Incident reporting: who got in, how long they stayed, and what it cost.
Federal agents arrested the co-founder of a Canadian firm specializing in ransomware negotiations, linking him to the ShinyHunters group that breached the FBI's own systems and stole sensitive data on thousands of agents.
Threat actors are exploiting Bing's trusted domain in Google search advertisements to funnel macOS users toward fake Claude installers that execute malicious commands through a technique researchers call "Adception."
Federal authorities have apprehended another alleged member of the ShinyHunters extortion group in connection with last month's compromise of FBI systems, marking the latest in a series of enforcement actions against the increasingly fragmented criminal operation.
A Russian national believed to hold a senior position within the Qilin ransomware operation has been arrested in Germany following his extradition from Japan, where he was detained while traveling.
Oleg Korniev admitted to managing Your Mule Cashout, a criminal organization that processed over $14.7 million in stolen funds for cybercriminals across multiple continents since 2007.
Federal authorities have seized seven domains supporting MicroScan and FishHub, platforms allegedly operated by a Chinese contractor and used by Flax Typhoon to target critical infrastructure globally.
IDC Frontier's IDCF Cloud service experienced a significant outage after a ransomware attack on its East Japan Region 1 infrastructure, impacting hundreds of organizations including local governments.
Researchers have uncovered a malware campaign called Midnight Mimosa embedded in the firmware of low-cost Android devices, granting attackers system-level access to install apps, commit ad fraud, and convert phones into residential proxies.
