Pro-Ukraine Hacktivists Unite Against Russia
Pro-Ukraine hacktivist groups BO Team and Head Mare appear to be coordinating cyber operations against Russian organizations, according to a Kaspersky report.
HalluSquatting is an attack where researchers pre-compute fake repository, package, or skill names that AI coding agents predictably invent, register those names first, and load them with malicious instructions.
Pro-Ukraine hacktivist groups BO Team and Head Mare appear to be coordinating cyber operations against Russian organizations, according to a Kaspersky report.
Modern DLP controls often lack visibility into browser-based data movement, with 46% of sensitive file uploads sent to unsanctioned accounts.
The Trump administration is redirecting the CyberCorps Scholarship For Service program toward artificial intelligence, leaving current scholars uncertain about their future employability
The PCPJack worm removes TeamPCP infections and steals credentials across multiple cloud environments, targeting services such as AWS, Kubernetes, and GitHub.
Sohaib Akhter, 34, was found guilty of conspiracy to commit computer fraud and other charges after deleting 96 government databases and stealing an individual's password.
The JDownloader website was compromised to distribute malicious Windows and Linux installers, affecting users who downloaded installers between May 6 and May 7, 2026.
ShinyHunters claims nearly 9,000 schools are affected by a data breach of Canvas, a learning management system, with personal information of 275 million users compromised.
The US government proposes 72-hour patch cycles for critical vulnerabilities, while a new Linux backdoor called PamDOORa is being marketed on a Russian cybercrime forum.
AI evaluation platform Braintrust urges customers to rotate API keys after a data breach, where hackers accessed an AWS account, potentially exposing keys used by companies like Box and Dropbox.