In Weekly Update 519, Troy Hunt describes a busy week of conference talks in Oslo and Copenhagen, including a 3D printing talk, an NDC infosec talk and a talk on cyber-related topics. He also notes that "ratbag hackers" keep dumping more data, but the excerpt names no victims, threat actors, datasets or dates. The rest covers his IoT door…
Citizen Lab documented AdFection, a campaign in which the Israeli-founded ad firm Discover-Tech delivered zero-click mercenary spyware attributed to Candiru through the online advertising ecosystem. During 2024 and 2025, 45 devices belonging to Al Jazeera were targeted. Citizen Lab calls this the first detailed public technical evidence o…
A court in Zurich sentenced an unnamed 52-year-old Ukrainian man to 12 years and nine months in prison and banned him from Switzerland for ten years. The court found him to be the lead developer of the LockerGoga, MegaCortex and Nefilim ransomware families. Victims include Norsk Hydro, Stadler Rail (500 GB stolen in 2020, reported US $6 m…
A reader comment (ResearcherZero) on Schneier on Security's squid-blogging post discusses Havana Syndrome (anomalous health incidents, AHI). It cites a 60 Minutes/CBS report that the U.S. government acquired a directed-energy weapon from a Russian criminal network and has tested it, reportedly on animals. The commenter claims that inciden…
F5 Labs reports a scanning campaign observed on its Honeynet in March 2026. It recorded 1,897 session-grouped attempts (2,821 raw events) tied to CVE-2018-14028, a WordPress 4.9.7 unrestricted file upload flaw, and the CVE entered the monthly top 10 after being absent in February. Instead of exploiting the upload flaw, the operator probes…