Category: Cyber Security News

The alleged main administrator of Dream Market, Owe Martin Andresen, has been indicted in the United States for money laundering tied to the dark web marketplace’s illicit proceeds. Prosecutors say he moved millions through cryptocurrency wallets and gold purchases, while related cases have already led to convictions and prison sentences for other dark web marketplace operators. #DreamMarket #OweMartinAndresen #IncognitoMarket #Hansa #AlphaBay #Speedstepper

Dell confirmed that a SupportAssist Remediation service update is causing blue-screen crashes and random reboots on some Windows 10 and Windows 11 systems, and advised users to uninstall or disable the affected service. The issue affects version 5.5.16.0 of Dell SupportAssist Remediation and Alienware SupportAssist Remediation, with Dell also warning that OS SupportAssist Recovery repair points may be unavailable after removal. #DellSupportAssist #SupportAssistRemediation #AlienwareSupportAssist

Chaotic Eclipse disclosed two Windows zero-days, YellowKey and GreenPlasma, that can bypass BitLocker protection and elevate privileges to System on affected Windows 11 systems. Security researchers confirmed the BitLocker bypass works on recent builds, raising concerns that the proof-of-concept code could be quickly weaponized in the wild. #Windows11 #BitLocker #YellowKey #GreenPlasma…

Broadcom has released a VMware Fusion update to fix CVE-2026-41702, a high-severity TOCTOU flaw that could let a local non-administrative user escalate privileges to root. The patch comes as VMware products are expected to face scrutiny at Pwn2Own, where Broadcom is also present and more fixes may be announced soon. #VMwareFusion…

Sysdig reports that exploitation attempts against a recent authentication bypass in PraisonAI began within four hours of public disclosure, with a scanner probing vulnerable internet-exposed instances. The flaw in CVE-2026-44338 affects PraisonAI versions 2.5.6 to 4.6.33 and was fixed in version 4.6.34, so organizations should patch immediately. #PraisonAI #CVE-2026-44338 #Sysdig…

The British government plans to rewrite key cybercrime laws, including the Computer Misuse Act 1990, to better support security researchers and modern defensive security work. The reforms may also introduce new measures such as Cyber Crime Risk Orders as part of a broader effort to disrupt ransomware and organized cybercrime networks….

The European Commission is moving toward stricter rules that could delay social media access for children across the EU, with a legal proposal potentially coming as soon as this summer. The plan would build on the Digital Services Act and upcoming Digital Fairness Act, while also addressing addictive design features and…

Researchers disclosed a critical 18-year-old heap buffer overflow in NGINX’s ngx_http_rewrite_module, codenamed NGINX Rift, that can enable remote code execution or denial-of-service through crafted HTTP requests. F5 also patched three additional vulnerabilities across NGINX Plus and NGINX Open Source, and advised users to upgrade or replace unnamed regex captures with named…

The House Homeland Security Committee is examining Anthropic’s Mythos AI model through briefings and a planned hearing as lawmakers debate whether federal agencies should use it to uncover software vulnerabilities. The discussion has also exposed a divide over agency access, with CISA reportedly out while the NSA and the Department of Defense are said to be using Mythos despite supply chain risk concerns. #Anthropic #Mythos #CISA #NationalSecurityAgency #DepartmentofDefense

Anthropic’s Claude Mythos Preview and OpenAI’s GPT-5.5 have pushed autonomous cybersecurity capabilities beyond the rapid growth trend tracked by the UK’s AI Security Institute, with both models completing advanced simulated attack tasks faster than expected. Palo Alto Networks also found these models can rapidly turn vulnerabilities into exploit paths, prompting urgent enterprise security priorities as AI-driven attacks accelerate. #ClaudeMythosPreview #GPT5.5 #AISI #PaloAltoNetworks

MuddyWater, also known as Seedworm and Static Kitten, ran a wide-ranging espionage campaign against at least nine organizations across multiple countries and sectors, including a South Korean electronics manufacturer, government agencies, and an international airport. The group used DLL sideloading, PowerShell, and public services like sendit.sh to steal credentials, collect screenshots, and exfiltrate data while appearing to blend into normal activity. #MuddyWater #Seedworm #StaticKitten #Fortemedia #SentinelOne #ChromElevator #senditsh

West Pharmaceutical Services disclosed a material cybersecurity attack in which an unauthorized party exfiltrated data and encrypted certain systems after the company detected an intrusion on May 4, 2026. The firm activated incident response procedures, took systems offline globally for containment, restored core enterprise systems in part, and brought in Palo Alto Networks’ Unit 42, while no ransomware group has claimed responsibility. #WestPharmaceuticalServices #Unit42 #SEC

German and U.S. authorities arrested Owe Martin Andresen, the alleged main administrator of Dream Market, after tracing years of illicit proceeds tied to the dark web marketplace. Prosecutors say he laundered millions from drug sales and stolen data through cryptocurrency and gold bars, and he now faces charges in both countries….

Security teams are overwhelmed by endless “toast” alerts while attackers quietly chain small flaws into a “Lethal Chain” that leads to sensitive data. A live briefing with Wiz experts Mike McGuire and Salman Ladha will show how to map real attack paths, close the code-to-cloud gap, and cut through alert noise….