Key TakeawaysCoordinated operation: Norway's Kripos arrested 28 men across seven countries in a dark web CSAM crackdown.Monero link: Suspects allegedly used Monero to buy access…
Key TakeawaysVote Result: A motion attempting to block the Chat Control extension proposal failed, allowing the proposal to continue through the legislative process. The vote…
Key TakeawaysInfoblox report: Researchers linked a long-running campaign using fake installers and VPNs to build residential proxy networks.Operation uncovered: Over 230 lookalike domains supported malware…
Key TakeawaysListing Surfaces: A forum actor claims to be selling a "complete database" tied to Universidad de Monterrey.Data Scope: The alleged archive covers student, faculty,…
Key TakeawaysThreat actor: Okta tracks the group as O-UNC-066, also known as "Pink" by Palo Alto Networks Unit 42, behind the campaign.Attack vector: Vishing lures…
Key TakeawaysFriendly Fire exploit: AI coding agents executed malicious code during third-party security reviews via prompt injection attacks.Verified research: AI Now Institute demonstrated remote code…
Key TakeawaysBreach confirmed: AssuranceAmerica confirmed a data breach exposing the personal information and driver's license numbers of roughly 7 million people.Discovery timeline: Hackers were discovered…
Key TakeawaysNordVPN Message Protection launched: New Android feature warns about suspicious SMS scams; works without an active VPN connection.Privacy details limited: NordVPN says messages aren't…
Key TakeawaysBackdoor Warning: China's National Vulnerability Database flagged an alleged "backdoor" in Claude Code versions 2.1.91 through 2.1.196.Data Transmission: The mechanism was said to send…
Key TakeawaysAI coding agents: Sophos found coding assistants trigger endpoint detection rules by performing attacker-like but mostly legitimate actions.Behavioral telemetry: Credential access, PowerShell commands, downloads,…
Key TakeawaysAccenture security breach confirmed: Company confirms an isolated breach after hacker claimed to sell alleged 35GB of stolen data.Claims remain unverified: Accenture did not…
Key TakeawaysCampaign Uncovered: Socket detected 17 malicious npm and PyPI packages typosquatting PaySafe, Skrill, and Neteller SDKs.Rapid Detection: Each npm package shipped versions 1.0.0–1.0.3 and…
Key TakeawaysNew Threat: Cloud AI Infrastructure Attack Framework is a centralized botnet worm targeting cloud-native developer tools.Malware Rivalry: Reports say it kills competitor processes TeamPCP…
Key TakeawaysCISA action: CISA added four actively exploited vulnerabilities to its KEV catalog – CVE-2026-48282, CVE-2026-55255, CVE-2026-48908, and CVE-2026-56290.Products affected: The flaws impact Adobe ColdFusion,…
Key TakeawaysOutage Confirmed: Telstra is investigating a nationwide outage that cut phone services, disrupted wireless payments, and impacted trains.Triple-zero Impacted: Communications Minister confirmed some calls…
Key TakeawaysNordVPN Q2 2026 roundup: Introduces next-gen antivirus, global scam call protection, AI voice detection, and VR VPN support.Verified updates: Official NordVPN announcement confirms new…
Key TakeawaysNew Zealand VPN restrictions: Government officially denies plans to restrict or ban VPNs despite earlier reports and public speculation.Official clarification: Prime Minister and Education…
Key TakeawaysIPVanish Q2 2026 Transparency Report: IPVanish published its Q2 2026 Transparency Report, reaffirming its no-logs policy and privacy commitments.Quarterly request summary: The report details…
Key TakeawaysExpressVPN VPN server expansion: ExpressVPN expanded to 214 selectable server locations across 113 countries, its largest network expansion.More local connection choices: New locations provide…
Key TakeawaysForum listing claimed: A threat actor is advertising a dataset allegedly tied to Accenture on a hacking forum, claiming roughly 35GB of company source…
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
