Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3800 articles
INTERPOL’s Operation Ramz led to more than 200 arrests, identified 382 additional suspects across 13 Middle East and North Africa countries, and seized 53 servers linked to phishing, malware, and online fraud affecting at least 3,867 confirmed victims.
Interpol’s Operation Ramz targeted phishing and scam infrastructure across North Africa and the Middle East, resulting in 201 arrests, 53 server seizures, and 3,867 identified victims, according to the article.
INTERPOL says Operation Ramz involved 13 MENA countries, leading to 201 arrests, 382 additional suspects identified and 53 servers seized. Authorities disrupted phishing and fraud operations and identified 3,867 victims.
CIS announced updates to benchmarks for platforms including Amazon Linux, Azure, VMware, and Apple devices, alongside new guides for Kubernetes, databases, and other products. Some releases add automated assessment content and updated remediation guidance.
INTERPOL says Operation Ramz, conducted with 13 Middle East and North Africa countries, led to 201 arrests, the seizure of 53 servers, and the identification of 382 suspects linked to cybercrime affecting nearly 4,000 victims.
OXsecurity found four malicious npm packages that steal developer data; one contains a leaked Shai-Hulud clone and another adds DDoS capabilities. The packages had 2,678 downloads, and researchers advised removal and credential rotation.
The weekly roundup covers active exploitation of Exchange and Cisco flaws, TeamPCP-linked npm supply-chain attacks, a fake Hugging Face stealer repository, Instructure’s reported ransom agreement with ShinyHunters, and AI-assisted vulnerability discovery.
Wiz says its PQC Readiness tools are generally available, offering continuous discovery of cryptographic assets, risk prioritization, migration guidance, and checks across code, cloud services, and endpoints.
Microsoft says KB5089549 can fail on Windows 11 devices with limited EFI System Partition space, causing 0x800f0922 errors and rollback. Known Issue Rollback or Group Policy can temporarily mitigate the problem.
Researchers earned $1,298,250 for exploiting 47 zero-days at Pwn2Own Berlin 2026. DEVCORE led the contest, and vendors have 90 days to patch the flaws before ZDI publicly discloses them.
Datadog’s Pathfinding Labs offers more than 100 deployable, intentionally vulnerable AWS environments for practicing privilege escalation and testing CSPM detection. The labs run in sandbox accounts through a Go CLI.
A roundup of new EU AI transparency guidance, BSI database security recommendations, NCSC advice on AI-assisted vulnerability discovery, and privacy, enforcement and platform obligations across Europe and the US.
eSentire reports Tycoon2FA uses invoice-themed Trustifi tracking links and redirects to trick Microsoft 365 users into authorizing attacker-controlled devices through OAuth device-code flow. The kit has added anti-analysis defenses after a March disruption.
The FTC will begin enforcing the Take It Down Act on May 19, requiring covered services to remove reported nonconsensual intimate imagery, including AI-generated forgeries, within 48 hours or face investigations and penalties up to $53,088 per violation.
Colorado Governor Jared Polis commuted former Mesa County clerk Tina Peters’s nine-year sentence. Peters was convicted of using another person’s identity to access election facilities, take voting data and share it online.
Competitors earned $385,750 by demonstrating 15 zero-days on day two of Pwn2Own Berlin 2026, including exploits affecting Microsoft Exchange, Windows 11, Red Hat Enterprise Linux, NVIDIA Container Toolkit, Cursor AI and OpenAI Codex.
CERT-AGID observed 14 campaigns impersonating INPS with fake fuel-subsidy messages. The mobile-only sites collect personal and payment-card data; technical artifacts suggest a link to the Darcula phishing platform.
Microsoft will stop loading saved Edge passwords into process memory in clear text at startup. The defense-in-depth change is live in Canary and is due in supported releases starting with build 148.
SecurityWeek’s roundup covers a confirmed GeForce NOW partner data breach, infostealer and Seedworm activity, Audi platform flaws, Android 17 defenses, Canada’s encryption bill debate, and new AI-security initiatives.
Microsoft’s Cloud-Initiated Driver Recovery will use Windows Update to roll back drivers rejected for quality issues. Testing is planned for May–August, with rollbacks beginning in September 2026.
SecurityScorecard acquired Driftnet, adding real-time Internet scanning and threat intelligence to its third-party risk management platform. Financial terms were not disclosed.
TeamPCP released Shai-Hulud worm source code and usage instructions. Researchers report forks, code modifications and fresh attacks; analysis describes credential theft, data exfiltration and anti-signature measures. Experts advise hardening developer and CI systems.
Pwn2Own Berlin 2026’s first day awarded $523,000 after researchers demonstrated 24 zero-days across Microsoft Edge, Windows 11 and other platforms. Vendors have 90 days to release fixes after disclosure.
Federal cybersecurity officials say strong identity controls remain vital as AI can accelerate attacks, obscure malicious activity and create risks from automated agents. A UC Riverside study found agents struggled with context and conflicting goals.
