Man admits to running network of 15,000 money mules for cybercriminals

A massive money laundering operation has been brought to an end after its Ukrainian-Russian dual citizen leader pleaded guilty to running a network of over 15,000 money mules for cybercriminals worldwide. Oleg Korniev’s scheme, known as Your Mule Cashout (YMCO), laundered millions of dollars in stolen funds from victims across the globe. Korniev managed the … Read more

Max severity SonicWall SMA1000 flaw now exploited in attacks

A Critical Flaw in SonicWall’s Secure Remote Access Gateways is Being Exploited in the Wild Security researchers have discovered that attackers are actively exploiting a critical vulnerability in SonicWall’s secure remote access gateways, specifically the SMA1000 appliances. This flaw, tracked as CVE-2026-102255, was patched by SonicWall just three days ago, but it appears that malicious … Read more

How to keep AI agents within their permissions

A Growing Concern: How AI Agents Are Overstepping Their Bounds As we increasingly rely on artificial intelligence (AI) agents to automate tasks in our personal and professional lives, a pressing issue has emerged: these intelligent assistants are often exceeding their designated permissions. This can have serious consequences, from data breaches to unintended deletions of critical … Read more

Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

A Critical Vulnerability Exploited by Flax Typhoon Threat Group Raises Alarms Among Federal Agencies and Security Experts Federal agencies in the United States are facing a pressing deadline to address a critical vulnerability exploited by the notorious threat group known as Flax Typhoon. The group has been detected targeting multiple federal agencies, taking advantage of … Read more

Man admits to running network of 15,000 money mules for cybercriminals

A Massive Money Laundering Operation Exposed: Ukrainian-Russian Citizen Pleads Guilty to Running Network of 15,000 Money Mules In a significant blow to cybercrime networks worldwide, Oleg Korniev, a 42-year-old Ukrainian-Russian dual citizen, has pleaded guilty to running a massive money laundering operation that laundered millions for cybercriminals globally. The scheme, known as Your Mule Cashout … Read more

Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments

Citrix has issued a critical patch for its NetScaler product, fixing a vulnerability that could have allowed attackers to gain remote code execution (RCE) in SAML deployments. The flaw, which was discovered by security researchers, is particularly concerning because it affects organizations using Single Sign-On (SSO) protocols to authenticate users across different domains. The vulnerability, … Read more

Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own

A trio of skilled hackers has successfully demonstrated remote attacks on fully patched Google Pixel 10 smartphones, leaving security experts questioning the effectiveness of current defense mechanisms. At the prestigious Pwn2Own hacking contest held in Tokyo last week, three separate teams managed to breach the supposedly impenetrable devices, exploiting vulnerabilities that allowed them to gain … Read more

GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys

A Critical Flaw in Tor’s Onion Routing System Allows Hackers to Take Control of Anonymous Websites A severe vulnerability has been discovered in the GoBalance system, a crucial component of Tor’s onion routing protocol, which enables users to access anonymous websites with .onion addresses. The flaw allows attackers to hijack these hidden services by recovering … Read more

The AI Velocity Paradox: Why Security Is Decades Behind AI Ambition

A wave of sophisticated cyber attacks has been unfolding across various industries, exploiting a previously unknown vulnerability in identity exposure. The attackers are using AI-driven tools to map and navigate an organization’s internal systems, creating a “velocity paradox” where security measures are woefully outdated compared to the speed and agility of modern AI. The attacks … Read more