The Underminr vulnerability allows attackers to hide malicious connections behind trusted domains, potentially affecting 88 million domains worldwide.
Cybersecurity firm Barracuda Networks reports that Tycoon 2FA has lost its dominance among phishing-as-a-service platforms after law enforcement seized 330 of its domains, with threat actors migrating to rivals like Mamba 2FA and EvilProxy while total attacks surged past 23 million.
Flare analysts discovered an underground forum guide titled 'The Underground Guide to Legit CC Shops: Cutting Through the Bullshit,' revealing how threat actors systematically evaluate carding marketplaces, manage operational security, and build trust in a deceptive ecosystem.
Ukrainian authorities have confirmed a multi-wave cyber-espionage campaign attributed to Russia's APT28 group, which exploited Roundcube webmail vulnerabilities to compromise over 170 email accounts belonging to prosecutors and investigators.
Launched in early April 2026, CoChat is a new enterprise platform designed to expose and govern shadow AI usage, offering teams shared access to leading LLMs and agentic systems while enforcing human oversight over autonomous actions.
As Congress debates extending Section 702 of FISA, experts on both sides acknowledge deep uncertainty about whether the 2024 reform law improved or worsened controversial warrantless surveillance powers.
More than 20 countries participated in a coordinated takedown of DDoS-for-hire platforms, resulting in four arrests, 25 search warrants, and the seizure of over 50 domains. Authorities identified approximately 75,000 users of the illicit services.
More than 18 months after the Qilin ransomware group struck Synnovis in June 2024, at least one London NHS trust is still running on paper processes, with over 161,000 pathology reports delayed and one patient death linked to the incident.
White House Chief of Staff Susie Wiles is set to meet Anthropic CEO Dario Amodei to discuss the company's new Mythos AI model, which has drawn federal attention for its national security and cybersecurity implications.
The Payouts King ransomware operation is leveraging the QEMU open-source emulator to spin up concealed virtual machines on compromised hosts, creating reverse SSH tunnels that completely bypass host-based security solutions.