A 26-year-old Illinois man was sentenced to 76 months in prison for hacking into over 750 women's Snapchat accounts to steal nude photos.
Google has made Gmail end-to-end encryption available on Android and iOS for enterprise users, allowing encrypted messages to be composed and read natively in the mobile app. The feature is powered by client-side encryption and is available now for eligible Google Workspace plans.
A critical pre-authentication remote code execution vulnerability in the Marimo Python notebook platform was actively exploited within 10 hours of public disclosure, with attackers targeting cloud credentials and SSH keys.
Adobe has released out-of-band patches for a critical zero-day vulnerability in Acrobat and Reader, tracked as CVE-2026-34621 with a CVSS score of 9.6, which attackers have been exploiting since at least November 2025.
A multinational law enforcement operation led by the UK's National Crime Agency has identified over 20,000 cryptocurrency fraud victims in Canada, the UK, and the United States, freezing more than $12 million in suspected criminal proceeds.
Two malicious versions of Axios, the most downloaded JavaScript HTTP client library, were briefly published to NPM and contained a cross-platform RAT. Google has attributed the attack to suspected North Korean threat actor UNC1069.
Forgotten laptops issued to contractors and former employees represent a growing and underappreciated attack surface, combining credential exposure, lateral movement risk, and compliance failures into one persistent blind spot.
Government agencies across Latin America are being hammered by cyberattacks at a rate far exceeding the global average, with incidents striking Colombia's health ministry, Puerto Rico's transport department, and Mexico's government systems.
Researchers at Rutgers University have developed VitalID, a biometric authentication system that uses low-frequency skull vibrations generated by breathing and heartbeat to verify the identity of XR headset users without requiring any additional hardware.
Most AI detection systems learn from post-compromise artifacts, but new data from GreyNoise reveals that attacker behavior — including fresh infrastructure and behavioral spikes — frequently surfaces well before a breach is confirmed.