Ionut Arghire

Davis Lu was sentenced to four years in prison for installing malicious code on employer’s systems and for deleting encrypted data.

Between June and August, over 300 entities were targeted with the Atomic macOS Stealer via malvertising.

MITRE has updated the list of Most Important Hardware Weaknesses to align it with evolving hardware security challenges.

Noah Urban was sentenced to 10 years in prison for his role in the notorious cybercriminal operation known as Scattered Spider.

Russian state-sponsored hackers tracked as Static Tundra continue to target Cisco devices affected by CVE-2018-0171.

Orange Belgium says hackers accessed data pertaining to 850,000 customer accounts during a July cyberattack.

Apple has rolled out iOS and macOS updates that resolve a zero-day vulnerability exploited in highly targeted attacks.

Elastic has found no evidence of a vulnerability leading to RCE after details and PoC of a Defend EDR bypass were published online.

The US Department of Justice has announced the takedown of the RapperBot botnet and charges against its American administrator.

Inotiv has notified the SEC that its business operations took a hit after hackers compromised and encrypted its internal systems.

Google and Mozilla have released patches for multiple high-severity vulnerabilities affecting Chrome and Firefox.

PipeMagic, which poses as a ChatGPT application, is a modular malware framework that provides persistent access and flexibility.

Bragg Gaming Group says hackers accessed its internal systems over the weekend, but did not affect its operations.

A new public exploit chains two critical flaws in SAP NetWeaver, exposing unpatched instances to code execution attacks.

Citizen Lab has identified links between multiple VPN providers, and multiple security weaknesses in their mobile applications.

More than 870 N-able N-central instances have not been patched against CVE-2025-8875 and CVE-2025-8876, two exploited vulnerabilities.

The US has indicted Zeppelin ransomware operator Ianis Antropenko, seizing over $2.8 million in cryptocurrency from his wallet.

Chinese APT UAT-7237 has been targeting Taiwanese web infrastructure for long-term access to high-value entities.

Microsoft handed out $17 million in rewards to 344 security researchers through its bug bounty programs over the past year.

DaVita has notified over 1 million individuals that their personal and health information was stolen in a ransomware attack.