Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3793 articles
CIS and SAFECode released version 1.1 of their Secure by Design assessment guide, expanding AI guidance, updating policy references, and strengthening the use of evidence to assess software security practices.
U.S. and allied agencies say FSB Center 16 hackers target poorly configured routers and exploit Cisco flaws to access critical infrastructure networks. The advisory recommends hardening routers; a separate FBI operation disrupted APT28’s FrostArmada campaign.
The EU and UK imposed sanctions on Russian individuals and entities over alleged cyber and hybrid operations, citing GRU and FSB-linked actors, Turla, Sandworm and Lumma Stealer, as well as attacks targeting European critical infrastructure.
UK authorities charged five Londoners over alleged roles in supplying Russian Coms, a caller ID spoofing platform the NCA says criminals used for over 1.8 million scam calls and fraud affecting victims in more than 107 countries.
The roundup covers 37 cybersecurity-related M&A deals announced in June 2026, including acquisitions intended to expand identity security, AI protection, OT security, vulnerability remediation, and security operations capabilities.
EclecticIQ says its MCP Server lets AI agents work with Intelligence Center to check, create, enrich, and relate threat intelligence entities, with analyst confirmation, existing permissions, and audit logging.
A roundup covers the EU’s AI cybersecurity action plan, new EDPB privacy guidance, Dutch NIS2 legislation, and developments in geolocation privacy, cross-border data transfers, U.S. surveillance warrants, and AI regulation.
Datadog reports that more than 50 dormant GitHub accounts have been used since at least October 2025 to enumerate public organizations and repositories. Some activity abused exposed tokens to target private repositories; Datadog says data was exfiltrated in rare cases.
Australia’s ACSC warns that a global campaign is exploiting CMS and plugin vulnerabilities to deploy webshells. Many Australian businesses are reportedly affected; administrators are advised to patch, remove unused components and monitor for changes.
Comparitech data cited in the article shows healthcare cyberattacks rose 14% in the first half of 2026, with attacks on healthcare businesses up 35% from the prior half-year. The article highlights vendor risks and recent breaches.
The Chatrie ruling requires warrants for geofence searches of phone location history. Legal experts say its privacy reasoning could also affect police use of ALPR data, while Flock Safety argues the technologies are different.
A man pleaded guilty to conspiracy and computer fraud over Ryuk ransomware deployments, while a former ransomware negotiator received 70 months for helping BlackCat/ALPHV extort victims. DigitalMint says it added audited negotiation controls.
The European Parliament restored legal cover for tech companies to voluntarily scan for CSAM until 2028. Critics warn of privacy risks, while a possible permanent framework could extend scanning to encrypted communications.
Karen Vardanyan pleaded guilty to participating in Ryuk ransomware attacks against three U.S. organizations in 2019–2020. He agreed to pay nearly $1.2 million in restitution and faces up to 15 years in prison.
Prosecutors say Rossen G. Iossifov conspired to move $290,000 in government-seized cryptocurrency through exchanges and mixing services while imprisoned. He faces up to 25 years if convicted.
Karen Serobovich Vardanyan pleaded guilty to helping provide initial access and deploy Ryuk ransomware against U.S. organizations in 2019–2020. Prosecutors say the operation received about 1,610 bitcoins; sentencing is scheduled for September 2026.
Progress ordered customers to take self-hosted ShareFile Storage Zone Controllers offline over a credible but undisclosed threat. It reported no evidence of account or data access and advised customers to preserve logs and inspect for suspicious .aspx files.
Progress told ShareFile customers using Storage Zone Controllers to shut down their servers after identifying a credible external threat. Access was temporarily disabled; the company said it had no indication of unauthorized access while it investigates.
The roundup covers a reported breach of DHS’s HSIN, Canadian disruption of ransomware operations, an FBI alert about TeamPCP, a patched Writer AI vulnerability, and Adobe’s move to twice-monthly security bulletins.
Angelo Martino was sentenced to 70 months in prison after pleading guilty to helping BlackCat/ALPHV extort at least five victims. Investigators said he shared clients’ negotiation positions with the ransomware operators.
SentinelLabs says China- and India-linked groups intruded into Pakistani police networks from February 2024 to April 2026, targeting systems including Balochistan Police databases and planting fake software updates on its complaint portal.
Angelo Martino was sentenced to 70 months in prison for his role in BlackCat ransomware attacks. Prosecutors said he shared victims’ insurance and negotiation details with the group and helped maximize extortion demands.
The European Commission referred Ireland, Spain, France and the Netherlands to the EU’s top court over delayed NIS2 implementation, seeking lump-sum and daily fines. ENISA reported thousands of incidents, with public administration the most targeted sector.
The NSA renamed its Office of Computer Network Operations back to Tailored Access Operations as part of a leadership-driven reorganization intended to improve offensive cyber capabilities and bring developers and operators closer together.
