Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3802 articles
Authorities disrupted SocksEscort, a proxy service using AVRecon-infected routers, seizing 34 domains and 23 servers and freezing $3.5 million in cryptocurrency. The DOJ linked the service to several thefts and frauds.
Brig. Gen. Matthew Lennox will replace Maj. Gen. Lorna Mahlock as head of the Cyber National Mission Force, amid broader turnover at U.S. Cyber Command and the NSA.
Ofcom and the ICO urged major social platforms to strengthen age checks to restrict under-13 access, citing easily bypassed self-declaration and risks of unlawful data collection. Companies must report plans by April’s end; Ofcom expects to publish responses in May.
Meta says Thai police arrested 21 suspects and it shut down more than 150,000 accounts linked to scam centers targeting users in the US, UK, and APAC. It also announced new scam alerts for WhatsApp, Facebook, and Messenger.
The DOJ charged former DigitalMint negotiator Angelo Martino with extortion conspiracy, alleging he shared confidential negotiation details with BlackCat and took part in attacks on at least five U.S. organizations. DigitalMint says it cooperated and strengthened its s(
The article surveys 2025–26 state-linked cyber activity, vulnerability exploitation, targeting of telecom and identity systems, hacktivist claims amid Iran-related tensions, and AI-enabled phishing, citing several reports and incidents.
Check Point Research reports that China-linked actors, including Camaro Dragon, targeted Qatar’s military and energy sectors with conflict-themed lures delivering PlugX and Cobalt Strike through Baidu NetDisk DLL hijacking and an NVDA-component Rust loader.
ShinyHunters claims it accessed data from about 400 organizations through misconfigured Salesforce Experience Cloud portals and threatens leaks. Salesforce attributes the activity to customer settings; the group disputes that account.
After authorities seized RAMP on January 28, analysts expect smaller operators to migrate to other forums and messaging platforms, while larger groups remain resilient. The disruption may fragment activity rather than eliminate it.
Proofpoint reported that Iran-aligned TA453 targeted a U.S. think tank with a credential-phishing attempt, using rapport-building emails, a malicious PDF link and a OneDrive-themed login page. The correspondence began before the conflict escalated.
India cites existing IT and data-protection laws, AI governance guidance, enforcement tools and awareness programs to address child safety online. Experts say implementation, platform accountability and digital literacy remain key.
UIDAI has launched a bug bounty program covering its website, myAadhaar portal, and Secure QR Code app. Twenty researchers will assess the platforms, with ComOlho coordinating submissions and severity-based rewards.
Phishers impersonating UnitedHealthcare use a free Oral-B iO toothbrush lure and IPv6-mapped IPv4 URLs to direct recipients to pages likely harvesting personal and card data. They previously used Azure Blob Storage links.
StepSecurity has open-sourced Dev Machine Guard, a Bash script that inventories developer tools, AI agents, MCP configurations, IDE extensions and Node.js packages. Community scans run locally; enterprise mode sends scan data to StepSecurity’s backend.
A joint ACSC, New Zealand NCSC and CERT Tonga advisory describes INC Ransom’s affiliate model, regional activity and intrusion methods, citing incidents in Australia, Tonga and New Zealand and recommending access controls, backups and patching.
WhatsApp is rolling out pre-teen accounts with parent controls over contacts and groups, activity alerts, and restricted features. Chats remain end-to-end encrypted; the company also announced warnings for potentially fraudulent device-linking requests.
Meta says it disabled over 150,000 accounts linked to Southeast Asian scam centers in a multi-country effort that led to 21 Thai police arrests. It also announced new scam protections, while the U.K. launched a £30 million Online Crime Centre.
Guardio researchers say they intercepted Comet’s agent traffic and used a GAN to iteratively tune a phishing page, tricking the browser in under four minutes. The finding highlights risks in agent reasoning and narration.
The Senate confirmed Army Lt. Gen. Joshua Rudd to lead the NSA and U.S. Cyber Command in a 71–29 vote, filling a role that had been vacant for nearly a year. Lawmakers had raised questions about his cyber and signals intelligence experience.
Google Cloud completed its acquisition of Wiz on March 11, 2026. The companies say they plan to combine their security platforms, while Wiz will retain its brand and continue serving customers across major cloud providers.
JPCERT/CC has published a study outlining reverse-engineering techniques for Rust binaries, with topics ranging from binary identification and memory layouts to Rust language features and library code, relevant to analyzing Rust malware.
Cybersecurity startup Scanner raised $22 million in a Series A round. Its cloud-native security data lake connects with existing tools and uses AI agents to support threat hunting, detection engineering, and response workflows.
Meta is adding device-linking warnings, suspicious-friend-request alerts, and AI scam detection across WhatsApp, Facebook, and Messenger. The company also reports removing scam ads and accounts and supporting a law-enforcement operation.
Meta said it disrupted an Iran-linked influence operation that used fake Instagram personas and amplifying accounts to target English-speaking U.S. users with political messaging. It removed about 300 accounts and pages.
