Dutch authorities arrested two men for operating IT infrastructure used by Russia to carry out cyberattacks and seized over 800 servers.
A Beijing-linked influence operation attempted to interfere with Tibetan parliament-in-exile elections using AI-generated imagery and inauthentic social media accounts, but researchers say the campaign gained virtually no organic traction.
A newly tracked threat actor, UNC6692, overwhelms victims with emails then impersonates IT helpdesk staff on Microsoft Teams to trick them into installing a modular malware framework dubbed Snow.
Static audits and point-in-time dashboards can no longer keep pace with AI-accelerated threats. Security leaders must shift toward runtime visibility, identity governance, and outcome-based metrics.
A joint advisory from a dozen government agencies across the U.S., U.K., and allied nations warns of a major strategic shift in Chinese cyber operations toward large-scale covert networks built from compromised everyday devices.
Trigona ransomware operators are using a custom-built command-line exfiltration utility to steal data faster and avoid triggering security solutions that flag publicly available tools like Rclone and MegaSync.
Version 2026.4.0 of the Bitwarden CLI NPM package was found to contain malicious code capable of stealing credentials and secrets from victim machines, with links to recent attacks on Checkmarx and the Shai-Hulud worm campaigns.
CrowdStrike has addressed a critical unauthenticated path traversal bug in its LogScale product, while Tenable patched a high-severity flaw in its Nessus scanner that could allow arbitrary file deletion and code execution with System privileges.
A White House memo from chief science adviser Michael Kratsios accuses Chinese entities of industrial-scale campaigns to extract capabilities from U.S. AI models, while a bipartisan House bill seeks sanctions against foreign actors engaged in model extraction attacks.
CISA has updated Emergency Directive 25-03 to warn that patching vulnerable Cisco firewall devices does not remove the Firestarter backdoor, which infected at least one US federal agency through zero-day exploitation.