IncidentsAnalysis4 min read
Europol and the US Justice Department say the takedown hit three malware services, cleaned 681 infected websites and handed 6.4 million stolen credentials to breach-notification groups.
IncidentsAnalysis3 min read
Police seized servers behind three criminal tools and about 6.4 million stolen logins belonging to more than 40,000 victims, according to Germany's BKA.
IncidentsAnalysis4 min read
Law enforcement and industry partners dismantled servers and domains behind Gootloader, CastleRAT and StealC, with the Justice Department putting Gootloader's reach at 25,000 infected devices since 2018.
Threat intelBrief2 min read
A Group-IB blog post says infostealer logs are resold across several crimes and that a stolen session cookie walks past the login and one-time code a bank already paid for.
IncidentsBrief2 min read
The grocery giant says the incident will cut fourth-quarter net sales by €200 million to €250 million and has lowered its 2026 guidance. It still hasn't said what kind of attack it was.
IncidentsBrief2 min read
The New York City library system confirmed the attack in alerts on Wednesday, after first reporting outages that afternoon. No gang has claimed it.
IncidentsBrief2 min read
The vendor says attackers are exploiting a flaw patched in December 2024 against devices that never took the update. The advisory gives no CVE, no version range and no count of victims.
Threat intelBrief2 min read
Richard Horne's annual report warning points at unpatched, long-tolerated vulnerabilities rather than novel AI attacks, and sets out a £70 million vulnerability centre and £60 million for Cyber Shield.
IncidentsBrief1 min read
Michigan State describes suspicious activity and password resets, while a ransomware gang makes separate claims of stolen student information.
IncidentsBrief2 min read
Synology says attackers are exploiting a flaw patched in December 2024 against outdated DiskStation Manager installs, and is telling customers to update now.
VulnerabilitiesExploitedCVE-2026-97229CVSS 10.02 min read
The critical GitLab CE/EE bug lets an unauthenticated user run code on the server through a crafted regular expression in a CI/CD configuration. Federal agencies face a November 1 remediation deadline.
VulnerabilitiesExploitedCVE-2026-46817CVSS 9.82 min read
Defused says its decoys logged exploratory exploitation attempts against a critical SQL injection flaw in Oracle E-Business Suite's Application Object Library, patched in Oracle's October CPU.
