cybercrime
Ukrainian ransomware hacker sentenced, $11 million reward offered for co-conspirator
A Ukrainian national who participated in ransomware attacks targeting hospitals, government entities, law firms, and other businesses was sentenced to five years and 10 months …
FBI seizes Virtualine, bulletproof hosting provider that promised to shield criminals from police
The FBI has seized virtualine.net, the domain of a bulletproof hosting provider that laundered money for its criminal customers and kept a forum trading in child sexual abuse …
Hackers bury inboxes in spam then show up on Microsoft Teams posing as IT support
Threat actors are flooding employees’ inboxes with spam and then contacting them on Microsoft Teams as IT support, offering to fix the problem they created, Arctic Wolf has …
Private repos still leak secrets to Gheist, a stolen GitHub token campaign
Wiz Research has recovered more than 13,500 planted branches from 850+ compromised GitHub accounts, the work of a campaign it calls Gheist, after the user agent the tool sends …
Microsoft 365 accounts compromised at 79 organizations, no passwords needed
An attacker who spent ten weeks replaying stolen Microsoft 365 sign-in sessions broke into email accounts at 79 organizations and used hidden inbox rules to keep victims from …
Hackers hijack exposed AI models to launch cyberattacks at victims’ expense
An attack tool built around AI goes looking for AI models that anyone on the internet can reach, then uses them to plan break-ins while the model’s owner pays for the …
Africa cybercrime crackdown nets 1,462 arrests and over $105 million
Police in 21 countries arrested 1,462 suspects and took down 10,909 malicious networks in Operation Serengeti III, an INTERPOL-coordinated cybercrime sweep across Africa that …
Hackers disguise phishing as promising business opportunities
Attackers are breaking into business email accounts with short messages asking whether a company can quote on an upcoming project, the kind of request sales and procurement …
Stolen AI API keys are paying for hackers’ autonomous scans
A seller on a restricted criminal forum is marketing an autonomous hacking tool that runs on stolen OpenAI, Anthropic and Google API keys, so the key’s owner pays for …
KGB RAT trojan packs webcam spying, password theft and a “fun” menu to terrorize victims
A Windows trojan advertised on hacking forums for as little as $150 a month promises buyers access to a victim’s webcam, microphone, keystrokes and saved passwords, and comes …
Microsoft disrupts phishing network behind more than a billion scam messages
Microsoft uncovered a criminal marketplace supplying tools and accounts used in phishing scams worldwide. Attackers used these resources to target organizations in healthcare, …
Phase Eight, Hobbs and Whistles owner joins growing list of fashion retailers targeted by hackers
People who have shopped with Phase Eight, Hobbs or Whistles will have to wait to find out whether their personal information was exposed in a cyberattack on the company behind …
Featured news
Resources
Don't miss
- OpenSSH flaw exploited in the wild just hours after disclosure (CVE-2026-123158)
- Residential proxy traffic caught leaving the White House network
- US agencies warn attackers are targeting refrigeration systems that protect food and medicine
- November 2026 Patch Tuesday forecast: Old software continues to bite
- 87% say their AI controls need to work better