Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3800 articles
The DOJ says Xu Zewei was extradited from Italy to the U.S. to face charges over alleged Silk Typhoon cyberattacks, including university compromises and exploitation of Microsoft Exchange Server zero-days.
Validin introduced a beta Advanced Search experience for enterprise customers, using VQL to query services, DNS, and registration data. Features include same-observation matching, Quick Pivots, and tools to track and revisit search workflows.
Microsoft says April 2026 updates can cause Remote Desktop security warnings to overlap or show misplaced or hidden buttons on multi-monitor systems with different display scaling, making prompts harder to review or use.
German prosecutors are investigating phishing attacks targeting Signal accounts. The government suspects Russia but has not officially attributed the campaign; Der Spiegel reported about 300 accounts were compromised.
Gartner says U.S. states issued $3.45 billion in privacy fines in 2025, more than the previous five years combined, amid stronger enforcement and AI-related concerns. California’s privacy agency opposes a federal bill that could preempt state protections.
Spectrum Security raised $19 million in seed funding to accelerate engineering and go-to-market efforts for its platform, which the startup says identifies detection gaps and develops production-ready detection logic for existing security tools.
Xu Zewei was extradited from Italy to the U.S. and charged over his alleged role in HAFNIUM/Silk Typhoon’s pandemic-era campaign, which officials say compromised more than 12,700 U.S. organizations.
Cofense describes a Meta-impersonating phishing campaign that routes victims through Google Forms to a Vercel-hosted page, harvesting passwords and live 2FA tokens for near-immediate account access.
Researchers say 73 OpenVSX extensions are part of a new GlassWorm wave; six have activated to deliver malware. Developers who installed them are advised to rotate secrets and clean their environments.
Tennessee will ban cryptocurrency ATMs starting July 1 after reports linked the kiosks to scams. The article cites 13,460 FBI complaints involving $389 million in losses in 2025 and lawsuits targeting major operators.
During arguments in Chatrie v. United States, justices signaled that police geofence searches likely require warrants, while raising concerns about warrants exposing thousands of users’ location data.
Flare researchers analyzed a threat actor’s forum post outlining a layered OPSEC framework for carding operations, including identity separation, infrastructure segmentation and behavioral evasion. The article also describes defensive approaches to correlating activity.
In Chatrie v. United States, justices questioned whether authorities can obtain Google location data through geofence warrants. A ruling expected by summer could clarify limits on government searches of cloud-stored location data.
Xu Zewei was extradited from Italy to the U.S. to face cyberespionage charges. Prosecutors allege he worked for China’s MSS and was linked to Silk Typhoon, exploiting Exchange vulnerabilities and using web shells to steal data.
Toronto Police arrested three men and seized SMS blaster devices used to send phishing texts from rogue cellular towers. Police estimated 13 million instances of network entrapment and warned that connected phones could lose access to emergency services.
Evan Tangeman was sentenced to 70 months after pleading guilty to RICO conspiracy, admitting he laundered at least $3.5 million for the Social Engineering Enterprise, which targeted cryptocurrency holders and stole about $260 million.
This weekly roundup covers fast16’s potential simulation tampering, UNC6692’s Snow malware, FIRESTARTER on a U.S. agency’s Cisco ASA, Lotus Wiper, Bitwarden CLI supply-chain abuse, and other security developments.
FTC figures show social-media scams caused $2.1 billion in reported losses in 2025, with Facebook leading among platforms. The article also describes Meta’s anti-scam measures and FBI IC3 cybercrime figures.
Mandiant says UNC6692 impersonates Microsoft Teams support after flooding targets with email, steering employees to a fake repair utility that installs the SnowBelt backdoor and can deliver additional tools.
Xu Zewei was extradited from Italy to the U.S. to face charges alleging involvement in HAFNIUM and 2021 Microsoft Exchange intrusions. He denies the allegations and claims mistaken identity.
DFRLab identified 90 Facebook accounts and 13 Instagram profiles tied to a China-linked Spamouflage campaign targeting Tibetan parliament-in-exile elections. Researchers said AI-generated images and coordinated posts drew virtually no organic engagement.
SentinelOne researchers say fast16, a Lua-based malware framework dating to 2005, was designed to subtly corrupt scientific and engineering calculations. Its deployment and impact are unknown; it runs only on obsolete uniprocessor Windows XP systems.
Unit 42 and RH-ISAC say BlackFile has targeted retail and hospitality organizations since February through IT-support impersonation, credential theft and SaaS data access, seeking seven-figure ransoms. The campaign remains active; the victim count is undisclosed.
Google researchers found a 32% increase in malicious indirect prompt-injection attempts from November 2025 to February 2026, but said observed attacks remained relatively unsophisticated.
