A notorious Ryuk ransomware member has been sentenced to two years in prison and three years of supervised release for orchestrating devastating cyberattacks on US companies. Karen Serobovich Vardanyan, also known online as “Maneeken” or “Karl Lagerfeld,” pleaded guilty in July after being extradited from Ukraine following his April 2025 arrest. Vardanyan’s involvement in the … Read more
A critical issue has been discovered in Microsoft’s latest Windows 11 security updates, affecting Always On VPN connections for thousands of users worldwide. The September 2026 patches, designed to bolster system security, have inadvertently caused problems with this popular remote access solution. Always On VPN is a secure connection technology that allows employees to access … Read more
A Zero-Day Chain Attack on Windows and Chrome Users Exposes Sensitive Data to Chinese Hackers Chinese hackers have been exploiting a zero-day chain vulnerability in both Google’s Chrome browser and Microsoft’s Windows operating system, deploying malware known as CLEANGULP. This sophisticated attack allows cybercriminals to access sensitive data and take control of compromised systems. The … Read more
A critical zero-day vulnerability in F5’s BIG-IP Application Delivery Controller (ADC) has been exploited for unauthenticated remote code execution on OAuth servers, leaving organizations vulnerable to potential attacks. The vulnerability, which affects versions 14.x and 15.x of the BIG-IP APM module, allows an attacker to execute arbitrary code with root privileges on affected systems. F5 … Read more
Microsoft has disrupted a major phishing-as-a-service (PhaaS) platform called EvilTokens, which was being used by cybercriminals to target Microsoft 365 accounts and compromise sensitive business email communications. The operation, carried out in coordination with law enforcement and other private sector organizations, involved the seizure of over 50 websites and the disabling of more than 150 … Read more
A vast network of intermediary servers, known as relays, is allowing users in China to access cutting-edge artificial intelligence (AI) models in the US without revealing their identities and location. This practice, likely aimed at cloning or distilling these advanced AI capabilities, raises concerns about intellectual property theft and potential misuse. Researchers from cybersecurity firm … Read more
A Critical BIG-IP APM Zero-Day Flaw Has Been Exploited in Remote Code Execution Attacks F5, a leading cybersecurity company, has released urgent security updates to address a critical vulnerability in its BIG-IP Access Policy Manager (APM) solution. The zero-day flaw, tracked as CVE-2026-94127, allows attackers to execute remote code, putting thousands of organizations at risk. … Read more
A Shadowy Group Claims to Have Breached FBI Systems, Exposing Data on Agents and Job Applicants ShinyHunters, a notorious threat actor group known for selling stolen data on the dark web, has made a shocking claim: they’ve breached FBI systems, compromising sensitive information about federal agents and job applicants. According to reports, ShinyHunters claims to … Read more
Critical Next.js Bug Exposes Servers to Remote Code Execution via Malicious SVG Input A severe vulnerability in the popular Next.js framework has been discovered, allowing attackers to execute arbitrary code on servers hosting applications that use its ImageResponse feature. The flaw, which can be exploited by submitting specially crafted SVG input, puts thousands of websites … Read more
A sprawling network of intermediary servers has been found to be enabling users in China to access cutting-edge AI models in the US without revealing their identities or location. More than 80,000 “relay” servers, discovered by cybersecurity firm Team Cymru, are allowing operators to pool credentials for multiple AI accounts and route user requests through … Read more