Russian Cybercriminal Gets 2-Year Prison Sentence in US 2026-03-25 at 18:18 By Eduard Kovacs Ilya Angelov was a member of the cybercrime group tracked as TA-551, Shathak, Gold Cabin, Monster Libra, and ATK236. The post Russian Cybercriminal Gets 2-Year Prison Sentence in US appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]
Russian Cybercriminal Gets 2-Year Prison Sentence in US Read More »
Botnet operator behind $14 million in ransomware extortion payments gets 24 months behind bars 2026-03-25 at 17:13 By Sinisa Markovic A Russian national has been sentenced to 24 months in prison after admitting he managed a botnet used to launch ransomware attacks against dozens of U.S. companies. The judge also imposed a $100,000 fine and
US Prisons Russian Access Broker for Aiding Ransomware Attacks 2026-03-25 at 12:46 By Eduard Kovacs Aleksei Volkov has been sentenced to 81 months in prison for his role in Yanluowang ransomware attacks. The post US Prisons Russian Access Broker for Aiding Ransomware Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View
US Prisons Russian Access Broker for Aiding Ransomware Attacks Read More »
Russian initial access broker helped ransomware gangs extort millions, sentenced to 81 months 2026-03-24 at 19:53 By Sinisa Markovic A Russian citizen, Aleksei Volkov, was sentenced to 81 months in prison for helping ransomware groups carry out attacks causing over $9 million in actual losses and over $24 million in intended losses, after being arrested
Vulnerabilities from years ago still opening doors for attackers 2026-03-24 at 14:02 By Sinisa Markovic Exploitation timelines continued to compress in enterprise environments, with newly disclosed flaws reaching active use almost immediately and older weaknesses remaining active years after disclosure. (Source: Cisco Talos) Findings from Cisco Talos’ 2025 Year in Review show how attackers combined
Vulnerabilities from years ago still opening doors for attackers Read More »
India’s Evolving Cyber Threat Landscape: State-Sponsored Attacks, Hacktivism, and What’s Next in 2026 2026-03-24 at 12:32 By Ashish Khaitan The India cyber threat landscape 2026 is no longer defined by isolated incidents or opportunistic attacks. It has become a dynamic, constantly shifting battleground shaped by geopolitical tensions, rapid digitization, and highly advanced hackers. What once looked like sporadic cybercrime
Chip Services Firm Trio-Tech Says Subsidiary Hit by Ransomware 2026-03-23 at 17:17 By Ionut Arghire The semiconductor company says hackers deployed file-encrypting ransomware on the network of a subsidiary in Singapore. The post Chip Services Firm Trio-Tech Says Subsidiary Hit by Ransomware appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original
Chip Services Firm Trio-Tech Says Subsidiary Hit by Ransomware Read More »
North Korea’s Crypto Theft Operations: The Role of Lazarus Group in State-Sponsored Financial Warfare 2026-03-21 at 17:05 By Ashish Khaitan The latest Bitrefill cyberattack offers a revealing look into how state-sponsored cybercrime has evolved into a strategic financial weapon. The latest development revolves around the threat actor Lazarus Group, a hacking collective widely attributed to the DPRK (North Korea), whose operations
Cisco FMC flaw was exploited by Interlock weeks before patch (CVE-2026-20131) 2026-03-20 at 15:21 By Zeljka Zorz A critical vulnerability (CVE-2026-20131) in Cisco Secure Firewall Management Center (FMC) that Cisco disclosed and patched in early March 2026 has been exploited as a zero-day by the Interlock ransomware gang, Amazon CISO and VP of Security Engineering
Cisco FMC flaw was exploited by Interlock weeks before patch (CVE-2026-20131) Read More »
Inside Russia’s Shift to Credential-Based Intrusions: What CISOs Need to Know in 2026 2026-03-19 at 13:32 By Ashish Khaitan Russia-linked hacktivist activity has entered a noticeably different phase. While earlier campaigns leaned heavily on disruption through denial-of-service and opportunistic scanning of exposed systems, the current trajectory shows a stronger dependence on credential-based intrusions and identity-based cyber attacks. For security leaders,
Inside Russia’s Shift to Credential-Based Intrusions: What CISOs Need to Know in 2026 Read More »
EDR killers are now standard equipment in ransomware attacks 2026-03-19 at 12:02 By Anamarija Pogorelec Ransomware attackers routinely deploy tools designed to disable endpoint detection and response software before launching encryptors. These tools, known as EDR killers, have become a standard component of ransomware intrusions. ESET Research tracked nearly 90 EDR killers actively used in
EDR killers are now standard equipment in ransomware attacks Read More »
Cisco Firewall Vulnerability Exploited as Zero-Day in Interlock Ransomware Attacks 2026-03-19 at 11:01 By Eduard Kovacs Amazon found evidence that the FMC software vulnerability has been exploited since late January, and found links to Russia. The post Cisco Firewall Vulnerability Exploited as Zero-Day in Interlock Ransomware Attacks appeared first on SecurityWeek. This article is an
Cisco Firewall Vulnerability Exploited as Zero-Day in Interlock Ransomware Attacks Read More »
Oracle EBS Hack: Only 4 Corporate Giants Still Silent on Potential Impact 2026-03-16 at 18:08 By Eduard Kovacs Broadcom, Bechtel, Estée Lauder, and Abbott Technologies are the only major companies that have yet to issue a public statement. The post Oracle EBS Hack: Only 4 Corporate Giants Still Silent on Potential Impact appeared first on
Oracle EBS Hack: Only 4 Corporate Giants Still Silent on Potential Impact Read More »
The Ultimate Guide to Dark Web Monitoring in 2026: Protect Your Data Before Attackers Strike 2026-03-13 at 16:29 By Ashish Khaitan In 2026, cyber threats are originating on the dark web, where stolen credentials, exploit kits, and attack plans are bought and sold before they ever reach corporate networks. Organizations are turning to dark web
Australia, New Zealand, Tonga, Warn of Rising INC Ransom Attacks Targeting Pacific Networks 2026-03-09 at 15:37 By Ashish Khaitan Cybersecurity agencies across the Pacific region are sharing concerns about the ransomware group INC Ransom’s expanding activities and the growing influence of its affiliate network. A joint advisory issued by the Australian Cyber Security Centre (ACSC), National
Russian Ransomware Operator Pleads Guilty in US 2026-03-05 at 15:02 By Eduard Kovacs Evgenii Ptitsyn was extradited to the United States from South Korea in November 2024. The post Russian Ransomware Operator Pleads Guilty in US appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Russian Ransomware Operator Pleads Guilty in US Read More »
ENISA’s Updated Cybersecurity Methodology Aligns with NIS2 and EU Cybersecurity Act 2026-02-26 at 13:17 By Ashish Khaitan The European Union Agency for Cybersecurity (ENISA) released its updated cybersecurity exercise methodology, providing organizations and governments across Europe with a structured framework for planning, executing, and evaluating cybersecurity exercises. Designed to be both practical and theoretically robust, this methodology offers an end-to-end approach to enhancing
ENISA’s Updated Cybersecurity Methodology Aligns with NIS2 and EU Cybersecurity Act Read More »
Medical Device Maker UFP Technologies Hit by Cyberattack 2026-02-25 at 18:25 By Eduard Kovacs UFP Technologies appears to have been targeted in a ransomware attack that involved data theft and file-encrypting malware. The post Medical Device Maker UFP Technologies Hit by Cyberattack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original
Medical Device Maker UFP Technologies Hit by Cyberattack Read More »
CISA flags exploited FileZen command injection bug, patch now! (CVE-2026-25108) 2026-02-25 at 12:14 By Zeljka Zorz CISA has added CVE-2026-25108, an OS command injection vulnerability in Soliton Systems’ FileZen secure file transfer solution, to its Known Exploited Vulnerabilities (KEV) catalog. The vendor has confirmed active exploitation, stating it has received multiple reports of damage caused
CISA flags exploited FileZen command injection bug, patch now! (CVE-2026-25108) Read More »
US Healthcare Diagnostic Firm Says 140,000 Affected by Data Breach 2026-02-23 at 17:35 By Eduard Kovacs The Everest ransomware group has taken credit for a hacker attack on Vikor Scientific, now called Vanta Diagnostics. The post US Healthcare Diagnostic Firm Says 140,000 Affected by Data Breach appeared first on SecurityWeek. This article is an excerpt
US Healthcare Diagnostic Firm Says 140,000 Affected by Data Breach Read More »