German police identify alleged Black Basta leader as Europol and Interpol target
European authorities identify an alleged Black Basta leader and report raids on two other suspected participants as investigations continue.
3 min readOpen brief →
Verified cybersecurity, fraud and digital-banking signals with decision context, affected audiences and practical actions.
TOPIC HUBSBrowse cybersecurity topics →
LastPass warns of phishing emails posing as backup requests
LastPass says deceptive holiday-weekend emails claiming maintenance were part of a phishing campaign framed as a backup request.
3 min readOpen brief →
Ransomware Negotiation Forces Security Teams to Balance Recovery, Law and Ethics
Ransomware negotiation can help address an immediate crisis, but it also creates legal, operational and ethical risks for security teams and their clients.
3 min readOpen brief →
Kimwolf IoT Botnet Reportedly Reaches More Than 2 Million Devices
A reported IoT botnet called Kimwolf has spread to more than 2 million devices and is present in corporate and government networks.
3 min readOpen brief →
Phishing emails impersonate Afghanistan’s prime minister’s office in targeting of government workers
Researchers say phishing emails impersonating Afghanistan’s prime minister’s office are targeting government employees, underscoring the risk of official-looking correspondence.
3 min readOpen brief →
UK authorities warn of pro-Russia targeting of critical infrastructure and local government
UK authorities warn that pro-Russia groups are targeting critical infrastructure and local government, following a recent allied advisory about hacktivist activity against OT providers.
3 min readOpen brief →
Southeast Asia CISOs Put AI, Identity and Resilience at the Center of 2026 Plans
Southeast Asia CISOs identify cloud and AI security, identity protection, and operational resilience as central priorities for the year ahead.
3 min readOpen brief →
Jordanian national pleads guilty to selling access to at least 50 company networks
A Jordanian national pleaded guilty in a reported access-broker case involving unauthorized access to at least 50 company networks and alleged EDR-disabling malware.
3 min readOpen brief →
Report Describes AI-Linked Surveillance at Beverly Hills High School
Schneier on Security describes facial recognition, behavioral AI, audio capture, drones, and license plate readers deployed around Beverly Hills High School.
3 min readOpen brief →
Canadian investment regulator confirms August 2025 breach involving 750,000 investors
Canada’s investment regulator says hackers breached its systems in August 2025, with information connected to 750,000 investors reportedly affected.
3 min readOpen brief →
Cisco Talos says Chinese hackers breached North American critical-infrastructure groups
Cisco Talos says Chinese hackers breached multiple North American critical-infrastructure organizations using compromised credentials and exploitable servers over the past year.
3 min readOpen brief →
Critical n8n Vulnerability Rated CVSS 10.0 Requires Upgrade to 1.121.0
A reported CVSS 10.0 n8n vulnerability may enable takeover of locally deployed instances; users are advised to upgrade to version 1.121.0 or later.
3 min readOpen brief →
SpyCloud Launches Tool to Monitor Identity Threats Across Vendor Ecosystems
SpyCloud says its new Supply Chain Threat Protection product extends identity-threat monitoring across organizations’ vendor ecosystems and extended workforce.
3 min readOpen brief →
Cybercrime groups are adopting corporate-style operations
CSO Online describes cybercrime as a coordinated underground industry, emphasizing the need for preparedness, continuity, and recovery planning.
3 min readOpen brief →
Microsoft’s January 2026 updates fix 113 flaws, including exploited DWM bug
Microsoft’s January updates address at least 113 flaws, including eight critical issues and CVE-2026-20805, which the company says attackers are exploiting.
3 min readOpen brief →
Microsoft January update fixes 112 vulnerabilities, including exploited Desktop Window Manager zero-day
Microsoft’s January 2026 update fixes 112 vulnerabilities, including an actively exploited Desktop Window Manager zero-day added to CISA’s KEV catalog.
3 min readOpen brief →
Report says executives worry most about cyber-enabled fraud, geopolitics and AI
A World Economic Forum report places cyber-enabled fraud, geopolitics and AI at the center of executives’ cyber-risk concerns, alongside support for regulation.
3 min readOpen brief →
Report points to rising telecom ransomware and weak defenses
A threat intelligence report cited by Cybersecurity Dive links a steady telecom ransomware rise with unpatched flaws and lax perimeter controls.
3 min readOpen brief →
Kimwolf reportedly infected more than two million unofficial Android TV boxes
A Krebs on Security report examines how Kimwolf allegedly spread through unofficial Android TV boxes and supported DDoS and residential-proxy activity.
3 min readOpen brief →
Critical n8n flaw could enable unauthenticated system takeover
A critical n8n vulnerability reportedly enabled unauthenticated takeover of local deployments, with potential access to connected systems and workflow data.
3 min readOpen brief →
Expert Warns AI Could Drive More Impersonation Attacks in 2026
A fraud expert says AI could make 2026 a pivotal year for impersonation attacks, prompting organizations to reassess identity checks and response procedures.
3 min readOpen brief →
Why Human Teams Struggle to Get Value from Agentic AI
Agentic AI may waste time or miss instructions when added to human teams, making thoughtful task selection and hybrid-team leadership essential.
3 min readOpen brief →
Reported Covenant Health breach affected more than 478,000 people
A reported cyberattack at Catholic healthcare organization Covenant Health exposed sensitive information tied to more than 478,000 people.
3 min readOpen brief →
Report Links Two Telegram Markets to Nearly $2 Billion in Monthly Transactions
Elliptic’s reported analysis describes two Telegram markets allegedly enabling nearly $2 billion monthly in laundering and black-market transactions.
3 min readOpen brief →