Officials once again warn defenders that Russian hackers are targeting network devices

State-sponsored attackers are targeting critical infrastructure networks in defense, communications, energy, finance, government and health care.

cyberscoop.com

Lessons Learned from CISA’s Recent GitHub Leak

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a data leak in which a contractor published dozens of internal CISA credentials -- including AWS Govcloud keys --...

krebsonsecurity.com

Europe strikes out against Russia’s Turla over espionage, ‘destructive attacks’

The EU and UK have imposed coordinated sanctions targeting Russian cyberespionage networks, including the FSB and GRU, following destructive infrastructure attacks.

cyberscoop.com

VPN service favored by ransomware groups is sanctioned by US

The U.S. Treasury Department announced sanctions against First VPN Service (1VPNS) and its Ukrainian administrator for aiding ransomware groups. Separately, a Belarusian man was sanctioned for malware...

therecord.media

Hackers backdoor Jscrambler npm package with infostealer malware

The Jscrambler client-side web security company disclosed that a threat actor published a malicious version of its npm package that has been downloaded almost 1,500 times.

bleepingcomputer.com

CISA looks to remedy ailments from big May credential leak

Following a major AWS GovCloud credential leak on GitHub, CISA released a forensic report detailing updated security plays and improvements to vulnerability reporting.

cyberscoop.com

Armenian national pleads guilty to Ryuk ransomware attacks

Karen Vardanyan faces up to 15 years in federal prison and agreed to pay nearly $1.2 million in restitution.

cyberscoop.com

AI Found a Root Bug in Linux That Everyone Missed for 15 Years

Plus: The Pentagon is training amateurs to become part of its hacker army, a Flock license plate reader error led to cops surrounding a car reviewer, and more.

wired.com

Opera rolls out Paste Protect feature to fight ClickFix attacks

Opera has introduced Paste Protect, a security feature designed to block ClickFix-style attacks that trick users into executing malicious commands through social engineering.

bleepingcomputer.com

ClickFix Scams Abuse Google, Cloudflare Checks to Deliver 7 Malware Families

Malwarebytes links fake Google and Cloudflare verification pages to shared ClickFix infrastructure delivering StealC, NetSupport and other malware.

hackread.com

The 'first' AI-run ransomware attack still needed a human | TechCrunch

An AI agent carried out the technical execution of a real-world ransomware attack for the first known time, but new details show a human still chose the victim, set up the infrastructure, and supplied...

techcrunch.com

UAT-7810 continues building ORB networks using new malware

Talos’ latest findings on UAT-7810 indicate that the threat actor continues to develop their custom-made malware.

blog.talosintelligence.com

Felons, Fraudsters Flog Offensive Cybersecurity Startup

A cybersecurity startup dangling millions of dollars to acquire zero-day security vulnerabilities in popular software is run by a pair of far-right conspiracy theorists and convicted felons whose most...

krebsonsecurity.com

China-Linked APT Expands Proxy Network With New Malware

Cisco Talos said China-linked APT UAT-7810 is growing its proxy relay network with new malware

infosecurity-magazine.com

Hackers exploit Roundcube flaw to spy on academic researchers

A China-linked threat cluster has been exploiting vulnerable Roundcube servers at U.S. and Canadian universities to steal credentials and deploy backdoor malware.

bleepingcomputer.com

Interpol cybercrime crackdown nets 5,800 arrests across 97 countries

The anti-fraud crackdown, dubbed Operation First Light, identified more than 142,000 victims of various social-engineering scams.

cyberscoop.com

Former ransomware negotiator gets 4 years for BlackCat attacks

A former employee of cybersecurity incident response company DigitalMint was sentenced to 70 months in prison for targeting U.S. companies in BlackCat (ALPHV) ransomware attacks.

bleepingcomputer.com

Ransomware Never Stopped: Over 9,000 Confirmed Attacks Since 2018 - Security Affairs

Ransomware remains above 1,400 attacks yearly since 2023. Qilin leads in 2026, while the U.S. remains the main target.

securityaffairs.com

China, India ran separate spying campaigns against same Pakistani police force

The activity, in some cases breaching the exact same systems, ran between February 2024 and April 2026 and centered on the force responsible for the country’s southwestern province that has been the s...

therecord.media

New ‘GigaWiper’ Malware Combines Espionage & Destructive Capabilities

A new multi-purpose backdoor allows cyber threat actors to conduct both quiet espionage activity and destructive wiping operations

infosecurity-magazine.com

Hackers exploit critical auth bypass in Gitea Docker image

Hackers are actively exploiting a critical vulnerability in the official Docker image for the Gitea self-hosted Git service that allows attackers to impersonate any user, including administrators.

bleepingcomputer.com

XSS forum: from DaMaGeLaB to the 2025 takedown

Inside XSS.is, the Russian cybercrime forum seized in 2025. A data-led profile from 123,241 leaked messages: what it traded, who ran it, its place in the ransomware kill chain, and a searchable countr...

ransomnews.com

DHS to unveil replacement council for critical infrastructure cybersecurity

DHS is launching ANCHOR-CI, a new CISA-managed program to revive critical infrastructure cybersecurity information sharing after a year-long gap.

cyberscoop.com

Decades-Old Bash Tricks Expose AI Coding Agents to Supply Chain Attacks

Decades-old Bash shell tricks can bypass safeguards in most open source AI coding agents, creating a new software supply chain risk.

securityweek.com

BlueHammer Vulnerability Exploited in Ransomware Attacks

A Microsoft Defender vulnerability tracked as BlueHammer and CVE-2026-33825 is being exploited in ransomware attacks

securityweek.com

ClickFix Now Cybercriminals' Favorite Malware Delivery Technique

ReliaQuest report warns of a surge in ClickFix social engineering attacks against Windows and macOS users

infosecurity-magazine.com

Nissan Employee Data Breached in Oracle PeopleSoft Hack

Nissan has confirmed a data breach tied to a zero-day campaign against Oracle PeopleSoft customers, with attackers suspected of stealing employee records across the US, Canada, Mexico, and Brazil. The...

hendryadrian.com

Blackfield ransomware asks Nidec Corporation for $2 million ransom

The Blackfield ransomware gang is asking for a $2 million ransom from Nidec Corporation, a large Japanese manufacturer of electronic components for automotive and computing applications.

bleepingcomputer.com

UK Healthcare Sector Records Tenfold Increase in Cyber-Attacks

SonicWall records 264,000 events in first five months of 2026 as UK hospitals come under siege

infosecurity-magazine.com

Over 300 UK Firms Hit by Ransomware in a Year

Report Fraud data reveals that more than half of 323 UK ransomware victims last year were SMEs

infosecurity-magazine.com