The US Department of Justice, FBI, and authorities in Canada and Germany have shut down four IoT botnets with over three million compromised devices that together conducted hundreds of thousands of DDoS attacks.
TeamPCP leverages its established infrastructure for a geographically targeted wiper attack in which CanisterWorm deletes data on systems configured for Iran.
The REMUS infostealer is operated like a professional software company, with continuous updates, customer-focused service, and scaling objectives; research shows that underground MaaS operations are adopting modern business practices to ensure persistence and revenue generation.
Two security vulnerabilities (CVE-2023-3153 and CVE-2026-4798) in the Avada Builder WordPress plugin enable attackers to read configuration files with database access credentials or extract password hashes via SQL injection.
Germany’s BKA has identified hacker “UNKN” as Daniil Maksimovich Shchukin – the leader of ransomware gangs REvil and GandCrab. Together with an accomplice, the 31-year-old is believed to have conducted at least 130 cyberattacks in Germany and stolen nearly two million euros.
Security researchers earn $385,750 at the Pwn2Own Berlin 2026 competition by disclosing 15 zero-day vulnerabilities in Windows 11 and Microsoft Exchange, with the prestigious hacking contest offering over one million dollars for successful exploits of fully patched systems.
The npm package node-ipc was compromised with credential-stealing malware; the tampered versions 9.1.6, 9.2.3, and 12.0.1 steal cloud credentials, SSH keys, and sensitive files via DNS exfiltration, likely due to a compromised maintainer account.
Russian military intelligence compromised over 18,000 outdated routers through DNS manipulation to steal Microsoft Office tokens, primarily targeting government organizations worldwide, without using malware—only exploiting known security vulnerabilities.
Microsoft Patch Tuesday April 2026 with 167 vulnerabilities, including the actively exploited SharePoint zero-day CVE-2026-32201, reflects likely volume increase in vulnerability discovery driven by advanced AI capabilities.
A leading hacker from the Scattered Spider group admitted to conducting extensive SMS phishing attacks and SIM swaps that stole at least 8 million dollars from cryptocurrency investors.
An unprotected security vulnerability in the Funnel Builder plugin for WordPress is being actively exploited to inject a payment card skimmer into WooCommerce checkout pages and steal credit card data and CVV codes.
Brazilian DDoS protection company Huge Networks allegedly operated a botnet for years carrying out large-scale attacks on other ISPs, uncovered through leaked files and the company founder’s SSH keys.
