The Huntress SOC recently came across two incidents involving The Gentlemen ransomware, an operation that first emerged in mid-2025 and has been very active since then, with Ransomware.live...
NightSpire is a ransomware family first identified in early 2025 using double extortion, stealing files before encryption and threatening to leak them on a Tor-based site if victims refuse to pay....
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given U.S. federal agencies four days to secure their servers against a critical vulnerability in the LiteSpeed cPanel user-end...
In April 2026, the luxury fashion e-commerce platform Mytheresa was listed as a victim of the ShinyHunters "pay or leak" extortion group. After the ransom deadline passed, the group publicly...
The Dutch National Police arrested a 35-year-old man suspected of hacking the professional football club Ajax Amsterdam (AFC Ajax) earlier this year. [...]
Microsoft has released the KB5089573 preview cumulative update for Windows 11 versions 25H2 and 24H2, which comes with 30 changes, including performance and reliability improvements. [...]
What HappenedOn 5 May 2026, new data revealed that British romance scam victims were defrauded of a staggering £102 million last year, representing a 29% surge in reported cases.The figures come...
Wiz Research identified an active threat campaign targeting cryptocurrency organizations and software development infrastructure through social engineering, malicious meeting lures, and supply...
In March 2026, the financial services firm Ameriprise Financial was named by the ShinyHunters group in a "pay or leak" extortion campaign. The group claimed possession of more than 200GB of...
The Iranian hacking group known as MuddyWater has been linked to a new campaign affecting at least nine organizations across nine countries on four continents in the first quarter of 2026. The...
The implosion of a chemical tank at a pulp and paper mill in southwestern Washington state on Tuesday injured at least 10 people, while an undisclosed number of others had been killed or remained...
Guess they could deny the alleged intrusion … like the 2020 election results
Some internet connectivity is returning in Iran after nearly 90 days offline, web monitoring groups say. But it isn’t clear if the reconnection is permanent.
Every single day, hackers are finding new ways to crash websites and steal data. But right now, something has changed. Hackers are no longer working alone. They are now using powerful Artificial...
Microsoft has rolled out updates to fix a remote code execution vulnerability impacting SharePoint that could be exploited by bad actors in attacks without requiring any specialized conditions to...
Republican lawmakers on the House Homeland Security Subcommittee on Cybersecurity and Infrastructure Protection warned that state and local... The post House Republicans scrutinize escalating...
Hackers exploited a critical zero-day vulnerability in a server running the KnowledgeDeliver learning management system (LMS) to deploy the Godzilla web shell. [...]
Multi-factor authentication (MFA) was supposed to close a critical gap in identity security. It meant that, even if an attacker possessed the account credentials, they couldn't log in without the...
U.S. telecommunications giant Charter Communications has confirmed it suffered a data breach after the ShinyHunters extortion group threatened to leak stolen data unless a ransom is paid. [...]
Not identifying people based on their use of Wi-Fi routers, but identifying people using Wi-Fi signals. This is accomplished through what is known as WiFi sensing, or the use of WiFi signals to...
[Control systems] ABB security advisory (AV26-510)
The Indian Computer Emergency Response Team (CERT-In) has issued new guidelines requiring organizations to patch critical security vulnerabilities in internet-exposed systems within 12 hours of...
Austin Cowan had expected a quiet year. The headhunter, who helps Fortune 100 companies find and attract cybersecurity executives, knew that the markets were choppy and that corporate honchos were...
The New York State Department of Financial Services (DFS) sent a letter on Thursday urging regulated entities and people to take additional steps in light of what it calls a heightened threat...
Reform UK leader alleges Moscow hacked his phone and leaked £5M gift story, but security specialists await evidence
Former Democratic Rep. Tulsi Gabbard is resigning from her post as director of national intelligence because of her husband’s cancer battle, President Donald Trump announced Friday. The commander...
Russian President Vladimir Putin has appointed a former cybersecurity executive with alleged ties to a Russian military intelligence hacking unit as an aide to the secretary of Russia’s Security...
The U.S. military said Monday that it carried out “self-defense” strikes in southern Iran, including on missile launch sites and boats placing mines, even as President Donald Trump said on social...
The Beijing summit between U.S. President Donald Trump and Chinese President Xi Jinping produced something rarer than a breakthrough: a mutually useful ambiguity. Washington came away advertising...
The Oncology Institute has confirmed that patient information was impacted in a cybersecurity incident involving a third-party software provider. The healthcare network first disclosed the...