Russian initial access broker helped ransomware gangs extort millions, sentenced to 81 months 2026-03-24 at 19:53 By Sinisa Markovic A Russian citizen, Aleksei Volkov, was sentenced to 81 months in prison for helping ransomware groups carry out attacks causing over $9 million in actual losses and over $24 million in intended losses, after being arrested […]
Vulnerabilities from years ago still opening doors for attackers 2026-03-24 at 14:02 By Sinisa Markovic Exploitation timelines continued to compress in enterprise environments, with newly disclosed flaws reaching active use almost immediately and older weaknesses remaining active years after disclosure. (Source: Cisco Talos) Findings from Cisco Talos’ 2025 Year in Review show how attackers combined
Vulnerabilities from years ago still opening doors for attackers Read More »
M-Trends 2026: Initial Access Handoff Shrinks From Hours to 22 Seconds 2026-03-23 at 17:17 By Eduard Kovacs The latest M-Trends report is based on insights from over 500,000 hours of Mandiant incident response investigations in 2025. The post M-Trends 2026: Initial Access Handoff Shrinks From Hours to 22 Seconds appeared first on SecurityWeek. This article
M-Trends 2026: Initial Access Handoff Shrinks From Hours to 22 Seconds Read More »
North Korea’s Crypto Theft Operations: The Role of Lazarus Group in State-Sponsored Financial Warfare 2026-03-21 at 17:05 By Ashish Khaitan The latest Bitrefill cyberattack offers a revealing look into how state-sponsored cybercrime has evolved into a strategic financial weapon. The latest development revolves around the threat actor Lazarus Group, a hacking collective widely attributed to the DPRK (North Korea), whose operations
Terminated contract led to $2.5 million cyber extortion scheme 2026-03-20 at 19:32 By Sinisa Markovic A federal jury convicted Cameron Curry, 27, a Charlotte resident, of carrying out an extensive cyber extortion scheme targeting a Washington, D.C.-based international technology company. He faces up to two years in prison on each of the six charges. Curry,
Terminated contract led to $2.5 million cyber extortion scheme Read More »
In Other News: New Android Safeguards, Operation Alice, UK Toughens Cyber Reporting 2026-03-20 at 17:57 By SecurityWeek News Other noteworthy stories that might have slipped under the radar: vulnerabilities found in KVM devices, Claudy Day Claude vulnerabilities, The Gentlemen ransomware group. The post In Other News: New Android Safeguards, Operation Alice, UK Toughens Cyber Reporting
In Other News: New Android Safeguards, Operation Alice, UK Toughens Cyber Reporting Read More »
3 Men Charged With Conspiring to Smuggle US Artificial Intelligence to China 2026-03-20 at 16:43 By Associated Press The men violated U.S. export controls laws by scheming to divert massive quantities of the high-performance servers assembled in the United States to China. The post 3 Men Charged With Conspiring to Smuggle US Artificial Intelligence to
3 Men Charged With Conspiring to Smuggle US Artificial Intelligence to China Read More »
Authorities disrupt four IoT botnets behind record DDoS attacks 2026-03-20 at 12:46 By Sinisa Markovic The U.S. Justice Department and international partners have disrupted four IoT botnets linked to DDoS attacks that reached 30 terabits per second, among the largest ever recorded. The post Authorities disrupt four IoT botnets behind record DDoS attacks appeared first
Authorities disrupt four IoT botnets behind record DDoS attacks Read More »
Thousands of Magento Sites Hit in Ongoing Defacement Campaign 2026-03-20 at 12:46 By Ionut Arghire The attacks started on February 27 and have targeted e-commerce platforms, global brands, and government services. The post Thousands of Magento Sites Hit in Ongoing Defacement Campaign appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original
Thousands of Magento Sites Hit in Ongoing Defacement Campaign Read More »
Fake AI songs streamed billions of times, netting fraudster $10 million 2026-03-20 at 12:20 By Anamarija Pogorelec Michael Smith, 54, of Cornelius, North Carolina, has pleaded guilty in federal court to running a scheme that exploited music streaming platforms and diverted royalty payments from artists. He admitted to one count of conspiracy to commit wire
Fake AI songs streamed billions of times, netting fraudster $10 million Read More »
Aisuru and Kimwolf DDoS Botnets Disrupted in International Operation 2026-03-20 at 09:32 By Eduard Kovacs The lesser-known JackSkid and Mossad botnets have also been targeted in the operation. The post Aisuru and Kimwolf DDoS Botnets Disrupted in International Operation appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Aisuru and Kimwolf DDoS Botnets Disrupted in International Operation Read More »
DarkSword: Researchers uncover another iOS exploit kit 2026-03-19 at 16:54 By Zeljka Zorz A powerful iPhone hacking toolkit dubbed “DarkSword” has been used since November 2025 to compromise devices by exploiting zero-day iOS vulnerabilities, Google researchers have shared. iOS vulnerabilities exploited by DarkSword Two weeks ago, Google Threat Intelligence Group (GTIG) and iVerify disclosed the
DarkSword: Researchers uncover another iOS exploit kit Read More »
900,000 contact records exposed in Aura data breach 2026-03-19 at 13:32 By Sinisa Markovic Aura, the online safety service, confirmed that an unauthorized party accessed about 900,000 records, mostly names and email addresses from a marketing tool linked to a company it acquired in 2021. The incident occurred as a result of a targeted phone
900,000 contact records exposed in Aura data breach Read More »
Elite members of North Korean society fake their way into Western paychecks 2026-03-19 at 09:02 By Sinisa Markovic Increased federal activity, including indictments over the past year, has drawn attention to a pattern that has been unfolding inside corporate hiring pipelines. North Korean nationals are securing roles as remote IT contractors and full-time staff within
Elite members of North Korean society fake their way into Western paychecks Read More »
Cybercriminals scale up, government sector hit hardest 2026-03-18 at 09:27 By Sinisa Markovic Government agencies faced the highest volume of cyberattack campaigns in 2025, according to new findings from HPE Threat Labs, which tracked 1,186 active campaigns over the course of the year. The data covers activity observed between January 1 and December 31, 2025,
Cybercriminals scale up, government sector hit hardest Read More »
Global fraud losses climb to $442 billion 2026-03-18 at 08:01 By Sinisa Markovic Online fraud is reaching more victims and generating larger losses, driven by digital tools and organized networks operating across borders. Global trends in financial fraud (Source: Interpol) In INTERPOL’s March 2026 Global Financial Fraud Threat Assessment, financial fraud sits among the top
Global fraud losses climb to $442 billion Read More »
45,000 malicious IP addresses taken down, 94 suspects arrested 2026-03-16 at 10:33 By Sinisa Markovic An international law enforcement operation has taken down more than 45,000 malicious IP addresses and servers linked to phishing, malware, and ransomware activity. The action was carried out as part of Operation Synergia III, an investigation that ran from July
45,000 malicious IP addresses taken down, 94 suspects arrested Read More »
Fake scandal clips on Facebook bait victims into investment scams 2026-03-16 at 07:40 By Sinisa Markovic Bitdefender researchers uncovered hundreds of scam campaigns promoted through Facebook ads that use fake news stories, celebrity impersonation, and redirect chains to funnel victims into investment fraud schemes. The activity ran through 310 malvertising campaigns distributed on Meta platforms
Fake scandal clips on Facebook bait victims into investment scams Read More »
Authorities dismantle SocksEscort proxy network behind millions in fraud 2026-03-13 at 12:22 By Sinisa Markovic SocksEscort, a residential proxy network used to exploit thousands of compromised home routers worldwide and facilitate large-scale fraud that cost victims millions of dollars, has been disrupted in an international law enforcement operation led by the U.S. Department of Justice.
Authorities dismantle SocksEscort proxy network behind millions in fraud Read More »
Authorities Disrupt SocksEscort Proxy Service Powered by AVrecon Botnet 2026-03-13 at 10:31 By Eduard Kovacs Law enforcement agencies in the US and Europe targeted the cybercrime service that has impacted 360,000 devices since 2020. The post Authorities Disrupt SocksEscort Proxy Service Powered by AVrecon Botnet appeared first on SecurityWeek. This article is an excerpt from
Authorities Disrupt SocksEscort Proxy Service Powered by AVrecon Botnet Read More »