Russia detains alleged admin of LeakBase cybercrime forum weeks after global crackdown
UK sanctions Chinese crypto marketplace tied to scam compounds
Suspected RedLine infostealer malware admin extradited to US
An Armenian suspect was extradited to the United States to face criminal charges for allegedly helping manage RedLine, one of the most prolific infostealer malware operations in recent years.
Nova Scotia Power Data Breach Compromises Data of Over 900,000 Users
Following the Nova Scotia Power data breach, the company took steps to contain the incident.
An AI gateway designed to steal your data
Dissecting the supply-chain attack on LiteLLM – a multifunctional gateway used in many AI agents. Explaining the dangers of the malicious code and how to protect yourself.
1-15 March 2026 Cyber Attacks Timeline
In the first half of March 2026 I collected 95 events (6.34 events/day) with a threat landscape dominated by malware once ahead of account takeovers and ransomware.
Global Magecart Campaign Puts Banks Under Pressure, Leveraging Redsys Payment Mimicry and Hijacking
Read ANY.RUN report featuring both executive-level insights and technical analysis of the campaign.
Three Individuals Charged for Trying to Smuggle ‘America-Made’ AI Tech Worth $170M
US DOJ charges two US and one Chinese national for attempting to smuggle $170 million worth 'America-made' AI tech to China.
Resilienza digitale 2.0: integrare l’AI nel perimetro di sicurezza DORA
Il passaggio alla Resilienza 2.0 non è più solo una scelta competitiva, ma un imperativo metodologico. Ecco come possiamo integrare l'AI nel perimetro di sicurezza senza che questa diventi il "punto di rottura" sistemico previsto dal legislatore
La nuova Cyber Strategy USA va oltre i confini nazionali: i 6 pilastri operativi
La strategia tocca temi centrali per l'intero ecosistema cyber globale: dalla postura offensiva nella gestione delle minacce, alla deregolamentazione del settore privato, fino alla supremazia nelle tecnologie emergenti come intelligenza artificiale e crittografia post-quantistica. Ecco i 6 pillar della Cyber Strategy nazionale della Casa Bianca
Node.js Fixes Critical Flaws, Patches DoS Risk in Latest Security Update
Node.js patches CVE-2026-21637 and other flaws across versions 20.x–25.x, fixing DoS risks, HTTP bugs, and permission model issues.
Attacco alla sanità: ecco perché una cartella clinica vale fino a mille euro nel dark web
I dati sanitari non sono solo dati sottratti, ma una chiave capace di aprire molte porte. Ed è proprio questa versatilità criminale a determinarne il valore di una cartella clinica che, in seguito ad un cyber attacco, finisce nel dark web
Coruna: the framework used in Operation Triangulation
Kaspersky GReAT experts look into the Coruna exploit kit targeting iPhones. We discovered that the kernel exploit for CVE-2023-32434 and CVE-2023-38606 is an updated version of the Operation Triangulation exploit.
Port of Vigo Hit by Ransomware Attack, Cargo Systems Disrupted
The Port of Vigo cyberattack incident also points to a broader trend, cyberattacks are no longer limited to data theft.
The Energy Sector’s Ransomware Nightmare: Why Critical Infrastructure Can’t Catch a Break
Ransomware attacks on the energy sector are rising fast, exposing legacy systems, OT risks, and global threats. Learn why resilience matters now.!
RedLine Infostealer Network’s Second Defendant Now Faces a U.S. Court
US presents in Austin Court, an Armenian national behind RedLine Infostealer campaign.
ANY.RUN Recognized for Innovations and Market Leadership at Global InfoSec Awards 2026
ANY.RUN won in two categories for innovative malware analysis and market-leading threat intelligence. More details inside.
Scuf Gaming - 128,683 breached accounts
In June 2015, custom gaming controller maker Scuf Gaming suffered a data breach. The incident exposed 129k unique email addresses along with usernames, display names, IP addresses and password hashes.
Kali Linux 2026.1 Launches with 8 New Tools, UI Refresh, and Kernel Upgrade
Kali Linux 2026.1 adds BackTrack mode, MetasploitMCP, 8 tools, kernel 6.18, NetHunter updates, and fixes with improved UI experience.
Sound Radix - 292,993 breached accounts
In March 2026, the audio production tools company Sound Radix disclosed a data breach that they subsequently self-submitted to HIBP. Attributed to unauthorised access to a customer support platform, the incident impacted 293k unique email addresses and names of users who had interacted with their support team. Sound Radix advised that whilst there is no evidence their broader user database was accessed, it is possible that additional data including hashed passwords may have been exposed. No financial or credit card information was impacted.
Magento sotto attacco: PolyShell, sfruttamento di massa in pochi giorni
La vulnerabilità “PolyShell” in Magento Open Source e Adobe Commerce è passata dalla disclosure alla compromissione su larga scala in tempi estremamente rapidi: secondo Sansec, azienda specializzata in sicurezza informatica, lo sfruttamento di massa è iniziato il 19 marzo 2026, appena due giorni dopo la divulgazione pubblica, e oggi le tracce di attacco risultano presenti …
GitHub adds AI-powered bug detection to expand security coverage
GitHub is adopting AI-based scanning for its Code Security tool to expand vulnerability detections beyond the CodeQL static analysis and cover more languages and frameworks.
PolyShell attacks target 56% of all vulnerable Magento stores
Attacks leveraging the 'PolyShell' vulnerability in version 2 of Magento Open Source and Adobe Commerce installations are underway, targeting more than half of all vulnerable stores.
CISA's acting chief warns shutdown is increasing cyber risks, causing resignations
Bubble AI app builder abused to steal Microsoft account credentials
Threat actors are evading phishing detection in campaigns targeting Microsoft accounts by abusing the no-code app-building platform Bubble to generate and host malicious web apps.
New Torg Grabber infostealer malware targets 728 crypto wallets
A new info-stealing malware called Torg Grabber is stealing sensitive data from 850 browser extensions, more than 700 of them for cryptocurrency wallets.
USA, stop all’import di router consumer esteri: le 3 campagne d’attacco alla base del divieto
Il cuore della questione è di natura tecnica prima ancora che geopolitica. Ecco cosa impone il divieto della FCC Usa di import di router consumer e apparati considerati non abbastanza sicuri prodotti all'estero
Russia arrests alleged owner of cybercrime forum LeakBase, report says
Russian state-owned media reported that police in Russia arrested the administrator of LeakBase, a large hacking forum.
Supply chain attack hits widely-used AI package, risks impacting thousands of companies
Ransomware attack disrupts operation at major Spanish fishing port