Cyber Security News, Privacy Research, AI Threats

Threats

TeamPCP traced to 2020: Oligo links group to ShadowRay botnet and cryptojacking

Six years, one infrastructure set. Oligo traced the group behind March's supply chain attacks back to a 2020 cryptojacking operation and to the first self-propagating …

Menu

Latest

Editors' Choice

Popular

Best Linux Distros for Ethical Hacking in 2026: Which One Should You Choose?

The digital footprint myth: why you cannot delete everything, and what works in 2026

Three Xiaomi camera flaws chain into Wi-Fi RCE with full exploit code published on GitHub

NocoBase sandbox escape to root RCE via console object prototype chain (CVE-2026-34156)

Win11Debloat: Free PowerShell Script That Removes Copilot, Telemetry, and Bloatware from Windows 10/11

General

Google paid $17.1 million in bug bounties in 2025, an all-time VRP record

Eight tech companies sign anti-fraud accord as global scam losses top $1 trillion

White House cyber strategy shifts to offensive operations and lighter regulation

Threats

TeamPCP traced to 2020: Oligo links group to ShadowRay botnet and cryptojacking

Trust without verification: wolfSSL accepts forged certificate chains (CVE-2026-5501)

FBI recovered deleted Signal messages from an iPhone notification database in federal court

April 8-9, 2026 vulnerability digest: GDPR compliance plugin opens WordPress sites to unauthenticated RCE

Contagious Interview now ships malicious packages to npm, PyPI, Go, Rust, and PHP

Incidents

Claude Code source code exposed through npm source map with 512,000 lines of TypeScript

Axios npm package compromised after maintainer account hijack delivers cross-platform RAT

European Commission cloud breach: attacker claims 350 GB stolen from Europa.eu

Iran-linked Handala publishes FBI Director Patel's personal photos and 300+ emails

Crunchyroll breached through Telus Digital outsourcer, 100 GB of data reportedly stolen

AI news

CIA to embed AI «co-workers» in every analytic platform within two years, deputy says

CVE-2026-26144: Excel XSS turns Copilot Agent into zero-click exfiltration tool

Tennessee grandmother jailed six months after AI facial recognition error

LLMs unmask anonymous internet users for $4 per person, ETH Zurich study finds

Grok's Paywall: How Musk Monetized the Problem Instead of Fixing It

Crypto

Bitcoin Depot loses 50.9 BTC to credential breach, ZachXBT contradicts SEC filing timeline

Solana's Drift Protocol drained of $285 million through fake token and governance hijack

Resolv hack: one compromised AWS key minted $80 million in unbacked stablecoins

Wife allegedly used home CCTV to steal $172 million in Bitcoin from husband's Trezor

AppsFlyer Web SDK hijacked in supply chain attack that swapped crypto wallet addresses

Cybercrime

BreachForums attribution war: ShinyHunters disowns N/A as forum splinters into rivals

Russian hacker gets 7 years, ransomware negotiator charged for attacking own clients

FBI seizes four Handala Hack domains, MOIS-linked group launches replacement within hours

Super Micro co-founder charged with smuggling $2.5 billion in Nvidia AI servers to China

Operation Lightning dismantles SocksEscort botnet that hijacked 369,000 devices worldwide

Gadgets

Three Xiaomi camera flaws chain into Wi-Fi RCE with full exploit code published on GitHub

Android 17 blocks non-accessibility apps from the AccessibilityService API

Hacker tricks Sony into permanently banning the top PlayStation trophy collector

MediaTek chip flaw lets attackers extract PINs and crypto seeds in 45 seconds

Tech

FCC bans all new foreign-made consumer routers, cites Volt and Salt Typhoon campaigns

GrapheneOS refuses age verification, will exit markets rather than collect user data

Essex Police suspends facial recognition after Cambridge study confirms racial bias

Firefox 149 adds free VPN with 50 GB limit, but it only covers browser traffic

Tools

Win11Debloat: Free PowerShell Script That Removes Copilot, Telemetry, and Bloatware from Windows 10/11

Best Linux Distros for Ethical Hacking in 2026: Which One Should You Choose?

Privacy

Deep web and Tor in 2026: how the hidden internet actually works

The digital footprint myth: why you cannot delete everything, and what works in 2026

Security

How investigators traced $625 million back to North Korea

F5 BIG-IP flaw reclassified from DoS to pre-auth RCE after active exploitation

Blackbox AI VS Code Extension Gives Attackers Root Access Through Hidden Prompt in an Image

Stay informed on cybersecurity