Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3793 articles
Angelo John Martino III was sentenced to 70 months after pleading guilty to conspiring with BlackCat affiliates and using confidential client information to help extort $75.3 million from five U.S. companies.
npm 12 disables lifecycle scripts and Git and remote URL dependencies by default, requiring approval. GitHub also announced limits on 2FA-bypass tokens, while pnpm 11.10 adds registry-bound authentication configuration.
Datadog Security Labs reports overlapping campaigns using dormant GitHub accounts and compromised tokens to enumerate organizations and users. In some cases, the activity reportedly went beyond public data and cloned a private repository.
Team Europe won the first Women International Cybersecurity Challenge in Dublin. Nine regional teams competed in technical challenges including cryptography, forensics, exploitation, hardware security, and attack and defence.
The episode discusses PolinRider’s spread into Go and PHP, malicious npm packages attributed to a cybersecurity startup, a lawsuit over an allegedly false IOC, and Open VSX’s security controls.
Microsoft says AI-assisted vulnerability discovery may increase Windows security updates. Its MDASH system scans critical binaries and validates findings; Microsoft is also updating its Secure Development Lifecycle for AI-enabled threats.
ReliaQuest says Helix uses vishing, device-code phishing and MFA abuse to access SharePoint, add an authenticator for persistence and bulk-download files for extortion. It sees possible links to ShinyHunters and BlackFile and recommends disabling device-code login.
Alexis Aldair Chavez, leader of the 764 offshoot 8884, was sentenced to 40 years in federal prison for sexually exploiting children. Prosecutors said he and co-conspirators used online services to groom and coerce victims.
Interpol said Operation First Light led to more than 5,800 arrests, $293 million seized and over 142,000 victims identified across 97 countries while targeting social-engineering scams and money laundering.
INTERPOL says Operation First Light 2026 led to 5,811 arrests and $293 million in asset seizures across 97 countries. Investigators identified over 142,000 victims and blocked 31,014 bank accounts.
Microsoft plans to disable and remove OWA Light in an Exchange Server update estimated for August 2026. Admins can already block the legacy client using Exchange PowerShell commands.
Israeli startup QIZ Security raised $17 million in seed funding to grow its platform for discovering and managing cryptographic assets, identifying weaknesses, and prioritizing remediation across on-premises, cloud, and hybrid environments.
The UK’s NCSC outlined Cyber Shield, a proposed national agentic-AI cyber defense effort, while the government launched a voluntary Cyber Resilience Pledge with 60 founding signatories and three commitments for organizations.
Spanish startup 8Layers raised a $1.1 million pre-seed extension, bringing its early-stage funding to $2.9 million. Its identity security platform connects to identity providers to assess risks, detect threats and support compliance.
Sysdig’s June 2026 briefing covers the confirmed compromise of France’s Tchap app, Novo Nordisk’s reported unauthorized access and FulcrumSec’s exfiltration claim, plus cloud attacks, AI misuse, GitHub workflow abuse and exploited vulnerabilities.
Okta reports that O-UNC-066, also known as Pink, has used vishing and a phishing kit to trick Microsoft 365 users into authorizing fraudulent passkeys. The activity has been observed across industries; no direct Microsoft account compromise was observed.
Taiwan charged two businessmen accused of leasing LINE accounts to China-linked operators who impersonated journalists and used fake encrypted-communications software to deliver malware. The case adds official backing to earlier ICIJ and Citizen Lab findings.
Block agreed to pay $45 million to settle allegations from 46 states that Cash App misled users about security and left them vulnerable to fraud. The agreement requires 24-hour live support, including coverage by a real person.
Eight Greek victims whose devices had confirmed Predator spyware traces are suing Intellexa and 13 associated individuals, seeking about €7.6 million. Their trial is scheduled for April 2027.
At RiskX Singapore 2026, Recorded Future and Mastercard discussed connecting cyber and payment-fraud signals to detect scams, compromised cards, and Magecart infections before criminals monetize them.
The Paris Peace Forum is launching INTAiC, an international initiative to assess AI-related threats to internet infrastructure, maintain a threat resource for defenders and support independent evaluations of frontier model cyber capabilities.
Proofpoint reports UNK_MassTraction has targeted U.S. and Canadian universities via malicious emails exploiting Roundcube flaws CVE-2024-42009 and CVE-2025-49113 to steal credentials and deploy backdoors. China alignment is a low-confidence assessment.
Socket researchers say at least 17 fake payment SDK packages on npm and PyPI stole credentials and tokens, sending data to an AWS-hosted server. They recommend removing the packages, rotating secrets and checking CI logs.
Okta says O-UNC-066, linked to the Pink extortion operation, has used vishing and fake Entra passkey pages to capture Microsoft 365 credentials and MFA responses and register attacker-controlled passkeys.
