Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3801 articles
The FBI and Indonesian National Police dismantled W3LL phishing infrastructure, seized key domains and detained its alleged developer. The operation reportedly targeted more than 17,000 victims in 2023–2024 and was linked to over $20 million in attempted fraud.
The FBI and Indonesian police disrupted W3LL, seized infrastructure and domains, and arrested its alleged developer. Group-IB said its tools targeted 56,000+ Microsoft 365 accounts; the FBI cited thousands of compromised accounts and over $20 million in attempted fraud.
A security researcher says LinkedIn checks for browser extensions using JavaScript resource probing, not computer scanning or malicious code. His sample testing found potentially problematic extensions, while privacy and transparency concerns remain.
JPCERT/CC’s 2026 ICS Security Conference covered ransomware and OT disruption, digital-twin risks, integrated safety and security design, incident preparedness, and changing vulnerability disclosure and SBOM requirements.
Zimbabwe officials cite rising cyber fraud and plan an AI Cyber Shield, a national operations centre and incident-response team. They estimate mobile money fraud exceeds US$30 million annually and say phishing and social engineering have risen over 40%.
An international law-enforcement operation identified over $45 million in stolen cryptocurrency, froze about $12 million for return to victims, and took down more than 120 domains used in approval-phishing scams.
OpenAI says its macOS app-signing workflow ran malicious Axios 1.14.1. It found no evidence of user data access or system compromise and says the signing certificate was likely not exfiltrated, but is revoking and rotating it.
Authorities say a joint FBI and Indonesian police operation dismantled W3LL phishing infrastructure, seized domains and detained its suspected developer. The service targeted corporate accounts and was linked to more than $20 million in attempted fraud.
Google has made Gmail end-to-end encryption available on Android and iOS for eligible Google Workspace customers. The feature uses client-side encryption and must be enabled by administrators in the Admin Console.
This roundup covers EU and national privacy and security developments, UK guidance on agentic AI risks, new US privacy laws, FTC priorities, and Anthropic’s Project Glasswing initiative to use AI to find vulnerabilities in critical software.
Operation Atlantic, led by the UK's NCA, identified 20,000+ crypto-fraud victims across Canada, the UK and US, disrupted fraud networks, froze over $12 million in suspected proceeds, and identified over $45 million in cryptocurrency linked to fraud.
Citizen Lab reports that agencies in several countries use Webloc, an ad-based location intelligence system with data from up to 500 million devices. The researchers raise oversight concerns; Penlink disputes the report’s accuracy.
Google made DBSC generally available on Chrome 146 for Windows, using hardware-backed keys to bind short-lived session cookies to devices. macOS support is planned; devices without secure key storage fall back to standard cookie behavior.
U.S. agencies say Iranian-linked groups have targeted internet-exposed Rockwell PLCs since March 2026, extracting project files and manipulating HMI/SCADA displays. Censys found 3,891 such exposed hosts in the U.S.
SecurityWeek’s roundup covers a macOS crypto stealer, a Windows Defender zero-day, reported breaches at Jones Day and DocketWise, Stryker’s cyberattack impact, and a disputed claim of massive data theft from a Chinese supercomputing center.
Microsoft says financially motivated group Storm-2755 is hijacking Canadian employees’ accounts to divert salary payments, using AiTM phishing to steal session cookies and OAuth tokens, hide HR messages, and alter direct-deposit details.
The UK says British and allied forces tracked Russian submarines near undersea infrastructure and that the vessels retreated. No damage was reported; officials say protecting cables and pipelines is vital to national security.
This roundup covers APT28 router-based DNS hijacking, the reported $285 million Drift Protocol theft, EU uncertainty over voluntary CSAM scanning, recoverable Signal notification data on iPhones, and a new U.S. Treasury digital-asset cybersecurity initiative.
A U.S. interagency advisory warned that Iran-linked actors targeted internet-exposed PLCs and other operational technology. Industry experts discussed reported impacts, cautioned that many related claims remain unverified, and recommended isolation, segmentation, and OT
MITRE released F3, a behavior-based framework for describing cyber fraud. It adds the fraud-specific tactics positioning and monetization to help defenders connect cyber activity with financial outcomes and coordinate detection, prevention, and response.
FBI forensic extraction reportedly recovered incoming Signal message fragments from an iPhone’s notification database, even after Signal was removed. The article says the source was notification previews, not Signal’s encrypted storage.
Treasury’s OCCIP will provide eligible U.S.-based digital-asset firms with threat intelligence at no cost. The initiative responds to rising attacks, including a reported $280 million theft from Drift that the article attributes to alleged North Korean hackers.
The FCC is considering expanded customer verification, monitoring, record-retention requirements, and per-call penalties for voice providers to curb illegal robocalls, following enforcement concerns including a proposed fine against Voxbeam.
Chrome 146 for Windows adds DBSC, which binds session cookies to hardware-backed keys to hinder infostealer reuse. Google says testing with web-platform partners, including Okta, saw a decline in session theft; macOS support is planned.
