Cybersecurity
Fake Decryption Tools Masked $11M Markup in Ransomware Recovery Scheme
Zohar Pinhasi was paying ransoms to obtain decryption keys and then charging victims substantially more for remediation.
Cybersecurity
Latest news
Cybersecurity
Oracle Health Data Breach Tally Climbs to Nearly 20 Million
The figure is far higher than the counts that surfaced in earlier filings and patient notifications.
Cybersecurity
FortiBleed Attackers Locking Victims Out of Fortinet Devices
Attackers are creating new accounts and deleting existing ones and passwords to prevent legitimate access.
Cybersecurity
U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks
The U.S. State Department is offering up to $10 million for information leading to the identification or location of Zhang Yu, a Chinese national charged in the United States in connection with the 2021 Microsoft Exchange Server attacks known as HAFNIUM. The reward is for information leading to his…
Cybersecurity
MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data
The U.S. Department of Justice (DoJ) on Wednesday announced charges against a 50-year-old U.S. and Israeli national for allegedly defrauding ransomware victims by secretly paying the attackers to obtain decryptors while claiming to use proprietary tools to recover their data.
Cybersecurity
KVKK’dan Yıldız Teknik Üniversitesi için Veri İhlal Bildirimi
KVKK, Yıldız Teknik Üniversitesi’nde 140 bin öğrenci ve 4 bin 500 personeli etkileyen fidye yazılımı kaynaklı veri ihlalini duyurdu. Detaylar haberimizde.
Cybersecurity
KVKK’dan Nesine için Veri İhlal Bildirimi
KVKK, Nesine platformunda yaşanan veri ihlali hakkında resmi açıklama yaptı. Siber saldırı sonrası etkilenen veriler ve süreçle ilgili detaylar haberimizde.
Cybersecurity
Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland
On the second day of Pwn2Own Ireland 2026, security researchers collected $232,500 in cash awards after exploiting 45 unique zero-day vulnerabilities.
Cybersecurity
Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm
The npm package known as “tensorlake,” a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was compromised as part of a ChainDrop / Shai-Hulud supply chain attack. The malicious version 0.5.144 “contains obfuscated malware that harvests…
Cybersecurity
KVKK, “Yıldız Teknik Üniversitesi” için veri ihlal bildirimi geçti
Kişisel Verileri Koruma Kurumu (KVKK) bugün resmi sitesi üzerinden Yıldız Teknik Üniversitesi için bir veri ihlal bildirimi geçti.
Cybersecurity
KVKK, “Nesine” için veri ihlal bildirimi geçti
Kişisel Verileri Koruma Kurumu (KVKK) bugün resmi sitesi üzerinden Nesine (D Elektronik Şans Oyunları ve Yayıncılık A.Ş) için bir veri ihlal bildirimi geçti.
Cybersecurity
Ransomware fixer claimed he could decrypt files, allegedly defrauded clients instead
Feds claim he charged clients more than ransoms, paid up, pocketed the difference
Cybersecurity
Ransomware recovery CEO charged over secret ransom payments
The owner of ransomware remediation company MonsterCloud has been charged with allegedly defrauding ransomware victims by secretly paying their attackers for decryptors while claiming to use proprietary technology to recover encrypted data.
Cybersecurity
Australian Gov’t Weighs Mandatory AI Incident Reporting
In the wake of an agentic attack against its own Medicare systems, Australia’s government is feeling out what regulations might look like for frontier AI companies.
Cybersecurity
Shaq Got Hacked. Now He’s Pitching for a VPN
At a recent event for security firm NordVPN, NBA superstar Shaquille O’Neal revealed that he got hacked—and warned the public about the need to “have control of their own information.”
Cybersecurity
FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins
The FBI is warning that FortiBleed attacks are still ongoing, targeting exposed Fortinet FortiGate firewalls and SSL VPN gateways and locking out legitimate administrators.
Cybersecurity
Citizen Lab Slams Trump Administration, ‘Techno-Fascist’ Executives
The Citizen Lab’s Ron Deibert warns the US government is pushing for pervasive surveillance and says certain technology executives are all too happy to help.
Cybersecurity
Hackers hijack Google domains after breaching ccTLD registries
Hackers obtained unauthorized HTTPS certificates for several Google domains and hijacked domains in the country-code top-level domains (ccTLDs) for Ghana, American Samoa, and Sierra Leone after compromising third-party operators and modifying authoritative DNS records.
Cybersecurity
Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer
Cybersecurity researchers have disclosed details of a long-running npm supply chain malware campaign that pushes information stealers and remote access trojans (RAT) to compromised hosts. The campaign has been codenamed MALFEX by CloudSEK and Checkmarx. The activity is assessed to be the work of a…
Cybersecurity
SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances
SonicWall has released hotfixes for four flaws in its SMA1000 appliances, the gateways that give remote workers access to a company’s network and applications. The most serious could allow an attacker without a login to send requests through the appliance and reach internal functions. SonicWall…
Cybersecurity
Poetry is the new AI security threat as PoeLLM malware infects 3K+ servers
Quoth the LLM, ‘More and more’
Cybersecurity
Hackers steal millions of Discord IDs and email addresses in “deliberate, multi-stage attack” on security service Double Counter
Gaming chat app Discord has suffered another user data breach, with a suspected 1 million email addresses stolen alongside (potentially many more) user IDs and IP addresses. While Discord was not targeted directly, third party security service Double Counter have reported a “deliberate, multi-stage…
Cybersecurity
Microsoft Outlook to block MSIX attachments starting November
Microsoft announced that it will add .msix and .msixbundle attachments to the list of blocked attachments in Outlook Web and the new Outlook Windows client starting next month.
Latest digest
Week 41
EN
Popular stories
Sources
72 active sources
27 Turkish · 45 English
All sources
