From ransomware operators landing in U.S. prisons to a DNSSEC failure briefly knocking millions of German websites offline, this week’s cyber landscape reflects attacks that…
Key TakeawaysDatabase deletion incident: Following employment termination, two brothers unlawfully deleted approximately 96 federal government databases.Federal jury conviction: Sohaib Akhter found guilty of computer fraud…
Key TakeawaysCloud credential theft: SentinelLABS identified PCPJack, a framework that worms across cloud infrastructure and removes TeamPCP artifacts.No cryptominers deployed: The toolset targets Docker, Kubernetes,…
Key TakeawaysThreat actor claims: The RansomHouse hacking group claimed responsibility for the cyberattack targeting the Trellix cybersecurity firm.Incident status confirmed: Trellix confirmed unauthorized access to…
Key TakeawaysCompromised user data: HIBP said the breach impacted 447,600 Woflow accounts, exposing email addresses, names, phone numbers, and physical addresses.Extortion group claims: The ShinyHunters…
Key TakeawaysSignal disruption: A rogue General Alarm caused a 48-minute operational halt to three high-speed trains due to cloned radio signals.TETRA vulnerability exploited: A 23-year-old…
VoIP Providers, Preferred by Attackers for High-Volume, Cheaper Email Scams that Reuse Phone Numbers
Key TakeawaysVoIP provider abuse: Six of the ten largest scam campaigns relied on VoIP infrastructure due to the ease of API-driven provisioning.Extended number lifespan: The…
Key TakeawaysMalicious NuGet packages: Five compromised packages impersonating Chinese .NET libraries under the publisher account bmrxntfj.Extensive data theft: The .NET Reactor-protected infostealer targets browsers, cryptocurrency…
Key TakeawaysActive exploitation: The CopyFail bug is actively exploited and has been added to CISA's Known Exploited Vulnerabilities (KEV) catalog.Broad impact: The vulnerability affects Linux…
Key TakeawaysCritical vulnerability: Palo Alto Networks is patching CVE-2026-0300, a zero-day exploited to hack specific firewall models.Unauthenticated execution: The buffer overflow allows an unauthenticated attacker…
Key TakeawaysConfirmed cyber incident: IBM confirmed a security breach at its Italian subsidiary, Sistemi Informativi, on May 3, 2026.State-sponsored espionage: The Chinese threat group Salt…
Key TakeawaysUK online safety law concerns: Coalition warns law may restrict internet access, impact privacy, and fail improving child safetyExpanded government powers: Law allows limiting…
Key TakeawaysPrison sentencing: Deniss Zolotarjovs received a 102-month prison sentence for his operational role in sophisticated ransomware campaigns linked to Conti.Quantified damages: The threat actor…
Key TakeawaysServer exposure: More than 550,000 cPanel servers remain potentially vulnerable to active threat actor exploitation.Ransomware deployment: Cybercriminals leverage this WHM exploit to hijack host…
Key TakeawaysExtortion campaign listing: In April 2026, ShinyHunters listed Vimeo on its portal, publishing hundreds of gigabytes of enterprise data.Third-party compromise: Vimeo attributed the data…
Key TakeawaysTrusted platforms weaponized: Threat actors leverage Amazon SES to execute highly evasive phishing campaigns that bypass conventional filtering mechanisms.Exposed credentials exploited: Scammers hijack leaked…
Key TakeawaysNymVPN Pay as You Go: Removes accounts, subscriptions, and identity requirements, enabling anonymous VPN access using decentralized zk-nym credentialsPrivacy-first access model: Converts NYM token…
Key TakeawaysActive threat campaign: The VENOMOUS#HELPER phishing campaign has impacted over 80 organizations, primarily targeting corporate networks located in the U.S.SSA lures: Attackers utilize Social…
Key TakeawaysPureVPN Q1 Transparency Report Key Finding: Zero subpoenas, court orders, and warrants recorded during Q1 2026 reporting periodDecline in Legal Requests Explained: Gradual shift…
Nathan Perdue – TenzaiTenzai appoints Nathan Perdue as chief revenue officer, marking a return to familiar Guardicore-era leadership as the company pushes deeper into enterprise…
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
