562/69 Wednesday, October 14, 2026 A U.S. federal court has sentenced 30-year-old Raheim Hamilton to 40 years in prison for co-founding and operating Empire Market, a darknet marketplace that facilitated more than USD 430 million in illegal transactions between 2018 and 2020. The case is significant for cybersecurity and international law enforcement because it targets […]
561/69 Monday, October 12, 2026 Researchers from CrowdStrike disclosed a campaign targeting multiple financial organizations from late September to early October 2026, with evidence indicating that data was exfiltrated from compromised systems. The attackers used ARTEX, an open-source agentic penetration testing tool, together with Claude Code and multiple Large Language Models (LLMs) to support their […]
560/69 Monday, October 12, 2026 Edward Dubrovsky, a 54-year-old Canadian cybersecurity executive, was arrested in Pennsylvania, United States, in a case reportedly connected to the FBI’s ongoing investigation into the ShinyHunters group. Dubrovsky previously held senior positions at cybersecurity companies that assisted victims of data breaches and ransomware attacks with ransom negotiations involving cybercriminals. FBI […]
559/69 Monday, October 12, 2026 Cybersecurity researchers from Bitdefender have disclosed the discovery of a malware campaign named Midnight Mimosa, which comes preinstalled in the firmware of several brands of budget Android smartphones based on MediaTek platforms. The malware is embedded in the devices before users turn them on for the first time and cannot […]
558/69 Friday, October 9, 2026 Cybersecurity researchers have disclosed that version 0.5.144 of the tensorlake package on npm was compromised with malware as part of a supply chain campaign linked to ChainDrop/Shai-Hulud. The malware executes during package installation through a preinstall script and is designed to steal credentials and sensitive information from developer systems, including […]
557/69 Friday, October 9, 2026 ASOS disclosed that it is investigating an unauthorized access incident after attackers used the company’s official mobile application to send push notifications directly to customers on October 6, 2026. The notification, titled “ASOS HACKED,” claimed that the attackers had compromised a Snowflake instance and threatened to publish the data unless […]
556/69 Friday, October 9, 2026 The U.S. Department of Justice has charged an executive of MonsterCloud, a company providing ransomware recovery services, with allegedly defrauding organizations that had fallen victim to cyberattacks. According to reports, the company advertised that it possessed advanced proprietary technology capable of decrypting customers’ data without negotiating with ransomware groups. In […]
555/69 Thursday, October 8, 2026 Researchers from Patchstack have disclosed active exploitation of Stored Cross-Site Scripting (XSS) vulnerabilities in two WordPress plugins: Ninja Forms, tracked as CVE-2026-94504 and affecting version 3.15.3 and earlier, and WPC Product Bundles for WooCommerce, tracked as CVE-2026-93836 and affecting version 8.6.6 and earlier. In both cases, attackers used JavaScript payloads […]
554/69 Thursday, October 8, 2026 Cybersecurity researchers have disclosed a phishing platform impersonating advertising services associated with multiple AI chatbots, including Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and Manus. The fake websites claim to provide services such as advertising campaign optimization, spending monitoring, and business account integration. In reality, they are designed […]
553/69 Thursday, October 8, 2026 Atlassian has issued a security advisory regarding CVE-2026-21589, which affects several self-hosted Data Center products, particularly widely used platforms such as Confluence, Jira, and Bitbucket. The vulnerability could allow an unauthenticated attacker to access files within affected systems, potentially exposing sensitive information stored on organizational servers. Atlassian Cloud customers are […]
