Ravie LakshmananOct 08, 2026Cybercrime / Ransomware The U.S. Department of Justice (DoJ) on Wednesday announced charges against a 50-year-old U.S. and Israeli national for allegedly defrauding ransomware victims by secretly paying the attackers to obtain decryptors while claiming to use… Read More "MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data"
Kale agreed. “Pulling credentials from a metadata service is cloud hacking 101, and what’s new is that the researchers didn’t need to find a bug to get there. They just asked the agent in plain English,” Kale said. “Once that’s… Read More "AWS’s repeated problems with AI agent controls illustrates the autonomous agent dilemma"
ESET researchers have discovered two as-yet undocumented Windows variants of SprySOCKS, a previously Linux-only backdoor reportedly used by FishMonger, the group believed to be operated by a Chinese contractor named I‑SOON. While we initially discovered the malware samples on VirusTotal,… Read More "FishMonger’s arsenal upgraded: SprySOCKS for Windows"
A critical vulnerability in Atlassian Data Center products is reportedly being exploited in the wild. The flaw, tracked as CVE-2026-21589, was described by Atlassian in an October 5 advisory as an arbitrary file access, with a severity score (CVSS) of… Read More "Critical Flaw in Multiple Atlassian Products Exploited in the Wild"
Cybersecurity startup Rein Security today announced raising $25 million in a Series A funding round that brings the total raised by the company to $35 million. The fresh investment round was co-led by Glilot Capital and Sienna Venture Capital, with… Read More "Rein Security Raises $25 Million to Guard AI Agents at Runtime"
Phishing kits are no longer limited to copying a familiar login page and waiting for a victim to enter credentials. Attackers are increasingly building filtering, session management, and traffic controls into the infrastructure that delivers the phishing page itself. ANY.RUN… Read More "Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia"
During an intrusion, attackers create new accounts that were not previously present on the device. In some cases, they then delete existing accounts, preventing organizational persistence and attempting to move laterally through the environment. “When you no longer have access… Read More "FBI: FortiBleed attackers can lock organizations out of their own firewalls"
Many manufacturing plants depend on OT systems that stay in service for many years. That long run can hide significant cybersecurity risks. 17 Jun 2026 • , 5 min. read In a manufacturing plant built around uptime, a machine that… Read More "Cybersecurity for the long haul: Protecting legacy OT systems"
A suspected China-based threat actor leveraged AI tooling in a campaign that successfully exfiltrated data from South Korean financial organizations, CrowdStrike has revealed. The cybersecurity firm discovered that the attacker used ARTEX, a recently released open-source agentic pentesting tool developed… Read More "Chinese Hacker Deployed AI in Campaign Against South Korean Banks"
Four US states have sued TP-Link Systems, accusing the router maker of misleading consumers about the security of its products and its ties to China. The attorneys general of Florida, Iowa, Montana, and Nebraska filed the lawsuits on October 6… Read More "TP-Link Faces State Lawsuits and New Scrutiny Over ISP Router Flaws"
