Category: Cyber Security News

European governments, the EU, and the UK imposed sanctions on Russian individuals and entities over long-running cyberespionage and destructive attacks tied to Turla and the FSB. The actions also highlighted attacks on Poland’s energy grid, sanctions related to Lumma Stealer, and warnings about Russian hackers targeting routers for critical infrastructure attacks. #Turla #SecretBlizzard #Waterbug #FSB #GRU #LummaStealer #Poland

Varonis Threat Labs created Breach at the Beach, a hands-on Entra ID CTF designed to teach security practitioners how modern threats abuse identity systems and exfiltrate data in cloud-native environments. The experience uses real-world cases, non-human identity scenarios, and AI-era attack techniques to help defenders build stronger detection and least-privilege practices. #VaronisThreatLabs #BreachAtTheBeach #EntraID #DoronKapah #MarkVaitsman #Pixel

Lidl notified customers in Germany, Belgium, and the Netherlands that personal information was stolen in a breach at one of its service providers. The company said the online shop itself was not affected, but it warned customers about possible phishing attempts and identity fraud. #Lidl #SchwarzGroup

CISA says attackers are exploiting arbitrary file upload flaws in the iCagenda and Balbooa Forms Joomla extensions to achieve remote code execution and full website compromise. Federal agencies must apply the available fixes immediately, as both CVE-2026-48939 and CVE-2026-56291 were reportedly used in automated attacks before patches were released. #CISA #iCagenda #BalbooaForms #Joomla #CVE-2026-48939 #CVE-2026-56291

Jesse McGraw reflects on how his early hacking mindset, shaped by isolation, neurodivergence, and thrill-seeking, led him from teenage social engineering to blackhat activity and an 11-year prison sentence. After his arrest and conviction, he turned to open source intelligence and child safety advocacy, using the same adversarial mindset to protect…

U.S. and allied cybersecurity agencies warned that Russian FSB Center 16 hackers are targeting weakly configured routers to break into critical infrastructure networks. The advisory also details active exploitation of Cisco IOS, Cisco IOS XE, and Smart Install flaws, while noting a separate operation that disrupted APT28’s FrostArmada router compromise campaign. #FSB #BerserkBear #EnergeticBear #CrouchingYeti #Dragonfly #GhostBlizzard #StaticTundra #CVE-2018-0171 #CiscoIOS #CiscoIOSXE #APT28 #FrostArmada

The European Union and the United Kingdom have imposed new sanctions on Russian individuals and entities, accusing them of coordinating cyber and hybrid operations across Europe. Officials linked the measures to GRU officers, the FSB’s 16th Centre, Turla, Sandworm, Lumma Stealer, and attacks on critical infrastructure in countries including Poland, France, Germany, and Finland. #GRU #FSB #Turla #Sandworm #LummaStealer #Poland

UK authorities charged five London-based individuals after an NCA investigation into Russian Coms, a caller ID spoofing platform used to help criminals make more than 1.8 million scam calls and defraud victims worldwide. The platform, which was shut down in 2024, enabled spoofed calls from banks and other trusted organizations, contributing to tens of millions in losses across more than 107 countries. #RussianComs #NationalCrimeAgency #OperationHenhouse

Miggo says a critical RabbitMQ flaw, CVE-2026-5721, could let attackers retrieve an exposed OAuth client secret from the management interface and impersonate the broker to an identity provider. A second issue, CVE-2026-57221, can let authenticated users enumerate queues and exchanges, increasing the risk of reconnaissance in shared or internet-exposed deployments. #RabbitMQ…

June 2026 saw 37 cybersecurity-related M&A deals, with major acquisitions focused on identity security, AI security, OT/industrial defense, and cloud-native detection platforms. Notable transactions included 1Password’s purchase of Apono, Accenture’s deal for Dragos plus runZero and NetRise, and Cisco, Databricks, F5, Rubrik, and SailPoint all expanding their security portfolios through targeted…

AI-generated code is accelerating software development, but it is also creating risk at machine speed that many application security programs are not built to handle. Organizations must govern AI-assisted code with automated testing, dependency controls, remediation, and policy enforcement before it reaches production. #Veracode #AIgeneratedcode #CISO

RedHook is a new Android malware version that abuses Wireless ADB in a novel way to gain shell-level privileges without needing a computer connection. It retains powerful RAT features and is spread through social engineering that impersonates government agencies or financial institutions to lure victims to fake Google Play sites. #RedHook #AndroidWirelessDebugging #ADB #Shizuku #Group-IB

The Argentine Football Association (AFA) breach was highly likely triggered by an infostealer infection on a developer’s machine that had administrative access to internal systems. Stolen credentials later enabled database theft, leaked internal records, and malicious emails sent from legitimate AFA domains. #ArgentineFootballAssociation #AFA #Infostealer

Sustained cyber espionage has targeted multiple Pakistani law enforcement organizations, including Balochistan Police, Khyber Pakhtunkhwa Police, Islamabad Police, and the Punjab Safe Cities Authority, using malware families such as PlugX, ShadowPad, Cobalt Strike, and Remcos RAT. The compromise of the Balochistan Police Complaint Management System turned a public-facing portal into a…