ANY.RUN has uncovered the Wazza phishing kit, which uses multi-stage routing and device code lures to target banks, governments and manufacturers worldwide.
The U.S. State Department is offering up to $10 million for tips on alleged Chinese contract hacker Zhang Yu, tied to the HAFNIUM attacks on Microsoft Exchange.
FBI and US Secret Service warn that the FortiBleed credential campaign is still locking Fortinet FortiGate firewall admins out and may enable ransomware attacks.
A 28-year-old Russian alleged Qilin ransomware operator detained in Osaka in May has been extradited to Germany over a 2024 attack on a logistics firm.[1][4]
Attackers are hiding prompt injection payloads in phishing emails to hijack AI-powered assistants, leaking data and triggering unwanted actions in enterprise mailboxes.
Jordan detains alleged ShinyHunters hacker tied to FBI data theft and Oracle PeopleSoft CVE-2026-35273 as probes widen to Boeing spin-off and Dutch suspect.
Agentic pentesting tools are moving from buzzword to product category as vendors ship AI-driven attack-path engines. Hereβs what they proveβand where they stop.
Critical CVE-2026-21589 file access bug in Atlassian Data Center stack draws probing and drives patching across Jira, Confluence and Bitbucket deployments.
Anthropic has folded Project Glasswing into an expanded Cyber Verification Program, opening reduced-safeguard Claude models to more vetted security teams.