Former L3Harris executive sentenced to 87 months for selling zero-day exploits
A former L3Harris executive received an 87-month sentence after admitting he stole and sold eight zero-day exploits or components to a broker.
3 min readOpen brief →
Verified cybersecurity, fraud and digital-banking signals with decision context, affected audiences and practical actions.
TOPIC HUBSBrowse cybersecurity topics →
FBI describes U.S. commitment to fighting Southeast Asian scam compounds
The FBI says the United States is committed to combating transnational gangs behind Southeast Asian scam compounds, following discussions with officials in three countries.
3 min readOpen brief →
Air Côte d’Ivoire confirms February 8 system breach after INC claim
Air Côte d’Ivoire confirmed a February 8 systems breach after INC claimed it stole 208 GB of data, though the alleged theft remains unverified.
3 min readOpen brief →
Report: AI-driven campaign breached more than 600 Fortinet devices
Risky Business News reports an AI-driven campaign breached more than 600 Fortinet devices, though key details about targets, methods, and impact remain unconfirmed.
3 min readOpen brief →
Starkiller Phishing Service Relays Login Credentials and MFA Codes
Krebs reports that Starkiller relays credentials and MFA codes through live target websites, presenting a challenge for phishing detection and identity defenses.
3 min readOpen brief →
Risky Business News flags weaknesses across RPKI and current security issues
A Risky Business News bulletin highlights reported weaknesses in RPKI infrastructure alongside a French ministry breach, UK content-removal rules, and ClickFix malware claims.
3 min readOpen brief →
Man sentenced to eight years in tax refund fraud case
A federal sentence follows a reported scheme involving compromised tax-preparation networks, stolen client data, phishing, and more than 1,000 fraudulent refund claims.
3 min readOpen brief →
Threat groups use AI to accelerate attacks, Cybersecurity Dive reports
A Palo Alto Networks report, cited by Cybersecurity Dive, says AI is helping threat groups accelerate attacks involving stolen identities and newly disclosed critical vulnerabilities.
3 min readOpen brief →
Polish authorities arrest alleged Phobos ransomware affiliate
Polish officials arrested a man accused of supporting Phobos ransomware attacks, following a multinational investigation known as “Phobos Aetor.”
3 min readOpen brief →
AI system reported to have found 12 new OpenSSL vulnerabilities
An AI system is reported to have found 12 OpenSSL vulnerabilities, adding to an unusual concentration of discoveries across the project’s 2025 and 2026 releases.
3 min readOpen brief →
Cambodia Reportedly Promises to Dismantle Scam Compounds by April
Cambodia reportedly pledged to dismantle cyber scam compounds by April, but the supplied report gives no details confirming how or whether the promise will be fulfilled.
3 min readOpen brief →
Ransomware activity rises in IT and food sectors, reports say
New reports cited by Cybersecurity Dive point to faster social engineering and zero-day weaponization alongside rising ransomware attacks in IT and food.
3 min readOpen brief →
Report: IcedID malware developer allegedly faked his own death to evade the FBI
Risky Business News reports that an IcedID malware developer allegedly faked his own death to evade the FBI, with few details supplied about the case.
3 min readOpen brief →
CISA plans sector town halls on CIRCIA cyber reporting rule
CISA is planning sector-specific town halls to gather feedback on the stalled CIRCIA rule governing significant cyberattack and ransomware-payment reporting.
3 min readOpen brief →
Phishing campaign reportedly uses old Office flaw to deliver fileless XWorm
A reported phishing chain combines a patched Office flaw, malicious Excel add-in, and fileless XWorm delivery to complicate detection.
3 min readOpen brief →
Kimwolf Botnet Reportedly Disrupts I2P Anonymity Network
Krebs on Security reports that the Kimwolf IoT botnet is disrupting I2P while allegedly using the network to evade takedown efforts.
3 min readOpen brief →
Intel 471 reports rising extortion attacks targeting supply-chain weaknesses
Intel 471 says consulting and manufacturing firms featured prominently among ransomware victims posted to the dark web in 2025.
3 min readOpen brief →
Microsoft’s February 2026 Patch Tuesday includes six reported actively exploited vulnerabilities
Microsoft’s February release addresses 60 vulnerabilities, including six the company highlighted as new and actively exploited, according to CSO Online.
3 min readOpen brief →
Microsoft’s February update fixes more than 50 flaws, including six zero-days
Microsoft’s February release fixes more than 50 flaws, including six zero-days reportedly exploited in the wild across Windows and related software.
3 min readOpen brief →
Weaponized Windows shortcuts reportedly deliver Global Group ransomware
Researchers report a Phorpiex-linked phishing campaign using malicious LNK files to deliver Global Group ransomware through local execution.
3 min readOpen brief →
Ivanti mobile-management zero-day fallout reaches nearly 100 victims
CyberScoop reports that attacks linked to two Ivanti EPMM zero-days have affected nearly 100 victims, including two Dutch agencies and infrastructure cited by the European Commission.
3 min readOpen brief →
Leaked documents reportedly describe a Chinese platform for rehearsing attacks on neighbors’ critical infrastructure
Leaked documents reportedly describe a Chinese platform for practicing attacks against replicas of neighboring countries’ real critical-infrastructure networks.
3 min readOpen brief →
BridgePay reports ransomware attack after system-wide outages
BridgePay says it is working with federal investigators after warning customers about system-wide outages and a reported ransomware attack.
3 min readOpen brief →
EU and Dutch government announce hacks after Ivanti zero-days
EU and Dutch authorities announced hacks after two Ivanti zero-days, while Ivanti said a very limited number of customers had been attacked.
3 min readOpen brief →