Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3802 articles
Europol says Project Compass, a 28-country operation targeting The Com, led to 30 arrests and 179 suspects being identified. Investigators identified 62 victims and safeguarded four minors.
Windows 11 Insider builds add controls to prevent batch files from changing during execution. When code integrity is enabled, the mode also reduces signature validation to once per batch file.
Trump said he was ordering federal agencies to phase out Anthropic technology amid a Pentagon dispute over military AI safeguards, including limits on mass surveillance and fully autonomous weapons.
Elastic’s Terraform provider adds support for managing detection rules, exceptions, prebuilt rules, ML anomaly detection jobs, cross-cluster API keys, and AI connectors as code, enabling versioned and reviewable deployments.
Meta said it sued deceptive advertisers in Brazil, China and Vietnam, disabled accounts, blocked scam domains and targeted consultants selling ad-policy bypasses. The article also describes broader scam-ad and DNS-manipulation operations.
Microsoft described trojanized gaming utilities delivering a Java-based RAT using PowerShell, with Defender exclusions and scheduled-task persistence. The article also reports Steaelite RAT capabilities and mentions DesckVB RAT and KazakRAT.
A Greek court convicted Intellexa founder Tal Dilian and three associates over unlawful access and privacy violations tied to Predator spyware. Their combined sentences exceed 126 years, but Greek law limits time served to eight years; they remain free pending appeal.
Sen. Ron Wyden says he will block Lt. Gen. Joshua Rudd’s nomination to lead Cyber Command and the NSA, citing limited cyber and signals-intelligence experience and vague answers on surveillance authorities. A hold could force a Senate vote.
Prosecutors allege former Air Force Major Gerald Eddie Brown worked with convicted hacker Stephen Su Bin to train Chinese military pilots without a State Department license. Brown was arrested after returning from China.
A Genians report describes Middle Eastern APT campaigns, including a MuddyWater-attributed chain using RMM tools and a macro-enabled Word lure to run a disguised Rust payload that contacts a C2 server and inventories security products.
Ireland’s forthcoming National Cyber Security Bill is expected to implement NIS2, placing cybersecurity oversight and accountability on management boards. The article outlines board-scoping, training and documentation steps, draft penalties, and the bill’s expected 2026
The UK government says its Vulnerability Monitoring Service scans about 6,000 public-sector organizations, cutting critical-vulnerability remediation from nearly 50 days to eight. It also launched a cyber career program to address workforce shortages.
The roundup covers India's space-security guidelines, Apple's NATO restricted-data certification, an OpenClaw WebSocket flaw, Cisco's reported long-running SD-WAN zero-day exploitation, U.S. sanctions on Operation Zero, and X's appeal of an EU fine.
OFAC sanctioned Operation Zero, its owner Sergey Zelenyuk, and associates over exploit brokerage. Treasury says the firm acquired at least eight stolen U.S. government cyber tools; former employee Peter Williams pleaded guilty to stealing and selling them.
TruffleSecurity found more than 2,800 live Google API keys exposed in public code that could authenticate to Gemini. Google says it has blocked leaked keys from Gemini and added scoped keys and leak detection.
Yurii Nazarenko pleaded guilty to operating OnlyFake, which generated and sold over 10,000 counterfeit IDs. Prosecutors said customers used them to bypass KYC checks; Nazarenko agreed to forfeit $1.2 million and faces sentencing in 2026.
This roundup covers Predator spyware suppressing iOS recording indicators, Russian cyber operations supporting missile targeting in Ukraine, a ShinyHunters claim against Odido, AI security initiatives and threat trends, and new MITRE and OpenAI actions.
Shadowserver reports about 900 FreePBX instances still run web shells, likely after exploitation of CVE-2025-64328. Fortinet linked the activity to INJ3CTOR3; users are advised to update the filestore module and restrict admin access.
An analysis matched 54 of 70 credentials used in F5 BIG-IP credential-stuffing attempts to infostealer logs, mostly ADFS/STS credentials. The source IP was attributed to a reportedly compromised FortiGate used as a proxy.
AttackIQ released an emulation of reported BlackByte behaviors for testing security controls, including scheduled-task execution, security-tool tampering, ARP discovery, shadow-copy deletion, and AES/RSA file encryption.
Gambit Security raised $61 million to develop and expand its AI-powered platform, which the startup says maps security environments and backups to identify resilience gaps and validate recovery paths.
StepSecurity traced repeated deprecated @types package releases on npm to a DefinitelyTyped workflow bug that published a new version every 30 minutes. A one-line fix stopped the loop.
Reports describe exposed OpenClaw gateways probed for command execution and credentials, a malicious VS Code extension deploying ScreenConnect, and ClawHub skills targeting browser and crypto-wallet data. The article recommends access controls, least privilege and skill
Microsoft’s optional Windows 11 KB5077241 preview adds native Sysmon functionality, disabled by default, and fixes a BitLocker issue that could freeze devices after recovery-key entry. The non-security update also adds other quality improvements.
