News Archive
2287 stories · page 1 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
Canadian cybersecurity executive arrested in federal extortion case
A Canadian cybersecurity executive was arrested in Pennsylvania on Thursday, facing federal charges of conspiracy to commit extortion. Edward Dubrovsky, 54, a co-founder and former Chief Operating Officer of CYPFER, a firm specializing in ransomware negotiation, is charged with conspiring to threaten the confidentiality of information for extortion and conspiring to commit Hobbs Act extortion,…
Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management
AI SPERA, the company behind the cyber threat intelligence platform Criminal IP, has announced AITEM (AI-Powered Threat Exposure Management), an expansion of its Attack Surface Management (ASM) offerings. AITEM aims to move beyond traditional asset discovery to provide a more comprehensive approach to understanding, prioritizing, and responding to security exposures. The platform is scheduled…
AI Is Getting Really Good at Messing With Cybercriminals
Anti-cybercrime initiatives are increasingly deploying artificial intelligence to disrupt scammers by engaging them with lifelike bots, which the criminals mistake for genuine victims. This strategy aims to waste scammers' time and resources while gathering intelligence on their operations.
FBI Arrests Ransomware Negotiation Firm Co-Founder in ShinyHunters Probe
The Federal Bureau of Investigation (FBI) has reportedly arrested Edward Dubrovsky, a co-founder of the ransomware negotiation firm Cypfer and currently associated with CyberSteward. The arrest is said to be part of the ongoing ShinyHunters investigation, specifically in connection with an incident involving FBI job applicant data.
Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison
A former core infrastructure engineer has been sentenced to prison for an attempted cyber extortion plot against an industrial firm. The engineer reportedly deleted administrative accounts and reset hundreds of user passwords, subsequently demanding a ransom of 20 Bitcoin to prevent further disruption to the company's servers.
The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't
A new report highlights a significant blind spot in enterprise security architectures concerning the proliferation of third-party AI agents. The forthcoming 2026 State of Agent Security Report indicates that current security models, often designed to protect AI systems directly chosen and deployed by an organization, frequently fail to account for AI capabilities embedded within third-party…
FBI Arrests Founder of Ransomware Negotiation Firm
Federal agents have arrested a Canadian cybersecurity professional in Pennsylvania, linking him to an ongoing investigation into the ShinyHunters hacking group. Edward Dubrovsky, co-founder of the Canadian firm CyberSteward, was taken into custody on October 8, facing charges of conspiracy to threaten to impair the confidentiality of information with intent to extort money, and interference…
ASOS Breach Reveals the Risks in Customer-Facing SaaS
A recent security incident involving the British online fashion retailer ASOS has brought to light the inherent risks associated with customer-facing Software-as-a-Service (SaaS) platforms. The breach reportedly showcased how the compromise of a single user identity could serve as an initial access vector, subsequently allowing attackers to achieve broad penetration into a company's internal…
Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks
A new malvertising campaign, dubbed "Adception" by security researchers at Push Security, is leveraging Google Ads and Bing redirects to distribute fake Claude installers that deploy "ClickFix" attacks. The campaign was identified after researchers observed malicious Google ads targeting users searching for "claude mac."
AI Fuels Cybersecurity Mergers and Acquisitions
The cybersecurity industry is currently undergoing a substantial wave of mergers and acquisitions (M&A), with 117 deals reported in the most recent quarter. A key driver behind this heightened activity appears to be the increasing integration of artificial intelligence (AI) across various sectors, leading to a broader range of companies seeking to acquire cybersecurity capabilities.
AWS AgentCore security undone by prompt requesting credentials
Researchers have identified a critical vulnerability in Amazon Bedrock AgentCore that could allow an attacker to compromise all agents within an AWS account and region by exploiting insufficient network isolation and overly permissive default IAM roles. The flaw, disclosed by Zenity Labs, centers on an attacker's ability to extract temporary AWS credentials from an agent through a single prompt.
Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories
Cybersecurity researchers have reported an active credential-theft campaign leveraging GitHub Actions workflows, which has led to the compromise of tens of thousands of repositories. The campaign reportedly exploited two high-profile open-source maintainer accounts to propagate a malicious workflow into over 340 repositories directly. One notable instance involved the account of Takashi Kitao,…
Germany Arrests Suspected Qilin Ransomware Leader After Japan Detention
German authorities have arrested a Russian national suspected of being a key figure in the Qilin ransomware group. The individual was initially detained in Japan in May while traveling as a tourist in Osaka, following an arrest warrant issued by Germany in connection with a ransomware incident on German soil.
Japan confirms arrest of Russian Qilin operative, extradition to Germany
Japanese authorities have confirmed the arrest and extradition of a Russian national suspected of involvement with the Qilin ransomware group. The 28-year-old individual, whose identity has not been publicly disclosed, was apprehended in Japan based on an arrest warrant issued by Germany.
Introducing Clef-omni with full multimodality, plus a faster Clef and a cheaper Clef-flash
Clef, a new multimodal large language model (LLM), has been introduced, offering enhanced capabilities for processing and generating content across various data types. The model is designed to handle text, images, and audio inputs and outputs, marking a significant advancement in multimodal AI.
MonsterCloud CEO Zohar Pinhasi Accused of Paying Hackers, Defrauding Victims
Reports indicate that the U.S. Department of Justice (DOJ) has brought accusations against Zohar Pinhasi, the CEO of MonsterCloud, alleging a scheme that involved paying ransomware operators for decryption keys while simultaneously defrauding the victims. The core of the accusation centers on Pinhasi's alleged practice of secretly negotiating with and paying ransomware gangs, then charging the…
FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack
The Federal Bureau of Investigation has reportedly arrested another individual suspected of involvement with the ShinyHunters extortion group. FBI Director Kash Patel announced the arrest on October 9, stating the individual is believed to be a co-conspirator. This development follows ShinyHunters' claim in September to have breached the FBI's jobs portal and exfiltrated sensitive data…
FBI Arrests Suspected ShinyHunters Operative
The Federal Bureau of Investigation (FBI) has reportedly arrested an individual suspected of involvement with the data-scraping group known as ShinyHunters. This development, while not yet widely covered, has been noted by industry observers as a significant event in the ongoing efforts against cybercrime.
Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto
Threat actors are actively exploiting two unpatched vulnerabilities in the AhsayCBS backup management platform to deploy webshells and cryptocurrency miners. The targeted attacks, first observed on October 7, have affected at least five organizations, primarily managed service providers (MSPs) and system integrators.
FBI arrests another suspected ShinyHunters hacker after agency breach
The FBI has announced the arrest of another individual suspected of involvement with the ShinyHunters extortion group, believed to be responsible for a recent breach of the agency's systems. FBI Director Kash Patel confirmed the arrest on Friday, stating it was the latest in a series of actions aimed at dismantling the group.
Leader of vast money mule operation that laundered cybercriminal proceeds pleads guilty
Oleg Korniev, a 42-year-old dual citizen of Ukraine and Russia, pleaded guilty in U.S. federal court on Thursday to charges related to his leadership of an international money laundering operation known as Your Mule Cashout (YMCO). The organization, active from 2007 to 2014, utilized a network of over 15,000 unwitting money mules across the United States, Germany, Italy, the United Kingdom,…
Hundreds of thousands impacted by data breach at biosensor firm iRhythm
Medical device manufacturer iRhythm has confirmed a data breach affecting at least 360,000 individuals, following a cyberattack that occurred in June. The company, known for its Zio Patch cardiac monitoring device, began issuing breach notifications to regulators and victims across multiple states this week.
FBI touts another ShinyHunters arrest in response to data breach
The FBI announced another arrest this week in connection with the ShinyHunters cybercriminal organization, following a recent breach of the FBIjobs.gov domain. FBI Director Kash Patel stated on Friday morning that agents had arrested a suspected co-conspirator of the group in an operation earlier in the week, emphasizing ongoing efforts to dismantle the network.
Germany arrests alleged core Qilin ransomware member after extradition
German authorities have arrested a Russian national suspected of being a key member of the Qilin ransomware group. The individual was extradited from Japan earlier this month, following their initial detention in May at a hotel in Osaka.