Cybersecurity

Oleksandr Didenko sold the stolen identities of US citizens, allowing North Koreans to get hired using freelance work platforms. The post Ukrainian Gets 5 Years in US Prison for Aiding North Korean IT Fraud appeared first on SecurityWeek. Source: https://www.securityweek.com/ukrainian-gets-5-years-in-us-prison-for-aiding-north-korean-it-fraud/

While this campaign targets crypto wallets and steals money, the methodology has far wider potential that could be used by other attackers.  The post Autonomous AI Agents Provide New Class of Supply Chain Attack appeared first on SecurityWeek. Source: https://www.securityweek.com/autonomous-ai-agents-provide-new-class-of-supply-chain-attack/

Threat actors relying on AI have been exploiting exposed ports and weak credentials to take over FortiGate devices. The post Hundreds of FortiGate Firewalls Hacked in AI-Powered Attacks: AWS appeared first on SecurityWeek. Source: https://www.securityweek.com/hundreds-of-fortigate-firewalls-hacked-in-ai-powered-attacks-aws/

Catalin Dragomir admitted in a US court to selling access to an Oregon state government office’s network. The post Romanian Hacker Pleads Guilty to Selling Access to US State Network appeared first on SecurityWeek. Source: https://www.securityweek.com/romanian-hacker-pleads-guilty-to-selling-access-to-us-state-network/

CISA flagged two Roundcube Webmail vulnerabilities as actively exploited in attacks and ordered U.S. federal agencies to patch them within three weeks. […] Source: https://www.bleepingcomputer.com/news/security/cisa-recently-patched-roundcube-flaws-now-exploited-in-attacks/

Patched in December 2025, the exploited flaw leads to XSS attacks via the animate tags in SVG documents. The post Recent RoundCube Webmail Vulnerability Exploited in Attacks appeared first on SecurityWeek. Source: https://www.securityweek.com/recent-roundcube-webmail-vulnerability-exploited-in-attacks/

A ransomware attack forced the University of Mississippi Medical Center to close all of its roughly three dozen clinics around the state and cancel elective procedures. The post Mississippi Hospital System Closes All Clinics After Ransomware Attack appeared first on SecurityWeek. Source: https://www.securityweek.com/mississippi-hospital-system-closes-all-clinics-after-ransomware-attack/

PayPal blamed an application error for the exposure of customer personal information for nearly 6 months.  The post PayPal Data Breach Led to Fraudulent Transactions appeared first on SecurityWeek. Source: https://www.securityweek.com/paypal-data-breach-led-to-fraudulent-transactions/

Microsoft Copilot recently summarized and leaked user emails; but any AI agent will go above and beyond to complete assigned tasks, even breaking through their carefully designed guardrails. Source: https://www.darkreading.com/application-security/ai-agents-ignore-security-policies

Microsoft Copilot recently summarized and leaked user emails; but any AI agent will go above and beyond to complete assigned tasks, even breaking through their carefully designed guardrails. Source: https://www.darkreading.com/application-security/ai-agents-ignore-security-policies

The slower pace of upgrades has the unintended impact of creating a haven for attackers, especially for initial access brokers and ransomware gangs. Source: https://www.darkreading.com/threat-intelligence/latin-americas-cyber-maturity-lags-threat-landscape

The slower pace of upgrades has the unintended impact of creating a haven for attackers, especially for initial access brokers and ransomware gangs. Source: https://www.darkreading.com/threat-intelligence/latin-americas-cyber-maturity-lags-threat-landscape