Ionut Arghire

Franklin Ifeanyichukwu Okwonna and Ebuka Raphael Umeti were sentenced to prison in the US for business email compromise (BEC) fraud.

Microchip Technology says employee contact information and other types of data was stolen in an August ransomware attack.

The FBI warns of North Korean threat actors conducting social engineering campaigns targeting employees in the cryptocurrency industry.

Zyxel has released patches for multiple vulnerabilities in its networking devices, including a critical flaw impacting access points and security routers.

D-Link warns of multiple remote code execution vulnerabilities impacting its discontinued DIR-846 router model.

Google has released Android security updates to patch an exploited local privilege escalation vulnerability.

VMware rolls out patch for a high-severity code execution vulnerability in the Fusion hypervisor.

The FTC complaint alleges that Verkada’s failures allowed a hacker to access customers’ security cameras.

The City of Columbus sued a researcher who disclosed the impact of the data breach caused by a recent ransomware attack.

Google has released two Chrome 128 updates to address six high-severity vulnerabilities reported by external researchers.

Fortra limits access to FileCatalyst Workflow database after vendor knowledgebase article leaks default credentials.

Censys warns of over 1,200 internet-accessible WhatsUp Gold instances potentially exposed to malicious attacks.

The sporting goods retail chain said the incident exposed portions of the its IT systems containing confidential information.

Cisco on Wednesday announced NX-OS software updates that resolve multiple vulnerabilities, including a high-severity DoS bug.

European password management startup Uniqkey has raised €5.35 million (~$5.9 million) from BackingMinds.

Threat actors are abusing the Microsoft Sway service to host phishing pages leveraged in QR phishing attacks targeting Office 365 users.

Iranian state-sponsored APT Lemon Sandstorm is working closely with ransomware groups on monetizing network intrusions.

Google has significantly increased the rewards for Chrome browser vulnerabilities, offering up to $250,000 for remote code execution bugs.

The US government is offering a $2.5 million reward for information leading to the arrest of malware distributor Volodymyr Kadariya.

The personal information of over 950,000 people was compromised in a BlackSuit ransomware attack on Young Consulting.