8 casos · pág. 1/1
U.S. Army soldier Cameron John Wagenius (alias Kiberphant0m), 22, was sentenced in Seattle to 70 months in federal prison and ordered to pay $294,978 in restitution. He had pleaded guilty to hacking multiple telecommunications companies and stealing call and text metadata for more than 100 million AT&T customers in 2024. Working with co-c…
The FBI arrested a Canadian cybersecurity executive in Pennsylvania on October 8, 2026, in connection with its investigation into the ShinyHunters extortion group. Court records point to Edward Dubrovsky, a ransomware negotiation specialist formerly of Cypfer and now associated with CyberSteward. He faces charges of conspiracy to threaten…
Federal investigators examining ShinyHunters have uncovered potential links between the extortion group and executives at two ransomware negotiation firms, according to a KrebsOnSecurity report published on October 19. An executive at an unnamed U.S. consulting firm (reportedly 1,000+ employees) allegedly helped operate the group's extort…
The FBI has publicly called on remaining ShinyHunters members to surrender. Cyber division assistant director Brett Leatherman released a video thanking Dutch police for arresting a 24-year-old in Amsterdam. The FBI calls him "one of the alleged leaders" of the group, while Dutch police say only that he played a role. He is also suspected…
This weekly roundup covers a cluster of breaches, critical vulnerabilities and law-enforcement actions. Bluesky confirmed more than 4,500 accounts compromised in a phishing campaign using a fake government payment offer. Zeabur will shut down after a second breach this year that exposed over 3.2 million environment variable records and da…
A joint StopRansomware advisory (AA26-293A) from CISA, the FBI, the USSS, Germany's Landeskriminalamt Rheinland-Pfalz, the UK's National Crime Agency and the North West Regional Organised Crime Unit details SafePay ransomware activity observed through August 2026 (cisa.gov). Findings cover FBI, USSS and German investigations (securityaffa…
Microsoft attributes the supply-chain compromise of ConnectWise Cloud Backup (formerly SkyKick) to Storm-0940, a China state-aligned actor active since at least 2021. The group has used the agentic AI penetration-testing framework ARTEX since at least September 2026 against hundreds of organizations worldwide (cyberscoop.com, thehackernew…
ConnectWise suspended Cloud Backup (formerly SkyKick), SaaS Security and Cloud Management after unknown actors gained unauthorized access to its application identities and used them to sign in to customers' Microsoft 365 tenants. ConnectWise says it identified the incident on October 14, 2026 (thehackernews.com) and began mitigations on O…
