Login
Interpol cybercrime crackdown leads to 94 arrests, 45,000 IP takedowns
Operation Synergia's third season is the most productive to date
Ninety-four people were arrested as part of a global, multi-month cybercrime crackdown, Interpol revealed today.…
Reading view
NanoClaw latches onto Docker Sandboxes for safer AI agents
Take your YOLO and box it up
exclusive NanoClaw, an open source agent platform, can now run inside Docker Sandboxes, furthering the project's commitment to security.…
Google rushes Chrome update fixing two zero-days already under attack
Skia graphics lib and V8 JavaScript engine brings browser's tally of actively exploited bugs to three in 2026
Google has pushed out an emergency Chrome update to fix two previously unknown vulnerabilities that attackers were already exploiting before the patches landed.…
Rogue AI agents can work together to hack systems and steal secrets
Prompt like a hard-ass boss who won't tolerate failure and bots will find ways to breach policy
AI agents work together to bypass security controls and stealthily steal sensitive data from within the enterprise systems in which they operate, according to tests carried out by frontier security lab Irregular.…
Operation Lightning takes down SocksEscort proxy network blamed for tens of millions in fraud
International cops stuck down 23 servers in 7 countries
Cops from eight countries this week disrupted SocksEscort, a residential proxy service used by criminals to compromise hundreds of thousands of routers worldwide and carry out digital fraud, costing businesses and consumers millions.…
CISA warns max-severity n8n bug is being exploited in the wild
No rest for project maintainers battered by slew of vulnerability disclosures
The US Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that hackers are exploiting a max-severity remote code execution (RCE) vulnerability in workflow automation platform n8n.…
China’s CERT warns OpenClaw can inflict nasty wounds
Like deleting data, exposing keys, and loading malicious content - which may be why Beijing has reportedly banned it
China’s National Computer Network Emergency Response Technical Team has warned locals that the OpenClaw agentic AI tool poses significant security risks.…
Iran plots 'infrastructure warfare' against US tech giants
State news published a list of nearly 30 sites that could be targeted
Iran has reportedly designated Amazon, Google, IBM, Microsoft, Nvidia, Oracle, and Palantir facilities as legitimate targets of retaliatory strikes, according to an Al Jazeera report citing Iran’s state-affiliated Tasnim news agency.…
Iran-linked cyber crew says they hit US med-tech firm
Meanwhile, Verifone says 'no evidence' to support the digital intruders' claims
A hacking crew with ties to Iran's intelligence agency claimed to be behind a global network outage at med-tech firm Stryker on Wednesday, and said the cyberattack was in response to the US-Israel airstrikes.…
Meta, international cops use handcuffs and AI to stop scammers
150k accounts nuked, 21 suspects arrested
Not every scam starts with malware or a compromised account. Sometimes all it takes is a friend request or a link shared via chat.…
ICO fines Police Scotland over data-sharing debacle in gross misconduct case
Blue-on-blue internal investigation lands force £66k fine
The UK's data protection watchdog has fined Police Scotland £66,000 ($88,000) for what it calls a "serious failure" in handling an alleged victim's sensitive data.…
Swiss e-voting pilot can't count 2,048 ballots after USB keys fail to decrypt them
Officials suspend Basel-Stadt trial and launch probe
A Swiss canton has suspended its pilot of electronic voting after failing to count 2,048 votes cast in national referendums held on March 8.…
Dutch cops bust teen suspected of posing as bank staff to steal cards
17-year-old allegedly withdrew large sums of cash from ATMs
Dutch police have arrested a 17-year-old boy who detectives suspect was responsible for 16 bank card frauds across the Netherlands.…
EU legal eagle says banks should refund cybercrime victims first, argue later
Advocate General urges rethink of PSD2 to speed compensation after scams
Analysis One of the European Union's top legal advisors is trying to change how banks treat cybercrime victims – meaning they could enjoy greater financial protections sooner than expected.…
Building the UK’s next generation of cyber talent
Reflecting on the relaunch of the UK Cyber Team and introducing the next phase of leadership
Partner Content The UK Cyber Team is a government initiative led by the Department for Science, Innovation and Technology in partnership with SANS Institute. Its purpose is to identify, develop, and support the UK’s most promising emerging cyber talent, while ensuring the UK is represented with confidence and credibility on the international cyber stage.…
Critical Microsoft Excel bug weaponizes Copilot Agent for zero-click information disclosure attack
Could steal sensitive personal and financial data
After a whopper of a Patch Tuesday last month, with six Microsoft flaws exploited as zero-days, March didn't exactly roar in like a lion. Just two of the 83 Microsoft CVEs released on Tuesday are listed as publicly known, and none is under active exploitation, which we're sure is a welcome change to sysadmins.…
Cybercrime isn't just a cover for Iran's government goons - it's a key part of their operations
Ransomware, malware-as-a-service, infostealers benefit MOIS, too
Iranian government-backed snoops are increasingly using cybercrime malware and ransomware infrastructure in their operations - not just hiding behind criminal masks as a cover for destructive cyber activity, according to security researchers.…
Crooks compromise WordPress sites to push infostealers via fake CAPTCHA prompts
Rapid7 says crims broke into more than 250 sites globally, including a US Senate candidate’s campaign page
Cyber baddies quietly compromised legitimate WordPress websites, including the campaign site of a US Senate candidate, turning them into launchpads for a global infostealer operation.…
Fake job applications pack malware that kills endpoint detection before stealing data
Russian-speaking attackers lure HR staff into downloading ISO files that disable defenses
A Russian-speaking cyber criminal is targeting corporate HR teams with fake CVs that quietly install malware which can disable security tools before stealing data from infected machines.…
Ericsson blames vendor vishing slip-up for breach exposing thousands of records
Crooks used simple phone scam to compromise vendor account, spilling personal and financial data belonging to more than 15,000 people
A voice-phishing scam targeting one of Ericsson's service providers has exposed the personal data of more than 15,000 individuals after attackers sweet-talked an employee into handing over access.…
