Dozens of websites have been compromised and are using fake Cloudflare checks to deliver a malicious payload known as LunexStealer, which can siphon off sensitive user data. The security threat has left many users wondering if their online activities are truly secure. The compromised websites appear to be legitimate businesses and organizations that are unwittingly … Read more
A Long-Running NPM Malware Campaign Has Accumulated Over 40,000 Downloads A malicious campaign targeting the Node Package Manager (NPM) supply chain has been secretly accumulating downloads for over a year. Dubbed MALFEX, the threat actor behind this campaign has published no fewer than 12 packages, eight of which are malicious and have resulted in more … Read more
A September to Remember for Cybersecurity M&A Deals, with 39 Transactions Announced September 2026 proved to be an exceptionally busy month for the cybersecurity industry, with no less than 39 merger and acquisition (M&A) deals announced. This flurry of activity reflects a growing recognition among companies that investing in cybersecurity is essential for long-term success … Read more
Apple is cracking down on a feature in its macOS operating system that has been exploited by malicious applications. The company will introduce tighter controls around “Full Disk Access,” which allows certain apps to access sensitive user data, including emails, messages, and browsing history. The move comes as AI agents and modern applications increasingly request … Read more
A notorious cybercrime mastermind has been brought to justice by the FBI, marking a significant victory in the ongoing battle against ATM jackpotting and other financial crimes. Anibal Alexander Canelon Aguirre, also known as “Prometheus” and “The Engineer”, was arrested on October 2nd and charged with his role in the violent transnational criminal organization Tren … Read more
Over a million people in Arizona had their personal information stolen in a cyberattack on the state’s court system, with details of unpaid fines and orders of protection compromised. The breach is believed to have started when an employee clicked on a malicious email link. The attack, which has been shut down by the court’s … Read more
A record 39 cybersecurity-related merger and acquisition (M&A) deals were announced in September 2026, marking a significant milestone in the rapidly evolving security landscape. This wave of consolidation is driven by the growing demand for advanced threat detection, artificial intelligence-powered security solutions, and comprehensive incident response capabilities. At the forefront of this trend are several … Read more
Apple Tightens the Reins on Full Disk Access in macOS to Mitigate AI-Related Risks In a move aimed at safeguarding user data, Apple has announced plans to introduce additional controls for Full Disk Access (FDA) in its macOS operating system. This decision comes as a response to the growing risks associated with continuously evolving artificial … Read more
A major blow to international cybercrime was dealt on October 2 when Anibal Alexander Canelon Aguirre, a Venezuelan national and alleged leader of Tren de Aragua (TdA), a notorious transnational criminal organization, was arrested by the FBI. Canelon Aguirre, also known as ‘Prometheus’ or ‘The Engineer’, has been on the run since March 2026, when … Read more
A massive cyberattack on Arizona’s court system has compromised the personal information of over 1.3 million people, exposing a vulnerability in the state’s justice system. The breach began when an unsuspecting court employee clicked on a malicious link sent via email, allowing hackers to gain access to sensitive data stored on a backup server. The … Read more