News

An alleged member of Scattered Spider has been arrested in Finland as the U.S. seeks extradition, with federal authorities naming Peter Stokes as the individual behind the online moniker “Bouquet.” Stokes, a dual citizen of the U.S. and Estonia, was arrested…

Cybersecurity researchers have disclosed details of a critical vulnerability, CVE-2026-25874, affecting Hugging Face’s LeRobot platform, which could allow unauthenticated remote code execution via unsafe deserialization of pickle data. The flaw stems from…

The Hacker News reports that patch windows are shrinking as AI-enabled discovery accelerates exploitation, with Anthropic’s Claude Mythos and its Project Glasswing demonstrating vulnerabilities can be found in minutes rather than weeks. It notes that the…

According to The Darktrace Community, the State of AI Cybersecurity 2026 report finds that 87% of security professionals are seeing more AI-driven threats, with attackers at speed and scale, and threats are described as faster, more personalised, and harder…

No Metrics Are Better Than Bad Metrics in the SOC, Says NCSC reports that many common SOC metrics are inaccurate or counterproductive, according to the National Cyber Security Centre (NCSC). The article notes that, in a blog post, the NCSC’s CTO for…

According to Arctic Wolf, a team of hackers associated to the North Korean-linked Lazarus Group conducted a large-scale cyber theft campaign targeting over 100 cryptocurrency organisations across more than 20 countries. The spear-phishing campaign used…

Xu Zewei, 34, a Chinese national alleged to be a member of the Silk Typhoon hacking group, has been extradited to the U.S. from Italy. He was arrested in July 2025 by Italian authorities for his alleged links to the Chinese state‑sponsored threat group and…

Microsoft fixed a vulnerability in Entra ID where the Agent ID Administrator, a privileged built-in role for AI agents, could enable takeover of service principals and compromise a tenant. According to Silverfort, users assigned the Agent ID Administrator…

Microsoft has revised its advisory to confirm that CVE-2026-32202, a spoofing vulnerability in Windows Shell, has been actively exploited in the wild and was addressed as part this month’s Patch Tuesday. The flaw (CVSS 4.3) could let an attacker access…

Cherry Health is dealing with ongoing technology issues, with officials yet to explain the cause days into the disruption, according to the report. The health system said in a notice on its website that it is “experiencing technology issues across Cherry…

William Galvin, Massachusetts’ top securities regulator, ordered Fidelity Brokerage Services to pay $1.25 million for failing to enforce cybersecurity controls that led to a data breach affecting about 77,000 customers.

A Chinese national has been extradited from Italy to the United States to face criminal charges, according to a DOJ announcement. Xu Zewei is alleged to be a contract hacker for China’s Ministry of State Security who conducted breaches between February 2020…

Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a vulnerability in the developers’ account workflow that gave access to its signing keys and other sensitive information. On Friday, unknown…

A new threat actor, UNC6692, is described as combining social engineering, abuse of legitimate cloud infrastructure and custom malware in a multistage campaign, according to Google Threat Intelligence Group (GTIG) and Mandiant. The campaign reportedly uses…

Unpatched PhantomRPC flaw in Windows enables privilege escalation by exploiting an architectural weakness in how Windows’ Remote Procedure Call handles connections to unavailable services. A researcher, Haidar Kabibo, a middle application security specialist…

According to the Office of Foreign Assets Control (OFAC), a Cambodian network accused of orchestrating large-scale cryptocurrency fraud has been hit with US sanctions targeting senior figures and associated entities. The sanctions name Senator Kok An among…

A single ransomware crew exploiting a single brand of firewall is now driving nearly half of all cyber insurance claims, according to At-Bay’s 2026 InsurSec Report, which analysed more than 6,500 claims and 100,000 policy years. The report says attackers are…

According to Checkmarx, the ongoing investigation into its supply chain security incident has found that a cybercriminal group published data related to the company on the dark web. The firm says, based on current evidence, that this data originated from…

Itron disclosed it suffered a cybersecurity breach, according to an 8-K form filed to the US Securities and Exchange Commission (SEC). The US‑based firm revealed its IT systems were breached by an unauthorized third‑party actor and activated its…

According to LayerX Security, dozens of widely used browser extensions have been collecting and selling user data with explicit disclosure in their privacy policies. The study identified more than 80 extensions that reserve the right to sell user data,…

In this week’s recap, The Hacker News highlights a Lua-based malware named fast16 developed years before Stuxnet and designed to tamper with high-precision calculation software, with analysis suggesting activity five years before Stuxnet and origins linked…

Researchers have uncovered a malware framework dubbed fast16 that predates Stuxnet by five years, with components dating back to 2005. According to SentinelOne researchers, fast16 quietly corrupts the outputs of high-precision engineering and scientific…

According to Dark Reading, the piece examines fears that frontier large language models such as Anthropic's Mythos and OpenAI's GPT-5.5 could drive an era of industrialised, autonomous exploitation across platforms, a notion described as a potential…