Romanian Hacker Gets Nearly 5 Years in US Prison Over Network Intrusion

Romanian hacker Catalin Dragomir (45) got 4 years and 8 months in prison for selling access to an Oregon state network. Romanian hacker Catalin Dragomir (45) will spend 4... Read more »

KnowledgeDeliver LMS Flaw Exploited to Deploy Godzilla and Cobalt Strike

A now-patched high-severity security flaw affecting Digital Knowledge KnowledgeDeliver, a Learning Management System (LMS) popular in Japan, was exploited as a zero-day to deliver the Godzilla web shell and... Read more »

7-Eleven Breach: Hackers Claim 600,000 Records Stolen

7-Eleven says a system intrusion exposed franchise applicant data, with reports linking the breach to ShinyHunters and 185,000 affected people. The post 7-Eleven Breach: Hackers Claim 600,000 Records Stolen... Read more »

The Next AI Security Failure May Start With a Trusted Assistant

AI coding tool flaws highlight the need for data-layer governance, access controls, encryption, and audit logs for AI agents. The post The Next AI Security Failure May Start With... Read more »

‘Tiny11’ Gives Windows 10 Users a Risky Upgrade Path

Tiny11 can help older Windows 10 PCs run a lighter Windows 11 build, but the unofficial project comes with security and support tradeoffs. The post ‘Tiny11’ Gives Windows 10... Read more »

FBI Warns: ‘Kali365’ Phishing Service Targets Microsoft 365 Accounts

The FBI warned that Kali365 can hijack Microsoft 365 accounts by abusing device code authentication and capturing OAuth tokens. The post FBI Warns: ‘Kali365’ Phishing Service Targets Microsoft 365... Read more »

Scottish social enterprise supports national cyber efforts

Cyber and Fraud Centre has supported community cyber resilience in Scotland to the tune of £3m in its first year operating as a social enterprise. Read more »

The LA Metro Attack Wasn’t Hacktivism. It Was a State Operation With a Costume On.

Iran’s “hacktivist” group Ababil of Minab, which hit LA Metro and wiped terabytes of data, is forensically linked to Iran’s intelligence service MOIS. In late March, a group calling... Read more »

How cybersecurity firms took down Glassworm botnet in one shot

Glassworm infected developers through poisoned tools and packages until a coordinated takedown killed all four of its C2 channels at once. On May 26, 2026, at 14:00 UTC, CrowdStrike... Read more »

Glassworm botnet that targeted OS devs smashed to pieces

CrowdStrike, Google and the Shadowserver Foundation worked together to take down a botnet that poisoned over 300 GitHub repositories, risking widespread supply chain compromise Read more »
Subscribe to our Newsletter