Botnets powered by residential proxy networks are proliferating, with nearly 60 million victim IP addresses worldwide, according to Lumen's Black Lotus Labs.
South Korea's data protection regulator has imposed a record $409 million fine on Coupang, the country's largest online retailer, after a data breach compromised the personal information of tens of millions of customers.
Google Cloud lays off members of its cybersecurity division, while Coupang faces a $400 million fine for a data leak affecting over 30 million customers.
Over 400 Arch Linux packages have been compromised to distribute a Linux rootkit and infostealer malware, targeting credentials and access tokens.
The US, France, and Italy collaborated to seize domains CFAKE.com and SOCFAKE.com, which hosted thousands of AI-generated nude images and videos of women without their consent.
Iranian cyber group Handala has claimed responsibility for hacking California Water Service, leaking 5GB of stolen data in retaliation for US actions in Iran.
Cisco's SD-WAN management software is affected by a seventh actively exploited zero-day vulnerability this year, marked as CVE-2026-20245, allowing authenticated attackers to execute commands as root.
Microsoft released updates to fix nearly 200 security vulnerabilities, including 32 critical bugs, with exploit code publicly available for at least three weaknesses.
The Gentlemen ransomware group has been identified as the second most active ransomware gang, with at least 332 published victims, and its administrator's real-life identity has been uncovered as Alexander Andreevich Yapaev.
OnyxC2 stealer is available for hire starting at $250 per month, offering stealth and extensive reach to cybercriminals, with access to 210 applications and extensions across nine categories.