Key TakeawaysIPVanish Apple TV update: Adds WireGuard and OpenVPN, joining IKEv2 for three VPN protocol choices.New Features: OpenVPN Scramble and selectable ports improve flexibility across…

Key TakeawaysRansom demand: Scammers use ShinyHunters-leaked email addresses from breaches at Hallmark, Betterment, and more to demand $2,000 in Bitcoin.Group denial: ShinyHunters denied any involvement…

Key TakeawaysAttack method: Threat actors create fake Steam accounts to post malicious PowerShell commands disguised as game fixes.Malware payload: The script downloads an XMRig cryptominer…

Corporate resilience takes center stage as Swiss train manufacturer Stadler Rail stands firm against a $12M extortion demand, while LG takes decisive security action by…

Key TakeawaysCampaign identified: Researchers uncovered adversaries compromising hospitality Wi-Fi captive portal gateways to hijack corporate accounts since at least June 2026.APT28 overlap: The tradecraft mirrors…

Key TakeawaysRussia alignment: Cybersecurity advisories and threat reporting warn of Russia-aligned espionage campaigns, some potentially operating under the GRU.Half-click: The Void Blizzard group uses half-click…

Key TakeawaysClaim reported: Everest hacking group claims to have breached Omnicell and stolen 1 TB of data across more than 682,887 files.Data stolen: The archive…

Key TakeawaysOperation end: LAPSUS$ announced it is permanently ceasing operations after claiming to have met its financial objectives.No more leaks: The group stated there will…

Key TakeawaysThreat discovered: Varonis Threat Labs researcher Daniel Kelley uncovered Dolphin X, a Windows stealer and RAT sold by a vendor using the alias "Kontraktnik."Massive…

Key TakeawaysAdobe flaw: Guardio Labs uncovered HermeticReader, tracked as CVE-2026-48294, in Adobe's Acrobat Chrome extension.Massive reach: The flaw affected roughly 329 million browsers running the…

Key TakeawaysCJEU VPN copyright ruling: Court says VPN providers aren't liable when users bypass geo-blocks for copyrighted content.Publishers also protected: State-of-the-art geo-blocking remains sufficient even…

Key TakeawaysRansomware claim: Anubis claimed responsibility for the Fairlife data breach, threatening to publish 1 terabyte of data unless paid a ransom.Production halted: Coca-Cola said…

Key TakeawaysIncident disclosed: OpenAI confirmed that GPT-5.6 Sol and an unreleased pre-release model escaped their sandbox and breached Hugging Face's production infrastructure.Benchmark targeted: The models…

Key TakeawaysUK social media and VPN ban update: Leadership change creates uncertainty around proposed under-16 online safety rules and VPN restrictions.Technology minister departure: Liz Kendall…

Key TakeawaysMullvad donation controversy response: Mullvad clarified founder Daniel’s donation was personal and not linked to company decisions.Company privacy mission reaffirmed: Mullvad said its focus…

Key TakeawaysExpressVPN+ dashboard update: Adds passkey sign-in and unifies account, privacy, security, and subscription management in one dashboard.New centralized experience: Displays security insights, product status,…

Key TakeawaysInvestigation underway: Origin Energy is examining a potential security incident involving unauthorized access to some customer data.Payment data: The company does not expect impacted…

Key TakeawaysSentence handed down: Kyle Svara, 27, received 76 months in prison for hacking hundreds of women's Snapchat accounts.Scheme scale: He targeted more than 1,500…

Key TakeawaysCampaign exposed: AgentBaiting is a FakeGit operation abusing AI capability discovery.Vast reach: Roughly 7,600 malicious GitHub repositories, 800+ posing as AI Skills or MCP…

Key TakeawaysBreach confirmed: South Korea's Foreign Affairs Ministry disclosed a cyberattack on the Korea National Diplomatic Academy's online education system.Long access: Attackers controlled a server…