Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3589 articles
The State Department is offering up to $10 million for information leading to the identification or location of Zhang Yu, who is charged in the U.S. over alleged cyberattacks including the 2021 HAFNIUM Microsoft Exchange campaign.
U.S. prosecutors allege MonsterCloud owner Zohar Pinhasi secretly paid ransomware attackers for decryptors while telling clients he could recover their data with proprietary tools, billing them more than $19 million.
Picus Security says it was named a 2026 Gartner Peer Insights Customers’ Choice for Adversarial Exposure Validation, with a 4.8 out of 5 overall rating and 98% willingness to recommend among 154 eligible responses.
Securonix announced behavioral analytics capabilities for identifying unusual activity by users and AI agents, plus ISO/IEC 42001 certification. The article also cites research reporting increased AI cybersecurity automation budgets among surveyed professionals.
Bipartisan lawmakers are urging Congress to fund $11 million for mental health care and resilience training at U.S. Cyber Command following several suicides this summer at the command and NSA.
The U.S. State Department is offering $10 million for information on Zhang Yu, accused of helping conduct Hafnium intrusions that stole data, including COVID-19 research, from U.S. universities and a law firm. Xu Zewei was extradited to the U.S.
StepSecurity introduced inventories of AI agent skills on developer machines and in GitHub repositories, showing execution-related flags, sources and content differences to help teams review skills that may run code or hooks.
CrowdStrike is joining Anthropic’s Critical Infrastructure Defense Program, which brings cybersecurity and infrastructure leaders together to share defensive practices, inform research, and support protection of critical infrastructure.
OpenAI says it disrupted Russian and Iranian influence operations that used AI-generated personas and content to place narratives in news outlets. It rated the Russian campaign’s impact 5 out of 6 and the Iranian campaign’s 4 out of 6.
Prosecutors allege MonsterCloud owner Zohar Pinhasi falsely claimed to decrypt ransomware without paying attackers, then used client fees to pay ransoms without telling them. He faces wire fraud charges and pleaded not guilty.
The DOJ and FBI seized domains used to access Microscan and FishHub, tools linked to China-based Integrity Technology Group and Flax Typhoon. A joint agency advisory describes targeting of organizations worldwide, including critical infrastructure.
Anthropic is partnering with cybersecurity firms to find and fix vulnerabilities in critical infrastructure and open-source software, and will offer opt-in periodic scans with findings, proof of concept, and patching suggestions.
Prasan Nepal, described by prosecutors as a leader of the 764 network, pleaded guilty to conspiracy to commit child sexual exploitation. He faces 15 to 30 years in prison; alleged co-conspirator Leonidas Varagiannis remains detained in Greece.
Leaked chats linked in part to the Silent Ransom Group describe plans to infiltrate U.S. law firms and recruit operatives. Some tactics match an FBI warning, but the archive does not verify that its most extreme plans were carried out.
US authorities arrested and charged Anibal Alexander Canelon Aguirre, accused of developing Ploutus-D and leading a Tren de Aragua ATM jackpotting scheme that allegedly stole $5.1 million from US banks and laundered proceeds through cryptocurrency.
The FBI seized seven domains tied to Flax Typhoon tools MicroScan and FishHub, which authorities say were used to scan for vulnerabilities, breach organizations, steal data, and maintain access to victim networks.
CrowdStrike and NVIDIA are collaborating on the NVIDIA Open Agent Safety Platform, which aims to add layered controls for AI agents and connect agent activity with enterprise security context in CrowdStrike’s Falcon platform.
Researchers say the FakeGit campaign resumed on October 4, using 17,610 GitHub repositories to distribute SmartLoader, which can deliver other malware. The repositories use README download links to malicious ZIP archives.
Raheim Hamilton, co-creator and operator of the Empire Market dark web marketplace, was sentenced to 40 years in prison for facilitating $430 million in illegal transactions from 2018 to 2020.
Microsoft is developing Teams integrations for third-party deepfake detection and a feature that warns users about potentially impersonated meeting organizers or participants. Both are expected to reach general availability in November.
A Maryland man was convicted of stealing about $53.3 million from Uranium Finance in two 2021 smart-contract exploits that forced the exchange to close. Authorities recovered about $31 million in cryptocurrency and seized collectibles.
Researchers earned $232,500 for exploiting 45 unique zero-days on day two of Pwn2Own Ireland 2026, including three successful hacks of the Samsung Galaxy S26.
CYFIRMA’s Q3 2026 update says preemptive cybersecurity is gaining ground, citing rising exposure-validation adoption and forecasts for security spending. The company plans to deliver its final prediction verdict in December.
U.S. prosecutors say MonsterCloud owner Zohar Pinhasi falsely claimed to decrypt ransomware without paying attackers, while allegedly paying them secretly and charging clients far more. He faces three wire-fraud charges.
