Category: Cyber Security News

Carnival Corporation is notifying about 6 million people after attackers used social engineering to access an employee account and steal files containing personal information. The breach was later claimed by ShinyHunters, which alleged theft of 8.7 million records from Carnival systems and leaked data tied to the Mariner Society loyalty program….

Geordie has raised $30 million in a Series A round, bringing its total funding to $36.5 million, to expand its AI security and governance platform for managing AI agents at scale. The London-based startup will use the investment to improve its platform, grow its team, and expand into the US. #Geordie…

GreyVibe is a previously undocumented Russia-nexus threat actor that has targeted Ukrainian military, government, civilian, and business entities since August 2025, using AI to accelerate fake sites, lures, malware development, and post-compromise tooling. WithSecure says the group’s LLM-generated malware and varied phishing campaigns show operational ambition rather than elite tradecraft, while…

Hackers are exploiting CVE-2026-35616 in FortiClient Enterprise Management Server (EMS) to deploy the EKZ credential stealer by abusing FortiClient VPN scripting workflows and disguising the payload as a Fortinet update. Arctic Wolf and Fortinet report that the attack uses unauthenticated endpoint API abuse, malicious PowerShell execution, and data exfiltration from affected endpoints. #CVE-2026-35616 #FortiClientEMS #EKZ #Fortinet #ArcticWolf #CISA

The FBI is warning that criminals are setting up fake FIFA websites ahead of the 2026 World Cup to steal personal and financial information, sell bogus tickets, and spread event-related fraud. Researchers also found large-scale phishing and malvertising campaigns tied to the World Cup, including a Chinese threat actor tracked as Ghost Stadium using hundreds of cloned FIFA sites. #FIFA #GhostStadium #2026WorldCup

Researchers from Token Security chained five flaws in Zapier to show how a free account could have led to access across millions of users and the services they connect. Zapier patched the issues after disclosure, but the case highlights how a compromise of the platform could enable broad supply-chain abuse through legitimate automations. #Zapier #TokenSecurity

A Google security engineer was arrested and charged after allegedly using confidential Google search-trend data to place profitable bets on Polymarket. Prosecutors say Michele Spagnuolo hid his activity through cryptocurrency transfers and account changes while trading on outcomes tied to Google’s Year in Search information. #Google #MicheleSpagnuolo #Polymarket #YearinSearch #AlphaRaccoon

MSPs are overwhelmed by fragmented security alerts that create noise, blind spots, and delayed threat detection across client environments. Unified SIEM visibility helps connect signals, reduce alert fatigue, and improve response speed while strengthening the business case for security services. #Kaseya #KaseyaSIEM

An unpatched zero-day argument injection flaw in Gogs can let authenticated attackers with basic privileges achieve remote code execution on Internet-facing servers using the default configuration. Rapid7 says the issue affects Gogs 0.14.2 and 0.15.0+dev, and could expose private repositories, credentials, and other connected systems. #Gogs #Rapid7 #JonahBurges

A Canadian man, Ramanan Pathmanathan, was sentenced to 33 years in prison for an eight-year sextortion scheme that targeted more than 145 children in the United States, including victims as young as 6. He used Instagram and Facebook Messenger to coerce minors into explicit video chats, record them, and threaten to share the recordings unless they complied. #RamananPathmanathan #Instagram #FacebookMessenger #FBI

Carnival Corporation has confirmed a data breach that affected nearly 6 million people after attackers used social engineering to access an employee account and copy personal information from its IT systems. The ShinyHunters group claimed the breach and said it stole millions of records, including customer names, birth dates, email addresses, locations, and loyalty program details. #CarnivalCorporation #ShinyHunters #HollandAmerica #MarinerSociety

BleepingComputer and Tines will host a June 2, 2026 webinar on closing the gaps between alert detection and incident resolution in network response. The session will show how automation and AI-assisted workflows can reduce manual investigation, improve coordination, and speed recovery across complex environments. #BleepingComputer #Tines

A Romanian national, Catalin Dragomir, was sentenced to 56 months in federal prison for hacking into the Oregon Department of Emergency Management network and selling unauthorized access to other U.S. victims. He also provided stolen personal data and was ordered to forfeit Monero after an investigation led by the FBI and the Justice Department. #CatalinDragomir #inthematrixl #OregonDepartmentofEmergencyManagement #FBI #JusticeDepartment #Monero

Edamame, a France-based company, has introduced a runtime security system to detect code drift and attack patterns in AI coding agents before they silently diverge from developer intent. The solution targets credential theft, token exfiltration, and supply-chain threats affecting developer workstations and named tools like Cursor, Claude Desktop, Claude Code, Codex,…