fast-evolving online threats.…
This article is part of: Centre for Cybersecurity Cybercrime continues to rise, with cybersecurity and AI increasingly linked as both a threat and a defence…
Resilience to cyber-dependent crimes is rising, yet threats continue to outpace it On 19 September, several European airports experienced flight delays and…