A Kansas City, Missouri, man has been sentenced to 32 months in prison for crimes related to a ransom attack on his own business. The DOJ has announced the conviction of Daniel Rhyne. He had already pleaded guilty to “extortion in connection with the threat to damage a protected computer” and “intentional damage to a … Read more
Hackers abuse legitimate Bing search result redirects as click-through URLs in Google Search Ads to direct users to fake Claude installers that carry out ClickFix attacks. The technique, dubbed “Adception” by security researchers at Push Security, appears designed to bypass advertising security checks by using Bing’s trusted domain as an advertising target before redirecting victims … Read more
OpenAI said Friday that it fired three security researchers for “breach of trust,” defending the firings after the trio accused the company of putting its corporate interests above security as the reason for the firing. The ChatGPT maker said in a post The statement came after three researchers, Tomek Korbak, Jasmine Wang and Mikita Balesni, … Read more
Threat actors are exploiting a critical and a medium-severity vulnerability that remain unpatched in the backup management platform AhsayCBS to deploy webshells and cryptocurrency miners. AhsayCBS is typically used by managed service providers (MSPs) and system integrators. The malicious activity was observed on October 7 and targeted at least five organizations. The two security issues … Read more
Weekly from SecurityWeek Cybersecurity News Summary provides a succinct overview of key developments that may not be covered entirely in isolation but are nonetheless relevant to the broader threat landscape. This curated summary highlights key stories about vulnerability disclosures, new attack vectors, policy updates, industry reports and other notable events to help readers stay well-informed … Read more
The Pwn2Own Ireland 2026 hacking competition has come to an end. Hackers have received $1,262,000 in rewards after exploiting 98 zero-day vulnerabilities. Security researchers from Ikotas Labs won this year’s Pwn2Own Ireland edition with 42.5 Master of Pwn points and $361,000 earned over the three-day competition after hacking the Samsung Galaxy S26, OpenAI Codex and … Read more
Cisco on Wednesday announced patches for 35 vulnerabilities in its products, including more than a dozen critical-severity bugs. A new security hardening release from Meraki fixes several bugs grouped into seven CVEs depending on the type of underlying vulnerability. The most serious of these is CVE-2026-76464, which covers memory issues such as buffer overflows and … Read more
A malware campaign dubbed “Midnight Mimosa” has been discovered on low-cost Android smartphones that ship with malware embedded in their firmware, allowing attackers to silently install apps, conduct ad fraud, and turn devices into private proxies. The malware is believed to have been introduced somewhere in the device’s supply chain. However, it remains unclear who … Read more
The US State Department is offering up to $10 million for information about Zhang Yu, a Chinese national accused of participating in the Hafnium campaign against Microsoft Exchange servers. The State Department’s Rewards for Justice (RFJ) program announced the reward on Wednesday. Zhang is charged alongside Xu Zewei, who was extradited from Italy to the … Read more
On day two of Pwn2Own Ireland 2026, security researchers collected $232,500 in cash prizes after exploiting 45 unique zero-day vulnerabilities. The highlight of the day was the flagship Samsung Galaxy S26 being hacked three times KAIST Hacking Labis Kyeongmin Kim, PetoWorksAnd Mobile hacking laboratoryare Dimitrios Valsamaras and Ken Gannon. Jack Dates from RET2 Systems demonstrated … Read more