The traditional model of finding and patching vulnerabilities is no longer effective, prompting a shift towards risk-based disclosure and prioritization.
A newly identified data-wiping malware called Lotus was used in targeted attacks against Venezuelan energy and utility organizations, leaving systems in an unrecoverable state through multi-stage disk destruction.
U.S. lawmakers are exploring harsher penalties for ransomware attacks on hospitals, including terrorism designations and homicide prosecution, as FBI data shows healthcare incidents nearly doubled to 460 cases in 2025.
Angelo John Martino III, a ransomware negotiator for DigitalMint, pleaded guilty to secretly conspiring with BlackCat affiliates to extort the very clients he was hired to protect, helping extract over $75 million in ransom payments.
France's national secure documents agency ANTS has confirmed a cyberattack detected on April 15, 2026, as a threat actor on hacker forums claims to be selling up to 19 million stolen citizen records.
Tyler Robert Buchanan, 24, of Dundee, Scotland, pleaded guilty to federal conspiracy and identity theft charges tied to a sweeping phishing and SIM-swapping campaign that netted more than $8 million in stolen cryptocurrency.
British national Tyler Robert Buchanan, 24, has pleaded guilty to wire fraud conspiracy and aggravated identity theft for his role in a 2022 SMS phishing campaign that targeted major tech firms and stole millions in cryptocurrency.
CISA expanded its Known Exploited Vulnerabilities catalog by eight flaws on Monday, including three newly flagged issues in Cisco Catalyst SD-WAN Manager, Kentico Xperience, and Zimbra Collaboration Suite.
Italy's data protection authority has fined Poste Italiane SpA and its digital payments subsidiary Postepay SpA a combined €12.5 million ($14.7 million) for unlawfully processing millions of users' personal data through invasive mobile app monitoring.
Check Point researchers uncovered a SystemBC proxy malware botnet of more than 1,570 hosts linked to an affiliate of the Gentlemen ransomware-as-a-service operation, with victims concentrated in corporate and organizational environments across multiple countries.