> TODAY'S SUMMARY (2 articles)
Today's cyber news highlights significant legal actions against individuals involved in cybercrime. Raheim Hamilton, co-creator of the Empire Market dark web platform, received a 40-year prison sentence for drug conspiracy, alongside a forfeiture of over $100 million in Bitcoin. Additionally, the FBI has arrested the co-founder of a Canadian cybersecurity firm linked to the ShinyHunters hacking group, which has been notorious for data breaches and ransomware activities. These events underscore ongoing efforts by law enforcement to combat dark web marketplaces and ransomware operations.
|
// AI-powered summary generated at 04:00
Microsoft revealed a phishing campaign hitting 35,000 users in 26 countries, stealing login tokens via fake code-of-conduct emails and legit services. Microsoft disclosed a major phishing campaign that targeted over 35,000 users across 26 countries in mid-April 2026. Attackers used fake “code of con...
The North Korea-aligned state-sponsored hacking group known as ScarCruft has compromised a video game platform in a supply chain espionage attack, trojanizing its components with a backdoor called BirdCallto likely target ethnic Koreans residing in China.
While prior versions of the backdoor have pr...
The North Korean hacker group APT37 has been delivering an Android version of a backdoor called BirdCall in a supply-chain attack through a video game platform. [...]
The vulnerabilities were reported to Meta through its bug bounty program and were patched with updates released earlier this year.
The post WhatsApp Discloses File Spoofing, Arbitrary URL Scheme Vulnerabilities appeared first on SecurityWeek.
A robust cybersecurity program needs a range of skilled people, yet many CISOs continue to face an ongoing skills shortage — and the squeeze may only get worse as AI gains traction.
Some 95% of cybersecurity practitioners and decision-makers noted at least one security skil...
Zero trust has become one of the most widely adopted security models in enterprise environments. Organizations invest heavily in identity systems, access policies and modern security tooling. On paper, these environments look well-protected.
Yet during incidents, a differen...
A gaming platform built for ethnic Koreans in China has been serving backdoored Windows and Android software to its users since late 2024. The platform, sqgame[.]net, hosts traditional card and board games for a community that sits along the North Korean border and includes many refugees and defecto...
ESET researchers have investigated an ongoing attack by the ScarCruft APT group that targets the Yanbian region via backdoor-laced Windows and Android games
Security vendor Trellix has suffered a breach involving unauthorized access
Meta has updated its infrastructure for protecting password-based and end-to-end encrypted backups, introducing over-the-air fleet key distribution for Messenger and a commitment to publishing evidence of secure fleet deployments. How encrypted backups work These updates build on the company’s HSM-b...
If you can't bother to keep GitHub running, why should we bother with you? Opinion It's been another shabby week for Microsoft, and a shabbier one for its users. We learnt that Windows 11's epic habit of trying to corral customers into paid-for Microsoft services just got worse with a low-rent tric...
Information published.
Information published.
La mise à jour iOS 26.5 va ajouter une nouveauté importante : le chiffrement de bout en bout pour les messages RCS entre iPhone et Android.
Le post iOS 26.5 : vos messages RCS entre iPhone et Android seront enfin sécurisés a été publié sur IT-Connect.
Information published.
Instructure, maker of the Canvas learning platform, is investigating a cyber incident that exposed users’ personal data. Instructure is a U.S.-based educational technology company best known for developing Canvas, one of the world’s most widely used learning management systems (LMS). The U.S. firm...
A critical security vulnerability in Weaver (Fanwei) E-cology, an enterprise office automation (OA) and collaboration platform, has come under active exploitation in the wild.
The vulnerability (CVE-2026-22679, CVSS score: 9.8) relates to a case of unauthenticated remote code execution affecting Wea...
Si votre PC sous Windows 11 redémarre plusieurs fois de suite après avoir installé les mises à jour d'avril : c'est normal et lié au Secure Boot.
Le post Mises à jour Windows 11 : Microsoft force votre PC à redémarrer plusieurs fois ce mois-ci a été publié sur IT-Connect.