A Ukrainian national, Oleksii Oleksiyovych Lytvynenko, was sentenced to four years in prison for helping carry out Conti ransomware attacks between 2021 and 2022. He admitted to acting as both an intruder and developer in the Conti operation, which targeted more than 1,000 victims worldwide and generated over $150 million in ransom payments. #Conti #OleksiiOleksiyovychLytvynenko #TrickBot #Ryuk
U.S. Cyber Command has named Ronzelle Green as its new chief artificial intelligence officer as it accelerates efforts to embed AI into cyber operations. The command is also seeking a major funding increase for AI capabilities, while leaders say Green should centralize the many scattered AI initiatives across the military.
#USCyberCommand #RonzelleGreen…
IDScan confirmed that an unauthorized third party may have accessed customer data stored in its cloud platform after reports linked the company to a massive dark web database sale. The exposed records may include names and government ID numbers, while the FBI has launched an inquiry into the incident. #IDScan #Nexus…
FinCEN warned financial institutions to be more vigilant as overseas scam centers drive a surge in cryptocurrency investment fraud, with more than $12.7 billion stolen from Americans across all 50 states and U.S. territories. The report also highlighted the laundering role of Telegram-based marketplace Xinbi Guarantee, which was sanctioned after helping…
Check Point has patched two critical VPN certificate flaws, CVE-2026-85102 and CVE-2026-85103, that could let an unauthenticated remote attacker execute code on Security Gateway and Security Management systems under specific conditions. The company says it found the issues internally, has seen no exploitation, and is rolling out fixes through Live Patch…
Bad actors are abusing Google Play’s Early Access program to distribute deceptive Android apps that promise cash, rewards, casino wins, and premium content while evading public reviews and ratings. The activity overlaps with several Android threats, including Hagaseca, Mantax Otax, StreamRat, and GoldFactory’s use of the Gigabud trojan and Vwork to…
This week’s security stories all point to the same failure: ordinary tools, trusted services, and exposed systems were allowed to do too much. From malicious browser extensions and npm packages to AI-driven intrusions, phishing relays, and ransomware chains, attackers kept exploiting weak handoffs already in place. #AxiomTrade #Padre #AnthropicClaudeCode #AlibabaQwen #DeepSeek…
Vexy Ransomware targeted i2k2 Networks Pvt. Ltd. in India, disrupting operations for the provider of cloud computing, web hosting, managed IT, and related services. Impacted country(s): #India
CO-OP URBAN BANK LTD in India (IN) was reportedly targeted for ransomware activity attributed to the Global Secret Group, impacting its banking and finance operations. The intrusion affected 41.3 GB across 125,988 files and 14,641 folders, highlighting the harm to the organization’s data availability and business continuity in #India
The Panzer ransomware group compromised Agencia Estatal de Meteorología (AEMET), a Spanish governmental meteorological agency providing weather observations, forecasts, climate analytics, and services supporting public safety across multiple sectors. The incident is reported to impact Spain. #Spain
Google has enabled a new Android transfer feature that lets users move passwords and passkeys directly between supported password managers without exporting them to a file. The feature currently works with Google Password Manager, 1Password, Bitwarden Password Manager, and Dashlane, with more partners expected later. #GooglePasswordManager #1Password #Bitwarden #Dashlane
Batipro, a construction materials supplier based in Bertrange, was hit by a cyberattack that targeted all six of its servers and may cause a slight delay in overtime payments for 800 staff. The LCGB union says this is the first known cyberattack in Luxembourg’s construction sector, reflecting a broader rise in such incidents across other sectors. #Batipro #LCGB
Gen Threat Labs uncovered CVE-2026-51990 in Sogou Input Method, where a crafted sgbiz: link could chain multiple weaknesses into one-click remote code execution. UNC3569 exploited the flaw in the wild to deliver the GRAYRABBIT backdoor through a malicious page, and Tencent has since patched the issue. #SogouInputMethod #CVE-2026-51990 #UNC3569 #GRAYRABBIT #Tencent
A likely Russian-speaking threat actor used hundreds of AI agents to build and launch a fast-moving global campaign against vulnerable PaperCut NG/MF servers, exploiting CVE-2026-81578 and CVE-2026-82078. GreyNoise says the operation compromised hundreds of organizations worldwide and used post-exploitation techniques to harvest credentials and gain domain-level access, underscoring how AI can compress attack timelines dramatically. #PaperCut #CVE-2026-81578 #CVE-2026-82078 #GreyNoise #Codex #DeepSeek #Netlas
Microsoft Excel users are reporting that the KB5002914 Office security update is breaking copy-and-paste and formula dragging in multiple versions of Excel. Affected users say removing the update or rolling back Office restores normal behavior, and reports have appeared across Reddit and Microsoft Q&A forums. #KB5002914 #Excel #OfficeLTSCStandard2021