Sextortion Scam Uses ShinyHunters Leaks
Threat actors are using email addresses exposed in ShinyHunters data breaches to send sextortion emails demanding $2,000 in Bitcoin.
Most bot-management vendors publish no price at all. We collected every figure that is actually on the record — DataDome, AWS WAF Bot Control, reCAPTCHA, hCaptcha, Cloudflare and Imperva — plus the four cost traps that sit behind the headline numbers.
Threat actors are using email addresses exposed in ShinyHunters data breaches to send sextortion emails demanding $2,000 in Bitcoin.
The traditional model of finding and patching vulnerabilities is no longer effective, prompting a shift towards risk-based disclosure and prioritization.
Steam forum users are being targeted by ClickFix attacks that pretend to offer fixes for game issues but actually infect devices with XMRig cryptominers.
A 26-year-old Illinois man was sentenced to 76 months in prison for hacking into over 750 women's Snapchat accounts to steal nude photos.
Russian state-aligned hackers have been compromising organizations through zero-click phishing emails targeting Zimbra Collaboration Suite's webmail platform, exploiting a patched vulnerability from November 2025.
UK Prime Minister Andy Burnham reappoints cybersecurity minister Liz Lloyd despite abolishing the department that oversaw cyber policy, ensuring continuity in UK cyber policy.
A threat actor used the open-source Hermes AI agent to automate post-exploitation activity during an alleged breach of Thailand's Ministry of Finance, with session files and evidence of access to internal systems indicating multiple compromised systems.
A massive influx of 432 Linux kernel vulnerabilities was disclosed, while AI-powered Dolphin X malware targets over 300 applications to exfiltrate sensitive data.
Industry groups are pushing back against the Cyber Incident Reporting for Critical Infrastructure Act, seeking fewer reporting requirements and less information sharing.