Category: Cyber Security News

Ardit Kutleshi, a co-runner of the Rydox cybercriminal marketplace, pleaded guilty to aggravated identity theft and money laundering after helping operate the platform for nearly a decade. The site sold stolen personal data and fraud tools to thousands of users before law enforcement seized its domain and servers and arrested those…

A bipartisan bill introduced by Sens. Mark Warner and Ted Cruz would create voluntary cybersecurity best practices and an optional certification for the U.S. telecommunications industry. The proposal comes after the Salt Typhoon campaign, in which Chinese government-backed hackers breached major U.S. telecom providers and exposed sensitive communications data. #SaltTyphoon #MarkWarner…

The DOJ arrested two executives from Oxygen Forensics for allegedly hiding the company’s Russian ownership and misrepresenting that its software was developed in the United States while selling to U.S. agencies. Federal authorities seized the firm’s domains and bank accounts after alleging the scheme evaded sanctions and obscured ties to Russia,…

A bipartisan group of lawmakers has introduced two bills to strengthen federal protection for biotechnology, biomanufacturing, and biological data as concerns grow over cyberattacks and physical threats. The measures would direct DHS and CISA to identify key biotech players, update national protection plans, and improve safeguards for sensitive genomic and biometric data. #BostonScientific #Amgen #CISA #DHS #NationalInfrastructureProtectionPlan

Carbonato is a new botnet malware that targets unsecured Docker daemons to deploy the Hermes Agent AI framework and gain control of hosts. It uses worm-like spreading, persistence mechanisms, and Telegram-based operator commands, with signs of compromise including the GH0ST persona file and CARBONATO_API_KEY. #Carbonato #HermesAgent #GH0ST #Docker

A new MacSync variant is targeting macOS users by hiding its payload delivery in public iCloud calendar events, adding a more evasive infection chain. The malware continues stealing browser, crypto, and system data while also introducing an Objective-C backdoor that can run AppleScript, deploy extensions, and maintain persistence. #MacSync #iCloud #macOS #Finder #Toria

This week’s threats focused on attacks that hide behind trusted updates, login pages, AI tools, and familiar links to steal credentials, hijack sessions, and gain control of devices and services. The roundup also highlighted supply chain abuse, EDR evasion, malicious WordPress updates, and phishing campaigns tied to RemControl, MAX, Exvicy, DarkMe,…

A researcher chained two flaws in OnePlus software to let a no-permission malicious app gain root on a OnePlus 15 and other affected devices. OnePlus said the issues also affect some OPPO devices, but had not released a fix before the disclosure and no evidence of real-world exploitation has been found….

The Justice Department, FBI, and lawmakers are wrestling with how to assign liability when AI models autonomously break into other organizations, raising questions about whether existing computer crime laws fit this new threat landscape. Disclosures from OpenAI, Anthropic, Meta, and Google have intensified calls for oversight, while experts debate whether companies…

Cloud Range has launched its AI Validation Range and AI Readiness Framework to help organizations test AI models and agents in realistic, adversarial environments before granting them operational responsibility. The framework focuses on proving how AI behaves under pressure, defining where human oversight is still needed, and continuously revalidating readiness as systems and threats change. #CloudRange #AIValidationRange #AIReadinessFramework #DebbieGordon

U.S. law enforcement arrested Oxygen Forensics CEO Lee Reiber and Russian national Oleg Davydov over allegations that the company hid its Russian ownership while securing government contracts. The case centers on claims that Oxygen Forensics misled U.S. agencies such as DHS and the Defense Department about who controlled the company. #OxygenForensics #LeeReiber #OlegDavydov #DHS #DepartmentofDefense

A new Democratic bill led by Sen. Ed Markey would create a federal Cybersecurity and AI Board of Investigations to independently review AI agent-led cyberattacks and near misses. The proposal follows reports of incidents involving OpenAI, Anthropic, Meta, and a breach of a Services Australia statistics portal that OpenAI confirmed this week. #EdMarkey #OpenAI #Anthropic #Meta #ServicesAustralia #AnthonyAlbanese

Aikido researchers found private GitLab incoming email addresses exposed in public READMEs, contributing guides, and support pages, creating a risk that attackers could abuse them to create issues, merge requests, or gain broader access. GitLab says these addresses are private and should be reset if leaked, while maintainers are urged to stop publishing them and review projects that exposed them. #GitLab #Aikido

A ClickFix campaign targeted Ukrainian business websites with fake Cloudflare verification pages to deliver the Psychedelic Stealer, which steals browser credentials, account tokens, cryptocurrency wallets, and host data. Separately, Blackpoint Cyber uncovered the RemotePanel and BoundSiphon .NET malware pair, which combines persistent remote access with credential and wallet theft through a…

The third-party[.]com domain, long used as a documentation placeholder, has been hijacked to deliver a ClickFix lure to Windows users while showing benign content to others. Manifold Security also found 13 additional non-reserved placeholder domains being abused for scams and scareware, highlighting the risk of hard-coded example domains in docs and…