In Other News: Trump Mobile Data Breach, FIFA World Cup Phishing, CISA Responds to Supply Chain Attacks 2026-05-29 at 21:23 By SecurityWeek News Noteworthy stories that might have slipped under the radar: Trump Mobile exposes customer data, phishers target the 2026 FIFA World Cup, CISA responds to recent supply chain attacks. The post In Other […]
Charter Communications Data Breach Could Impact Nearly 5 Million 2026-05-29 at 17:49 By Ionut Arghire The notorious ShinyHunters extortion group leaked over 42 million records allegedly stolen from Charter in April. The post Charter Communications Data Breach Could Impact Nearly 5 Million appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original
Charter Communications Data Breach Could Impact Nearly 5 Million Read More »
Cybercriminals sail away with data from 6 million Carnival customers 2026-05-28 at 17:04 By Sinisa Markovic Carnival Corporation, one of the world’s largest cruise operators, confirmed a data breach weeks after the ShinyHunters hacking group claimed it had stolen millions of customer records. Carnival acknowledged a phishing incident involving a single employee account and stated
Cybercriminals sail away with data from 6 million Carnival customers Read More »
A single typo could derail your World Cup plans 2026-05-28 at 12:42 By Sinisa Markovic Cybercriminals are spoofing Fédération Internationale de Football Association (FIFA) websites ahead of the 2026 FIFA World Cup, the FBI warns. The attackers are registering lookalike domains with small spelling changes or different domain endings to impersonate FIFA websites and services.
A single typo could derail your World Cup plans Read More »
Oil shipments, drone makers, and a poisoned code library targeted in recent APT campaigns 2026-05-28 at 12:42 By Sinisa Markovic Geopolitical pressure drove much of the state-sponsored cyber activity recorded between October 2025 and March 2026, according to ESET’s latest APT Activity Report. Espionage groups aligned with China, North Korea, Russia, and Iran adjusted their
Police arrest suspect in Ajax football club hack that exposed 300,000 fan records 2026-05-28 at 10:10 By Sinisa Markovic The Dutch National Police arrested a man suspected of hacking into the computer systems of AFC Ajax, a football club from Amsterdam. “On the morning of Tuesday, May 26, detectives arrested a 35-year-old man from the
Police arrest suspect in Ajax football club hack that exposed 300,000 fan records Read More »
AI chatbot recommendations lure users to cryptojacking malware sites 2026-05-27 at 22:27 By Sinisa Markovic Cybercriminals are using AI chatbot interactions alongside poisoned search results to direct users to malicious download sites in an active cryptojacking campaign, Microsoft has warned. The campaign impersonates legitimate software tools such as CrystalDiskInfo, HWMonitor, Display Driver Uninstaller (DDU), FurMark,
AI chatbot recommendations lure users to cryptojacking malware sites Read More »
Romanian Hacker Sentenced to Prison in US for Selling Access to State Network 2026-05-27 at 20:02 By Eduard Kovacs Catalin Dragomir previously pleaded guilty to selling access to an Oregon state government office’s network. The post Romanian Hacker Sentenced to Prison in US for Selling Access to State Network appeared first on SecurityWeek. This article
Romanian Hacker Sentenced to Prison in US for Selling Access to State Network Read More »
Hackers are knocking on office doors pretending to be IT staff 2026-05-27 at 18:09 By Sinisa Markovic The Silent Ransom Group (SRG) is targeting law firms using social engineering techniques and an unusual tactic for cybercriminals: showing up at victims’ offices in person while posing as IT staff, the FBI warns. The group, also known
Hackers are knocking on office doors pretending to be IT staff Read More »
FBI: Hackers Sending Operatives in Person to Insert USB Drives and Steal Data 2026-05-27 at 11:46 By Ionut Arghire The FBI has issued an alert warning of Silent Ransom Group attacks targeting law firms. The post FBI: Hackers Sending Operatives in Person to Insert USB Drives and Steal Data appeared first on SecurityWeek. This article
FBI: Hackers Sending Operatives in Person to Insert USB Drives and Steal Data Read More »
Coinflow CISO on crypto payments security under AI pressure 2026-05-27 at 09:24 By Mirko Zorz Crypto payment firms sit near the top of the target list for advanced persistent threat groups, and the workload on their security leaders keeps growing. Malcolm Portelli, CISO at Coinflow, runs the company’s security program from Malta. Coinflow is headquartered
Coinflow CISO on crypto payments security under AI pressure Read More »
Chinese phishing gangs grow into a force to be reckoned with 2026-05-26 at 17:09 By Sinisa Markovic Chinese-language phishing-as-a-service (PhaaS) communities are expanding in an area historically dominated by Russian-speaking cybercriminal groups. The Google Threat Intelligence Group (GTIG) analyzed a dozen active PhaaS offerings operating in Chinese-language underground communities and found mature services, with several
Chinese phishing gangs grow into a force to be reckoned with Read More »
Admins of Bulletproof Hosting Service Used by Russian Hackers Arrested in Netherlands 2026-05-26 at 13:38 By Ionut Arghire The two own Dutch companies that allegedly provided bulletproof hosting services to Russia-aligned threat actors. The post Admins of Bulletproof Hosting Service Used by Russian Hackers Arrested in Netherlands appeared first on SecurityWeek. This article is an
Admins of Bulletproof Hosting Service Used by Russian Hackers Arrested in Netherlands Read More »
Lessons for organizations from the Verizon 2026 Data Breach Investigations Report 2026-05-25 at 08:59 By Help Net Security This is my favourite time of the year, not just because spring is here and the promise of summer is on the way. But also, because one of my must reads each year gets published. There are
Lessons for organizations from the Verizon 2026 Data Breach Investigations Report Read More »
Canadian Man Arrested for Operating Kimwolf Botnet 2026-05-22 at 15:45 By Eduard Kovacs Jacob Butler, 23, has been arrested in Canada and US authorities are seeking his extradition on computer hacking charges. The post Canadian Man Arrested for Operating Kimwolf Botnet appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Canadian Man Arrested for Operating Kimwolf Botnet Read More »
Suspected KimWolf botnet admin arrested over DDoS-for-hire operation 2026-05-22 at 15:08 By Sinisa Markovic U.S. and Canadian authorities arrested and charged a Canadian man accused of operating the KimWolf DDoS botnet, a service linked to attacks that infected more than one million devices worldwide. Jacob Butler, 23, of Ottawa, Canada, also known online as “Dort,”
Suspected KimWolf botnet admin arrested over DDoS-for-hire operation Read More »
‘First VPN’ Cybercrime Service Disrupted, Administrator Arrested 2026-05-22 at 15:08 By Eduard Kovacs The FBI says First VPN has been used by dozens of ransomware groups for network reconnaissance and intrusions. The post ‘First VPN’ Cybercrime Service Disrupted, Administrator Arrested appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
‘First VPN’ Cybercrime Service Disrupted, Administrator Arrested Read More »
Microsoft 365 users targeted by new phishing threat that bypasses MFA 2026-05-22 at 12:17 By Sinisa Markovic Microsoft 365 access tokens are being targeted by an emerging Phishing-as-a-Service (PhaaS) platform called Kali365, the FBI is warning. First observed in April 2026, Kali365 has been distributed through Telegram, allowing cybercriminals to obtain Microsoft 365 access tokens
Microsoft 365 users targeted by new phishing threat that bypasses MFA Read More »
Authorities dismantle First VPN, used by ransomware actors 2026-05-21 at 17:12 By Anamarija Pogorelec First VPN, a virtual private network service marketed to cybercriminals, promising anonymity for its users, was taken offline on May 19 and 20 as part of Operation Saffron. During the operation, French and Dutch authorities, with support from Europol and Eurojust,
Authorities dismantle First VPN, used by ransomware actors Read More »
JOMANGY: INJ3CTOR3’s Self-Healing FreePBX Toll Fraud Campaign 2026-05-21 at 16:56 By rohansinhacyblecom Executive Summary Cyble Research & Intelligence Labs (CRIL) has identified an active FreePBX exploitation campaign, with high confidence tied to INJ3CTOR3, an actor with a documented history of targeting VoIP infrastructure for financial gain since 2019. The campaign deploys a multi-stage Bash dropper
JOMANGY: INJ3CTOR3’s Self-Healing FreePBX Toll Fraud Campaign Read More »