Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3802 articles
Amazon researchers say a Russian-speaking actor used commercial generative AI to help compromise more than 600 FortiGate firewalls in 55+ countries, exploiting exposed admin interfaces and weak authentication to steal configurations and reach some internal systems.
Ofcom fined adult-site operator 8579 LLC £1.35 million for failing to implement Online Safety Act age checks. The company also faces daily penalties and a separate fine for allegedly ignoring information requests; critics cite privacy and cybersecurity risks.
The UAE Cyber Security Council said national defenses blocked attempted network infiltration, ransomware deployment and phishing targeting essential services. The announcement provided few technical or attribution details, and the claims were not independently verified.
X has appealed the European Commission’s €120 million DSA fine, challenging findings on paid verification, advertising disclosures and researcher access to public data. The case is the first judicial challenge to DSA enforcement.
The FBI reports more than 1,900 U.S. ATM jackpotting incidents since 2020 and over $20 million in losses. The warning describes physical access and Ploutus malware targeting the XFS layer, and recommends stronger hardware and software controls.
Oleksandr Didenko was sentenced to 60 months in prison for helping North Korean IT workers use stolen US identities and laptop farms to obtain jobs at US companies. He also agreed to forfeit more than $1.4 million.
Straiker reports that the bob-p2p skill on Clawhub prompts AI agents to expose Solana wallet keys and buy worthless $BOB tokens, with the campaign promoted through agent social networks.
Kaspersky researchers analyzed Arkanix Stealer, a short-lived information-stealing operation with Python and C++ versions, broad data-theft capabilities and signs of possible LLM-assisted development. Its operator shut down the project about two months after launch.
Amazon Threat Intelligence says a financially motivated actor used commercial AI tools to compromise over 600 FortiGate devices in 55 countries from January 11 to February 18, 2026, using exposed management interfaces and weak credentials—not FortiGate vulnerability.
The FBI says ATM jackpotting stole more than $20 million in 2025, with over 1,900 incidents reported since 2020, including 700+ in 2025. Its alert describes Ploutus abuse of the XFS API and digital and physical warning signs.
EC-Council announced four role-based AI certifications and an updated Certified CISO v4, organized around its Adopt.Defend.Govern framework. The offerings cover AI literacy, program management, offensive AI security, and responsible AI governance.
Anthropic is rolling out Claude Code Security in a limited research preview for Enterprise and Team customers. It scans codebases, rates findings, verifies results, and proposes patches for human approval.
X has appealed the European Commission’s €120 million Digital Services Act fine, arguing the investigation was incomplete and procedurally flawed. The Commission will defend its decision; the case concerns paid verification, political-ad transparency and researcher data
Oleksandr Didenko was sentenced to five years after pleading guilty to helping North Korean IT workers obtain U.S. jobs using stolen identities and hosted laptops. Authorities said the scheme affected at least 871 identities and harmed victims and employers.
Catalin Dragomir pleaded guilty to computer intrusion and aggravated identity theft tied to Oregon’s emergency management network. Prosecutors said he sold administrative access and shared an employee’s personal data.
Group-IB linked fake Coretax apps distributed through phishing, WhatsApp and vishing to GoldFactory, Gigabud.RAT and MMRat. It estimated nationwide losses and operating costs at $1.5m–$2m and identified 228 malware samples and 996 phishing URLs.
The roundup covers malware- and bot-driven ad fraud, an NCSC warning to SMEs, AI governance concerns, Ireland’s GDPR investigation into X over alleged Grok deepfakes, and Advantest’s investigation of a possible ransomware incident.
NIST developed a chip that produces single photons on demand, potentially making quantum key distribution more efficient and accessible. The article also describes possible uses in quantum computing and quantum-device networking.
This roundup covers ransomware disruption at Mississippi clinics, exposed identity and Elasticsearch data, Interpol arrests in Africa, record 2025 ICS advisories, AI-data protections and Google Play defenses.
Ingress NGINX will receive no releases, bug fixes, or security patches after March 2026. Datadog urges operators to inventory deployments and plan migration to a Gateway API-conformant controller, citing past and newly disclosed vulnerabilities.
INTERPOL says an eight-week operation across 16 African countries led to 651 arrests, recovered over $4.3 million, and exposed scams linked to more than $45 million in losses. Authorities also identified 1,247 victims and took down 1,442 malicious assets.
Dragos says Volt Typhoon remained active in U.S. utilities through 2025, embedding in OT networks; it warns some compromises, especially at smaller water utilities, may never be found. SYLVANITE reportedly provides initial access.
The FBI reported more than 700 ATM jackpotting incidents in 2025, involving over $20 million in losses. The article describes Ploutus malware’s use to control ATMs and cites a DOJ indictment alleging at least $5.4 million in thefts.
Matthew Abiodun Akande was sentenced to eight years for using Warzone RAT-delivered phishing to steal tax clients’ data from Massachusetts firms and file 1,000+ fraudulent returns seeking $8.1 million; more than $1.3 million was collected.
