Cybersecurity News

Dutch investigators seized 800 servers tied to Russian bulletproof host THE.Hosting, but key IP ranges remain online and continue to probe EU networks.

WithSecure has detailed a new Russia-linked group dubbed GreyVibe that uses generative AI to speed phishing and malware attacks against Ukraine.

A new vendor report on 2,000 exposed AI-built apps shows how 'shadow AI' is outpacing security controls as employees ship vibe-coded tools into production.

India's CERT-In has issued new guidance urging organizations to patch critical internet-facing vulnerabilities within 12 hours amid rising AI-driven attacks.

Iran-linked group Screening Serpens is using new MiniJunk V2 and related RATs in tailored spear-phishing against aerospace, defense and telecom targets.

Actively exploited Drupal Core SQL injection flaw CVE-2026-9082 hits PostgreSQL-backed sites; patches are out and admins are urged to update fast.

SANS' SEC670 course is teaching red teamers stack-string and obfuscation tactics for building Windows implants, raising the bar for defenders.

European investigators have seized First VPN, a criminal infrastructure service allegedly used by ransomware crews and fraudsters, exposing 5,000 users.

Lawmakers demand answers after a contractor exposed AWS GovCloud keys and other CISA secrets on a public GitHub repo, raising security culture concerns.

US and Canadian authorities arrested alleged Kimwolf DDoS botnet admin Jacob Butler, tying him to a vast Android TV botnet-for-hire operation.