Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3793 articles
A WSUS issue has caused synchronization failures, delays and timeouts, preventing some organizations from deploying Windows updates through WSUS or Configuration Manager. Mitigations cover new or rebuilt servers; Microsoft is working on steps for previously affected WS
Richard Bird’s HIH Index tracks material cyber incidents using SEC filings and news or company statements. It grades entries by source strength and avoids adding loss figures that are often missing or based on different evidence.
Kaspersky says HelloNet abuses the ViPNet update mechanism to deploy malware against Russian organizations, including government agencies. The campaign’s possible link to a Chinese-speaking APT is low confidence; initial access is unknown.
Huntress says its Athena system uses more than 40 specialized agents to group and investigate security signals, prioritize suspected live threats for human analysts, and deliver reports for some confirmed malicious activity without analyst review.
Incode says its age-estimation and passive-liveness models run locally, sending only an age-threshold result; server-side session metadata supports fraud detection. The sponsored article also describes Identiq fraud collaboration without pooled customer data.
Thalha Jubair and Owen Flowers pleaded guilty and were sentenced to 66 months for the 2024 attack that halted Transport for London operations. Authorities linked them to Scattered Spider; officials say the group’s activity continues.
Election officials and experts said Trump’s speech offered no credible new evidence of election compromise. Documents reviewed so far do not support claims of Chinese interference, while officials questioned noncitizen-voting figures and warned about election oversight.
An investigation of TA4922 infrastructure reports 36 IP addresses possibly belonging to victims communicating with tracked IPs, along with additional malicious-domain findings. The authors assess one subdomain as potentially malicious and possibly a C2 endpoint.
This roundup covers incidents affecting Odido, Lidl, ZEGO and Nihon Kotsu; CrashStealer macOS malware; reported tracking of US troops; CISA’s vulnerability-disclosure blueprint; an OpenClaw WhatsApp RCE demonstration; and ransomware claims.
Beacon Security raised $13 million in a seed round led by Notable Capital. The startup says its platform combines and enriches security telemetry for human analysts and AI agents, supporting detection, investigation, and response workflows.
U.S. prosecutors charged Zhuoying Chen and Haojie Zhang over an alleged network that laundered at least $43 million from cyber investment scams through more than 140 bank accounts and about 45 shell companies.
Windows Server 2022 reaches end of mainstream support on October 13, 2026, then receives monthly security updates through October 14, 2031. Microsoft recommends planning an upgrade to Windows Server 2025.
UK supply chain security firm Risk Ledger raised £24 million in a Series B led by Axiom Equity. It plans to expand its network, develop AI tools for risk reviews and enter the US market.
Sen. Ron Wyden says Canada’s proposed Lawful Access Act could enable secret surveillance mandates against U.S. tech companies. He urged U.S. officials to review the bill and strengthen safeguards in the U.S.-Canada CLOUD Act agreement.
DarkOwl’s Q2 2026 updates add beta AI summaries, new leak filters and industry insights, expanded historical leak enrichment, and more flexible usage reports. The company also highlights data leaks and darknet research collected during the quarter.
The roundup details fake-package and installer malware, a reported rapid Spirals ransomware attack, flaws added to CISA’s KEV catalog, Windows bind-link EDR bypasses, Chrome Sync stalking and phishing campaigns.
Two men received 5.5-year sentences for the 2024 TfL intrusion, which disrupted 148 systems and was estimated to cost £29 million. TfL said customer data was accessed or may have been exposed; prosecutors linked the defendants to Scattered Spider.
Kaspersky says OkoBot uses ClickFix attacks and fake GitHub repositories to deliver more than 20 payloads targeting credentials, cookies, and crypto wallet seed phrases. The campaign evolved from TookPS and has heavily targeted Brazil.
The episode covers malicious npm package releases affecting JScrambler and AsyncAPI, GitHub's three-day Dependabot cooldown, and PolinRider research identifying 2,417 newly compromised repositories.
A 2024 federal indictment accuses three Russian nationals and Media Land and ML.Cloud of supporting cybercrime targeting critical infrastructure. Officials attribute more than $62 million in losses to the alleged activity; sanctions and a reward offer followed.
A GAO review found that only eight workers joined the federal cyber rotation program. OPM cited budget constraints, stopped advertising positions, and plans to let the program end next summer.
Two Scattered Spider members received five-and-a-half-year prison sentences in the UK for their roles in the 2024 Transport for London cyberattack. The NCA said the arrests halted the group’s criminal activity; Microsoft assessed that they materially weakened its cyber-
Microsoft says Windows 11 24H2 Home and Pro and Windows 10 Enterprise LTSB 2016 will stop receiving security and other updates on October 13, 2026. Eligible unmanaged devices will receive Windows 11 25H2 automatically.
Two Scattered Spider members pleaded guilty and each received five years and six months in prison for the 2024 TfL hack, which disrupted services and exposed customer data. TfL reported £29 million in losses and recovery costs.
