14 casos · pág. 1/1
A 40-year-old Nigerian national, Chukwuemeka Victor Amachukwu, was sentenced to eight years in prison by a US federal court for a 2019-2023 scheme that combined hacking of US tax preparation businesses, filing of fraudulent tax returns and fake investment fraud. He used identities stolen from victim organizations to file false returns wit…
Symantec reports that APT28 (also tracked as Swallowtail, Fancy Bear and Forest Blizzard), a group linked to Russia's GRU, compromised two defense firms and a law enforcement agency in NATO countries in recent months. The victims were a naval shipbuilder, a manufacturer of military aircraft engines and the agency. At the shipbuilder, oper…
A threat actor obtained a highly sensitive API secret for ConnectWise Cloud Backup (formerly SkyKick) and used it to sign in to customers' Microsoft 365 tenants, forcing ConnectWise to suspend its Cloud Backup, SaaS Security and Cloud Management services. Huntress saw sign-in activity from the malicious infrastructure across almost 1,000 …
The Department of Justice announced 28 arrests across California on Monday under Operation Protect the Vote. The defendants are foreign nationals and permanent green card holders charged with fraudulently registering to vote and making false statements in naturalization applications. Officials say all 28 appear on a list of more than 20,0…
Authorities in North Macedonia have filed charges against the alleged administrator of OLVX, a cybercrime marketplace that sold stolen personal data, credentials and malicious tools from 2023 to 2025. The suspect is a 20-year-old North Macedonian national, identified only as "E.A.", and is charged with computer fraud, misuse of personal d…
The Citizen Lab disclosed AdFection, the first technical demonstration of zero-click mercenary spyware delivered through targeted online advertising. The Israeli firm Discover-Tech presents itself as a legitimate ad company but acts as a facilitator for several mercenary spyware partners, including Candiru. Its ads covertly direct million…
Mandiant and GTIG attribute exploitation of the critical BeyondTrust Remote Support zero-day CVE-2026-102764 to Armory Castle (formerly tracked as UNC5221), a likely Chinese government-backed espionage group. BeyondTrust dates the first known exploitation to Aug. 29 and says it detected and contained the activity Sept. 28. Only a small nu…
Sen. Ron Wyden sent a letter to CISA and the Office of Management and Budget (OMB) urging federal adoption of Encrypted Client Hello (ECH). ECH hides the name of the website a user visits from anyone monitoring network traffic. His office identified at least 350 federal sites that do not use ECH. Wyden warned that hackers and foreign adve…
The Department of Homeland Security is barring civilian federal agencies from buying or using IT products and services from Hangzhou DeepSeek Artificial Intelligence and its affiliates. The notice, due in the Federal Register, cites the Federal Acquisition Supply Chain Act and a review by the Federal Acquisition Security Council. An accom…
Researchers from the SHARE Foundation and The Citizen Lab report spyware on devices belonging to Vladan Ðokić, rector of the University of Belgrade and a prominent supporter of Serbia's student-led anti-corruption protests, and Rade Bajić, a lawyer with the Public Prosecutor's Office for Organized Crime. Citizen Lab confirmed with high co…
CISA, the NSA and the Center for Advancing Innovation and Standards for Super Intelligence (CAISSI) at the Department of Commerce have issued joint, voluntary guidance urging frontier AI companies to harden the sandbox environments used to test AI agents. It follows a summer in which OpenAI, Anthropic, Google, Meta and others said their m…
A cybersecurity incident at defense contractor BAE Systems has stopped the production and delivery of bankruptcy notices for every US federal bankruptcy court. BAE operates the Bankruptcy Noticing Center (BNC) systems and websites on behalf of the federal judiciary. The Administrative Office of the U.S. Courts confirmed the incident on Oc…
Proofpoint, owned by private equity firm Thoma Bravo, agreed on Thursday to acquire Varonis Systems in a cash transaction valued at roughly $6.3 billion. The deal combines Proofpoint's people-centric protection (phishing, fraud and email-borne attacks) with Varonis' data security capabilities, which map where sensitive data resides, who c…
VisionHeight, an Israeli threat intelligence firm, uncovered a network of hyperlocal websites spanning at least 14 US states, built to influence how AI chatbots answer questions about local and state races. Sites with names like "Wolverine State Report", "Peach State Bulletin" and "Tarheel State Report" repeat hundreds of near-identical s…
