Ryuk ransomware member sentenced to 24 months in prison

A notorious figure in the world of cybercrime has been brought to justice. Karen Serobovich Vardanyan, a 35-year-old Armenian man known online as “Maneeken” or “Karl Lagerfeld,” was sentenced to 24 months in prison and three years of supervised release for his role in Ryuk ransomware attacks that targeted U.S. companies between March 2019 and … Read more

Microsoft: September Windows updates break Always On VPN connections

Microsoft’s Latest Windows Updates Cause Major Issues with Always On VPN Connections IT administrators around the world are facing a major headache after Microsoft’s latest set of security updates for Windows 11 caused Always On VPN connections to malfunction. The issue, which affects both home and enterprise users, has left many struggling to connect to … Read more

Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

Chinese hackers have unleashed a sophisticated attack on unsuspecting Windows users, exploiting a previously unknown vulnerability in Google’s Chrome browser to deploy the CLEANGULP malware. This zero-day chain allows attackers to gain control over compromised systems, creating a pathway for further breaches and potentially catastrophic consequences. The attackers’ modus operandi involves targeting vulnerabilities in the … Read more

F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers

A critical zero-day vulnerability in F5’s BIG-IP Application Delivery Controller (ADC) has been exploited, granting attackers unauthenticated remote code execution on OAuth servers. This security flaw affects a staggering number of organizations worldwide, making it an urgent matter for IT teams to patch their systems immediately. The vulnerability, designated as CVE-2026-0001, resides in F5’s BIG-IP … Read more

Ryuk ransomware member sentenced to 24 months in prison

A notorious Ryuk ransomware member has been sentenced to two years in prison and three years of supervised release for orchestrating devastating cyberattacks on US companies. Karen Serobovich Vardanyan, also known online as “Maneeken” or “Karl Lagerfeld,” pleaded guilty in July after being extradited from Ukraine following his April 2025 arrest. Vardanyan’s involvement in the … Read more

Microsoft: September Windows updates break Always On VPN connections

A critical issue has been discovered in Microsoft’s latest Windows 11 security updates, affecting Always On VPN connections for thousands of users worldwide. The September 2026 patches, designed to bolster system security, have inadvertently caused problems with this popular remote access solution. Always On VPN is a secure connection technology that allows employees to access … Read more

Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

A Zero-Day Chain Attack on Windows and Chrome Users Exposes Sensitive Data to Chinese Hackers Chinese hackers have been exploiting a zero-day chain vulnerability in both Google’s Chrome browser and Microsoft’s Windows operating system, deploying malware known as CLEANGULP. This sophisticated attack allows cybercriminals to access sensitive data and take control of compromised systems. The … Read more

F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers

A critical zero-day vulnerability in F5’s BIG-IP Application Delivery Controller (ADC) has been exploited for unauthenticated remote code execution on OAuth servers, leaving organizations vulnerable to potential attacks. The vulnerability, which affects versions 14.x and 15.x of the BIG-IP APM module, allows an attacker to execute arbitrary code with root privileges on affected systems. F5 … Read more

Microsoft Disrupts EvilTokens Device Code Phishing Service

Microsoft has disrupted a major phishing-as-a-service (PhaaS) platform called EvilTokens, which was being used by cybercriminals to target Microsoft 365 accounts and compromise sensitive business email communications. The operation, carried out in coordination with law enforcement and other private sector organizations, involved the seizure of over 50 websites and the disabling of more than 150 … Read more