Operation Cronos dismantled LockBit ransomware group by undermining affiliate trust
As reported by Dark Reading, Operation Cronos, a significant international law enforcement effort, successfully dismantled LockBit, once one of the most domi...
SC Media
20 articles
Hackers exploit FastJson vulnerability for remote code execution
Bleeping Computer disclosed that hackers are actively exploiting a critical vulnerability in the FastJson open-source Java library, enabling remote code exec...
German government report details Windows Hello for Business biometric security limitations
Germany’s Federal Office for Information Security (BSI) published a technical analysis of Windows Hello for Business, detailing how the system performs biome...
Italian organizations targeted by 148 ransomware attacks in first half of 2026
Italian organizations faced 148 confirmed ransomware attacks in the first half of 2026, with the manufacturing sector being the most frequently targeted.
Malicious Steam workshop map delivered malware to MECCHA CHAMELEON players
As outlined in Cyber Insider, a malicious Steam Workshop map for the game MECCHA CHAMELEON exploited a vulnerability in the game's mod-loading system to deli...
Google introduces new cybercrime naming taxonomy, diverging from Microsoft's initiative
The Register reports that Google unveiled its own taxonomy for categorizing cybercrime groups, a move that appears to sideline a previous industry-wide effor...
Deep Fakes, Molten Salt, PLCS, Checkpoint, Hugging Face, CENTOS, Josh Marpet and More - SWN #602
IPMI bug in BMCs found after 22 years, exposes 24,000-plus servers
Decades-old IPMI bug leaves thousands of internet-facing servers exposed.
How AI is turning old data sprawl into a new security risk
AI is exposing hidden data sprawl, making governance a cybersecurity priority.
Define a Minimum Viable Business for disaster recovery -- before the next incident
Here’s the conversations CIOs and CISOs need to have before the next security incident.
Inside the OWASP Agent Security Regression Harness Project - Mert Satilmaz - ASW #393
How to Design Segmentation That Actually Reduces Blast Radius
Does movement between these zones require explicit authorization or can it proceed on implicit trust?
GitHub and PyPI implement new security measures against supply-chain attacks
Based on information from Bleeping Computer, GitHub and the Python Package Index (PyPI) have introduced new time-based security mechanisms within their devel...
Russian hackers exploited Zimbra zero-day in espionage campaigns
Russian state-sponsored cybercriminals exploited a zero-day vulnerability in the Zimbra email and collaboration platform to conduct espionage against Western...
Steam forums used for ClickFix cryptominer attacks
In a report by Bleeping Computer, threat actors are exploiting Steam discussion forums to distribute cryptominers through a social engineering tactic known a...
The enduring mystery of hacker Phineas Fisher
As outlined in TechCrunch, the enigmatic hacker known as Phineas Fisher remains one of the most elusive and impactful figures in cybersecurity, a decade afte...
Malvertising campaign assembles malware in browser
A large-scale malvertising campaign is using fake websites for Solana, Luno, and TradingView, employing malicious JavaScript to assemble malware directly in ...
Phishing attacks on insurance companies evolve to real-time account hijacking
Phishing campaigns targeting financial institutions are evolving from credential harvesting for later use to real-time account hijacking, based on informatio...
Scammers impersonate ShinyHunters in new sextortion email campaign
Following insights from Bleeping Computer, threat actors are leveraging email addresses exposed in data breaches, previously leaked by the ShinyHunters extor...
Pope's prayer app leaks 700,000 user emails
The Click To Pray app, endorsed by the Pope and used by hundreds of thousands worldwide, was leaking user names and email addresses for months.