Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3800 articles
Canadian Jacob Butler, known as “Dort,” was arrested and charged in the U.S. with aiding and abetting computer intrusion over his alleged administration of the Kimwolf DDoS botnet. The U.S. is seeking his extradition.
Canadian authorities arrested Jacob Butler, accused of operating the KimWolf DDoS-for-hire botnet; he faces extradition to the U.S. Authorities also seized 45 DDoS-for-hire platforms, while officials linked KimWolf to more than 25,000 attacks.
Authorities dismantled 33 servers linked to First VPN and arrested its alleged administrator in Ukraine. Europol said information on 506 users was shared internationally; investigators will determine which users are linked to criminal activity.
Two Americans pleaded guilty to misprision of a felony for supporting India-based tech-support scammers with phone services. The scheme used fake malware alerts to lure victims; lawmakers also urged major carriers to strengthen scam prevention.
Snap, Roblox and Meta promised UK child-safety changes after Ofcom pressure, including limits on adult contact, parental chat controls and AI detection of likely sexualized conversations. Ofcom said TikTok and YouTube made no significant commitments.
CISA’s new nomination form lets external researchers, vendors, and industry partners submit exploited vulnerabilities with supporting evidence for possible inclusion in the KEV catalog, aiming to improve validation and speed defensive action.
Reps. Don Bacon and James Walkinshaw say CISA cuts have weakened civilian cyber defense and urge restoring the agency’s staffing, funding and partnerships. The proposed fiscal 2027 budget cuts vary between $361 million and $707 million in cited documents.
Canadian authorities arrested Jacob Butler, accused of helping administer the Kimwolf DDoS-for-hire botnet. Officials attribute more than 25,000 attacks to Kimwolf, and court records indicate it may have resumed operations after March takedowns.
This week's roundup covers 47 zero-days demonstrated at Pwn2Own Berlin, a Composer token-leak fix, evolving OrBit rootkits, Storm-2949 cloud-data theft, AI-assisted intrusions in Latin America, and new malware and fraud campaigns.
A multinational operation led by France and the Netherlands shut down First VPN, arrested its alleged administrator and took 33 servers offline. Investigators obtained the user database, with intelligence supporting 21 additional inquiries.
CISA acting director Nick Andersen warned that rising attacks on open-source software require hard security choices and changes to vulnerability management, disclosure, and remediation. He cited malicious axios updates and activity attributed to suspected TeamPCP.
Trump postponed a proposed order for 90-day government testing of frontier AI models, citing competitiveness concerns. The draft involved several agencies and aimed to strengthen evaluations amid concerns about AI-enabled hacking and other security risks.
Apple says it blocked more than $2.2 billion in potentially fraudulent App Store transactions in 2025 and over $11 billion across six years, while rejecting 2 million app submissions and blocking 1.1 billion fraudulent account creations.
Wiz says its private-preview integration with Anthropic’s Claude Compliance API maps Claude Enterprise users, permissions, projects, and AI datasets into Wiz for security and compliance visibility.
Authorities seized 33 First VPN servers across 27 countries and arrested its administrator. Europol says analysis of collected user data exposed links to thousands of users in the cybercrime ecosystem.
The episode discusses malicious npm packages linked to DPRK and TeamPCP, a poisoned Nx Console extension that exposed GitHub repositories, and npm’s staged-publishing feature, including its potential benefits and limitations.
Ocean emerged from stealth with $28 million in funding for an email-security platform that uses AI agents to assess message intent and context and help security teams handle threats such as business email compromise and AI-generated phishing.
Apple says it rejected over 2 million App Store submissions, blocked 1.1 million fraudulent account creations and prevented $2.2 billion in potentially fraudulent transactions in 2025.
Google-attributed Chrome vulnerabilities rose to 100 in its May 5 advisory; more than 70 flaws patched in the two latest releases were found internally. AI’s role is suspected, not confirmed.
Discord says voice and video messages are now end-to-end encrypted by default across nearly all surfaces, excluding stage channels. The feature supports calls across laptops, phones, consoles and browsers.
The FTC warned major tech firms that they are not complying with the Take It Down Act, which requires removal of nonconsensual intimate images within 48 hours of a request. It urged simple reporting tools and hashing to remove duplicates.
ESET reports Webworm added EchoCreep and GraphWorm in 2025, using Discord and Microsoft Graph API for C2. The article describes their capabilities and the group’s custom proxies; initial access remains unknown.
Microsoft says it disrupted Fox Tempest’s OpFauxSign malware-signing service, which abused Artifact Signing and fraudulent short-lived certificates to distribute signed malware, including Rhysida, Oyster, Lumma Stealer and Vidar, and support ransomware attacks.
Microsoft released RAMPART, a Pytest-native framework for testing AI agents for issues including prompt injection and data exfiltration, and Clarity, a tool for clarifying design assumptions before development.
