A Ukrainian man indicted in 2012 for conspiring with a prolific hacking group to steal tens of millions of dollars from U.S. businesses was arrested in Italy and is now

Continue ReadingAlleged Jabber Zeus Coder ‘MrICQ’ in U.S. Custody

Aisuru, the botnet responsible for a series of record-smashing distributed denial-of-service (DDoS) attacks this year, recently was overhauled to support a more low-key, lucrative and sustainable business: Renting hundreds of

Continue ReadingAisuru Botnet Shifts from DDoS to Residential Proxies

Financial regulators in Canada this week levied $176 million in fines against Cryptomus, a digital payments platform that supports dozens of Russian cryptocurrency exchanges and websites hawking cybercrime services. The

Continue ReadingCanada Fines Cybercrime Friendly Cryptomus $176M

Cybercriminals are abusing a widespread lack of authentication in the customer service platform Zendesk to flood targeted email inboxes with menacing messages that come from hundreds of Zendesk corporate customers

Continue ReadingEmail Bombs Exploit Lax Authentication in Zendesk

Microsoft today released software updates to plug a whopping 172 security holes in its Windows operating systems, including at least two vulnerabilities that are already being actively exploited. October’s Patch

Continue ReadingPatch Tuesday, October 2025 ‘End of 10’ Edition

The world’s largest and most disruptive botnet is now drawing a majority of its firepower from compromised Internet-of-Things (IoT) devices hosted on U.S. Internet providers like AT&T, Comcast and Verizon,

Continue ReadingDDoS Botnet Aisuru Blankets US ISPs in Record DDoS

A cybercriminal group that used voice phishing attacks to siphon more than a billion records from Salesforce customers earlier this year has launched a website that threatens to publish data

Continue ReadingShinyHunters Wage Broad Corporate Extortion Spree

U.S. prosecutors last week levied criminal hacking charges against 19-year-old U.K. national Thalha Jubair for allegedly being a core member of Scattered Spider, a prolific cybercrime group blamed for extorting

Continue ReadingFeds Tie ‘Scattered Spider’ Duo to $115M in Ransoms

At least 187 code packages made available through the JavaScript repository NPM have been infected with a self-replicating worm that steals credentials from developers and publishes those secrets on GitHub,

Continue ReadingSelf-Replicating Worm Hits 180+ Software Packages

In May 2025, the European Union levied financial sanctions on the owners of Stark Industries Solutions Ltd., a bulletproof hosting provider that materialized two weeks before Russia invaded Ukraine and quickly

Continue ReadingBulletproof Host Stark Industries Evades EU Sanctions