Incident reporting: who got in, how long they stayed, and what it cost.
After the Kimwolf botnet operators breached Badbox 2.0's control panel, investigators traced the infrastructure back to individuals in China with ties to multiple technology companies.
The Kimwolf IoT botnet has infected over 2 million devices and is unexpectedly prevalent within government and corporate infrastructure, exploiting residential proxy services to scan internal networks for vulnerable systems.
Mozilla is finally shutting down its Monitor Plus service powered by Onerep, more than a year after initially announcing plans to wind down the relationship with the identity protection company.
The Aisuru botnet, infamous for record-breaking DDoS attacks, has shifted tactics to rent out hundreds of thousands of compromised IoT devices as residential proxies, enabling cybercriminals and AI scrapers to mask their activities behind legitimate-looking traffic.
GitHub has rolled out immutable releases as a general availability feature, preventing unauthorized changes to published software artifacts and their associated tags to strengthen supply chain security.
Canadian financial regulators imposed a record penalty against the cryptocurrency payments platform Cryptomus for failing to report suspicious transactions tied to child exploitation, fraud, ransomware, and sanctions evasion.
Federal authorities have brought criminal charges against a 19-year-old British national accused of being a core operative in Scattered Spider, a cybercrime collective responsible for extracting at least $115 million in ransom payments from victims across retail, transit, and healthcare sectors.
A self-replicating malware strain dubbed Shai-Hulud has compromised over 187 JavaScript packages in the NPM repository, automatically stealing developer credentials and publishing them to GitHub each time an infected package is installed.
