Key TakeawaysExtensions Removed: Microsoft pulled 100+ malicious Edge browser extensions tied to the StegoAd campaign.Hidden Payloads: The extensions concealed malware inside image and font files…
Key TakeawaysTarget Confirmed: India’s Meerut Development Authority (MDA) website was defaced by unidentified hackers.Content Displayed: The homepage was replaced with a black screen showing pro-Pakistan…
Key TakeawaysCampaign Confirmed: ShinyHunters targeted Sysco in a June 2026 "pay or leak" extortion campaign.Data Exposed: The published dataset contained approximately 2.7 million unique email…
QUICK ANSWERNo, Mullvad doesn't keep logs that can identify your online activity. After reviewing its privacy policy, every independent audit, and even the 2023 police…
This week underscored a shift in cybersecurity priorities. Authorities pursued the services, infrastructure, and financial channels supporting cybercrime, while regulators introduced new safeguards for emergency…
Key TakeawaysBreach Confirmed: ShinyHunters targeted American Tower in a June 2026 "pay or leak" extortion campaign.Data Exposed: The leaked dataset contained more than 215,000 unique…
Key TakeawaysExclusive Target: Throughout 2025, Gamaredon focused solely on Ukrainian governmental and military institutions, a new report says.New Tools: ESET Research documented six new PowerShell…
Key TakeawaysSoftware Deployed: TD Bank told some staff that it will use WorkiQ software to track time spent on browsers and internal communication applications.Weak Protections:…
Key TakeawaysBreach Confirmed: Polymarket said a third-party vendor compromise injected malicious code into its website for some users.Funds Stolen: Blockchain monitoring firm PeckShield reported that…
Key TakeawaysExtension Identified: Adblock for YouTube, a Chrome extension with more than 10 million installs, was flagged for hidden risk.Threat Type: Researchers found dormant JavaScript…
Key TakeawaysAI Lures: Between January and April 2026, Kaspersky detected more than 33,000 attacks targeting SMBs disguised as popular AI tools.Messenger Threats: Some 415,000 attacks…
Key TakeawaysTool Abused: Citizen Lab found forensic evidence that Cellebrite UFED was used on activist Andrey Pivovarov's iPhone 12 in June 2021.Policy Breached: The hack…
Key TakeawaysCredentials Stolen: Hackers mapped the network of an Australian infrastructure provider and acquired active user credentials, including those of its IT professionals.Dedicated Teams: ASIO…
Key TakeawaysAlleged Attack: Anthropic accused Alibaba and its AI lab Alibaba Qwen of the largest known distillation attack on its Claude AI model.Scale Detailed: The…
Key TakeawaysCoordinated Operation: Europol and Eurojust led Operation Endgame, dismantling the infrastructure behind SocGholish, Amadey, and StealC malware.Assets Seized: Over €41 million in criminal crypto…
Key TakeawaysNordVPN Dedicated Server: Provides private resources, static IP, port forwarding, and remote access capabilities.Dedicated Resources and Performance: Includes 1 vCPU, 4GB RAM, 1Gbps bandwidth,…
Key TakeawaysBreach Detected: KDDI identified unauthorized access on June 17, 2026, to an email system it manages for itself and other ISPs.Data Exposed: Roughly 14.2…
Key TakeawaysSentence Imposed: Minnesota man Nathan Austad received 18 months in prison for involvement in a credential stuffing attack.Third Defendant: Austad joins co-defendants Joseph Garrison…
Key TakeawaysTelegram Restrictions in India Leading to VPN Spikes: VPN downloads reached 919,000 in one day after temporary Telegram access restrictions.Alternative Access Methods: Telegram X…
Key TakeawaysSecureROM Targeted: Usbliter8 BootROM exploit affects iPhones and Apple Watch devices.Physical Access: The exploit chains a USB controller bug and a device firmware configuration…
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
