Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3589 articles
Momentum Cyber projects 450 cybersecurity M&A deals in 2026, up from 404 in 2025, as buyers pursue AI-related security capabilities. AI security acquisitions reached 40 in the first three quarters, compared with 10 in all of 2025.
The FBI says it arrested another suspected ShinyHunters co-conspirator linked to the breach of a third-party-managed FBI platform. The suspect's identity and charges have not been publicly disclosed.
Oleg Korniev pleaded guilty to helping run a money-laundering operation that recruited more than 15,000 U.S. money mules and processed millions stolen by cybercriminals. He faces up to 50 years in prison.
Germany arrested a Russian national suspected of being a leading Qilin ransomware member after Japan extradited him. Authorities say he was detained in Japan in May; Qilin reportedly continued to claim hundreds of victims.
Microsoft says unsupported Windows devices will lose access to Windows Update when certificates expire in May and June 2027. Users and administrators should install specified updates on supported versions or upgrade unsupported devices.
Researchers earned $1.262 million after demonstrating 98 zero-day flaws across products at Pwn2Own Ireland 2026. ZDI says vendors must patch disclosed flaws within 90 days before details are made public.
Microsoft’s PQC TLS pilot lets eligible certificate authorities test post-quantum certificates in controlled environments. The company urges organizations to inventory certificate dependencies and assess interoperability, performance, and operational readiness.
A multinational advisory says hackers linked to Integrity Technology Group broke into organizations, stole email and credentials, and operated a portal giving third parties access to stolen mail. It details their methods and urges defenders to investigate networks.
A weekly roundup highlights a ransomware affiliate who kept the profits, exposed attacker tools, malicious developer packages and extensions, phishing, a file-upload flaw, weak session cookies, and hidden instructions targeting AI assistants.
Scammers impersonate brands to lure YouTube creators to fake collaboration sites, where Google credentials and verification codes can be stolen to take over accounts and channels. ESET advises independently verifying offers and securing accounts.
U.S. and French authorities seized two NudeLeaksTeens sites and arrested two brothers in France. Investigators said the sites sold hacked intimate images, including child sexual abuse material, and affected over 17,000 victims.
An actor using the handle ChimeraZ claims to have leaked a 340 KB CSV associated with France’s Ministry of Justice, listing 7,135 people. The dataset, its source and the advertised counts have not been independently verified.
Attackers compromised infrastructure behind .gh, .sl, and .as domains to obtain unauthorized HTTPS certificates. Google blocked suspicious certificates in Chrome and worked with certificate authorities to revoke them.
JPCERT/CC says Japanese organizations are seeing a possible rise in personal-data leaks involving mobile API abuse, weak configurations and known flaws, including Metabase's actively exploited CVE-2026-72898.
Censys added 22 protocol and endpoint scanners in September, highlighting exposed Cisco SD-WAN, fuel controllers, alarm systems, Hikvision recorders, STOMP brokers, and Pigeonhole services, with security risks and advice to check exposure and patch systems.
The U.S. State Department is offering up to $10 million for information on Zhang Yu, accused of working with Hafnium operators to target COVID-19 research and exploit Microsoft Exchange vulnerabilities.
Anthropic says Claude Haiku 5.5 is more resistant to malicious prompts and prompt injection than its predecessor, with stronger cyber safeguards. Its offensive-test results remained below Sonnet 5.5 and Opus 5.5.
The UK and international partners say China-linked Integrity Technology Group enabled cyber actors to use AI-assisted scanning, botnets and manual exploitation to compromise networks and steal sensitive data worldwide.
A TIME analysis found Muse instructions call for hourly updates to personal dossiers and nightly reviews of conversations. The article also highlights broad data access, default AI training, cloud storage, and reported misuse and compromise.
ANY.RUN reports that Wazza screens visitors through a multi-stage routing chain before serving an Adobe-themed Device Code phishing page, targeting banking, manufacturing, and government organizations in the US, Europe, and Australia.
Four states sued TP-Link over alleged misleading security claims and China ties. The complaints cite five ISP-router vulnerabilities affecting 65 devices; fixes are distributed through ISPs, and some devices may remain unpatched.
Researchers found 16 Firefox extensions impersonating Rabby and OKX wallets to steal recovery phrases and private keys. All were removed by October 5, 2026; affected users should assume exposed wallets are compromised and move their assets.
MonsterCloud owner Zohar Pinhasi was charged with wire fraud for allegedly paying ransomware groups for decryption keys, then falsely claiming proprietary tools recovered clients’ data and charging them substantially more.
SOCRadar's Freshdesk integration polls for matching security incidents every five minutes and creates tickets. Optional two-way status sync updates incidents in SOCRadar when tickets are resolved or closed.
