59 casos · pág. 1/3
A 40-year-old Nigerian national, Chukwuemeka Victor Amachukwu, was sentenced to eight years in prison by a US federal court for a 2019-2023 scheme that combined hacking of US tax preparation businesses, filing of fraudulent tax returns and fake investment fraud. He used identities stolen from victim organizations to file false returns wit…
A Nigerian national, Chukwuemeka Victor Amachukwu (aliases Chukwuemeka Victor Eletuo and So Kwan Leung), 40, was sentenced to eight years in prison for his role in spearphishing attacks against US tax preparation businesses between 2019 and 2021. He pleaded guilty to conspiracy to commit computer intrusions and wire fraud after being extr…
F5 Labs argues that AI systems embedded in the operations of the 2026 Winter Games (spectator chatbots, scheduling, translation, fraud detection, operational analytics) create a behavioral attack surface that traditional security controls do not cover. The main risk is manipulated model behavior rather than outages or stolen credentials. …
This ESET blog post argues that AI is speeding up the threat landscape for SMBs, both by empowering threat actors and by widening the attack surface as businesses adopt AI faster than they govern it. The ESET SMB Cyber Readiness Index 2026 reports that 73% of SMBs are integrating AI, 40% lack a proper AI policy, and 45% suffered a cyberse…
Publicly reported data breaches in the US reached an all-time high last year, with over 3,300 incidents and nearly 280 million victim notices. The Identity Theft Resource Center (ITRC) reports that over 471 million notices went out in the first half of 2026, but only 24% described the attack vector, the lowest rate it has recorded. The ar…
Brazilian outlet Olhar Digital describes a quishing fraud pattern in which criminals create or tamper with payment QR Codes so that victims' money goes to accounts the fraudsters control. The scheme appears in online shopping, in physical venues such as bars, restaurants, street markets and car parks, and in printed boletos. The Federação…
Aikido Security published a vendor comparison of ten email security platforms for 2026. It ranks its own workforce platform, Noon Security, first, followed by Proofpoint, Mimecast, Abnormal AI, Microsoft Defender for Office 365, Check Point, IRONSCALES, Barracuda, Sublime Security and KnowBe4 Defend. The article describes no specific inci…
Rapid7's Q3 2026 threat landscape report finds that high-severity vulnerabilities were exploited an average of three days after disclosure, with 71% exploited within the first seven days. 79% of them are classed as 'holy grail' flaws, meaning remote and needing no credentials or user interaction. Ransomware remains the dominant threat. Th…
Sekoia announced an integration between Zimperium Mobile Threat Defense (MTD) and the Sekoia autonomous SOC platform. It brings mobile threat telemetry into a single environment for detection, investigation and threat hunting. The post is vendor product content, not a new incident or vulnerability. It argues that mobile devices are now a …
U.S. federal investigators pursuing ShinyHunters, which recently stole sensitive personnel data from the FBI recruitment site fbijobs.gov, reportedly identified executives at two ransomware negotiation firms with unusually close ties to the group. One U.S. consulting firm executive is suspected of helping operate the now-defunct extortion…
A cybercrime marketplace tracked as Yam Store supplied cloud infrastructure and phishing kits that helped drive more than 1 billion phishing messages worldwide. The marketplace appears to work as an enabling service, letting other criminals run large-scale phishing campaigns without building their own tooling. The source article is a shor…
Researchers at Abnormal AI identified a new phishing-as-a-service (PhaaS) platform, Athena StealthRoute, which uses AI tooling to both create and conceal phishing attacks. Linked infrastructure was first seen during an August 2026 phishing campaign. In the six months to October 9, the firm found about 89,700 attack-related messages with t…
The US Federal Trade Commission (FTC) opened a rulemaking in September asking whether platforms should be required to stop impersonation scam ads from reaching consumers, citing ad tools that generate copy, images and video and optimize targeting regardless of whether an ad is legitimate. The article reports that nearly one trillion scam …
The FBI warns that scammers are likely to exploit the 2026 US Midterm Election to run financial fraud schemes against victims across the United States. The PSA updates alert I-102924-PSA from 29 October 2024. Scammers use candidates' names, images, logos and slogans to solicit fake campaign contributions, sell merchandise that is never de…
Microsoft released fixes for a record 1,411 CVEs in its October 2026 Patch Tuesday on October 13, more than the roughly 1,100 issued in all of 2025 and above the records set in July and September. The surge is attributed to Microsoft's use of AI-driven vulnerability discovery, including its multi-model agentic scanning harness (MDASH). Th…
Flashpoint's first monthly insider threat report, drawn from its Primary Source Collection (PSC), identified 9,787 insider-related posts across 1,216 channels and 1,778 authors in September 2026. Overall volume fell, but threat actors kept recruiting insiders and advertising insider access, mostly to enable fraud. Flashpoint counted 857 u…
Huntress argues that passkeys raise the bar for authentication but do not close the account lifecycle: attackers still target enrollment, recovery, compromised endpoints, alternative sign-in flows and social engineering. Huntress researchers tracked a device-code phishing campaign, EvilTokens, that hit 344 organizations across five countr…
Federal investigators examining ShinyHunters have uncovered potential links between the extortion group and executives at two ransomware negotiation firms, according to a KrebsOnSecurity report published on October 19. An executive at an unnamed U.S. consulting firm (reportedly 1,000+ employees) allegedly helped operate the group's extort…
ESET warns that QR-code phishing ("quishing") is a growing way to slip past corporate email security. According to the ESET Threat Report H1 2026, malicious QR codes were embedded in 11% of all phishing emails in the first half of 2026. The codes hide destination URLs from filters that cannot extract and inspect them, and they move the vi…
ESET WeLiveSecurity warns that scammers are exploiting demand for Robux, the virtual currency of Roblox, to steal credentials, personal information and money, with children and younger players the main targets. Roblox states that no legitimate free Robux generators, tricks or codes exist. Only earned routes are legitimate, such as officia…
