1. US authorities arrested a Venezuelan national linked to Tren de Aragua for ATM jackpotting, the first cybercriminal on the FBI Ten Most Wanted list (Dark Reading).
2. Russian espionage actor UAC-0099 updated its MatchBoil malware dropper in campaigns against Ukrainian organizations (Dark Reading).
3. The US State Department offered up to 10 million dollars for information on Zhang Yu, charged in the 2021 HAFNIUM Microsoft Exchange attacks (The Hacker News).
4. Zohar Pinhasi, owner of MonsterCloud, was charged with defrauding ransomware victims by secretly paying ransoms while billing over 19 million dollars (The Hacker News).
5. Sixteen malicious Firefox extensions masquerading as Rabby and OKX wallets were found stealing recovery phrases and private keys (The Hacker News).
6. Attackers compromised the .gh, .sl, and .as registries, obtaining unauthorized HTTPS certificates for Google domains (The Hacker News).
7. The FBI warned that FortiBleed attacks remain active, having amassed 86,644 Fortinet device credentials and locking out admins (BleepingComputer).
8. Threat actors exploited critical Atlassian Data Center flaw CVE-2026-21589 within two hours of public details, with no authentication required (The Hacker News).
9. SonicWall patched a CVSS 10.0 pre-authentication SSRF flaw in SMA1000 appliances, with no evidence of exploitation (The Hacker News).
10. An unpatched critical LMCache flaw allows unauthenticated remote code execution on LLM cache servers, with no fixed version available (The Hacker News).
11. PoeLLM malware infected over 3,400 exposed AI servers to expand a crypto mining botnet in the Canto Incognito campaign (The Hacker News).
12. The Tensorlake npm package was compromised to deliver the Shai-Hulud credential-stealing worm in a supply chain attack (The Hacker News).
13. Eight malicious npm packages, downloaded 40,767 times, delivered Overlord RAT and stealer malware in the MALFEX campaign (The Hacker News).
14. Arizona courts confirmed hackers stole information on more than 1.3 million people in a breach of the FARE program (The Record).
15. Advantest Corporation confirmed personal information was stolen in a ransomware attack earlier this year (BleepingComputer).
16. ShinyHunters extorted a Boeing spin-off prior to the arrest of a suspected leader in Amman, Jordan (KrebsOnSecurity).
17. Over 100 compromised websites used fake Cloudflare checks to deliver LunexStealer malware, attributed to UAC-0277 (The Hacker News).
18. At Pwn2Own Ireland 2026, researchers exploited 45 zero-days on day two, including three Samsung Galaxy S26 hacks (BleepingComputer).
Be First to Comment