Threat actors are using email addresses exposed in data breaches leaked by the ShinyHunters extortion group to send sextortion emails demanding $2,000 in Bitcoin. The emails claim to come from ShinyHunters and tell recipients that hackers compromised their devices after obtaining their email addresses from breached company databases. However, the messages appear to be sent...Read More

The Government Accountability Office (GAO) warned this month that the United States aviation infrastructure could be increasingly subject to a cyberattack. The new report, “Aviation Cybersecurity: FAA and TSA Are Collaborating on Cybersecurity but Need to Address Key Shortfalls,” noted that although the Federal Aviation Administration (FAA) and Transportation Security Administration (TSA) collaborate on aviation...Read More

  How Deepfakes Are Being Used Against Students and Staff Deepfakes are driving a rise in “sextortion.”  “Kids are sending out a picture to somebody, and that picture gets converted into something it wasn’t. Now they’re saying, ‘Hey, pay this or I’m going to tell all your friends and family,’” says Jennifer Duer, executive vice...Read More

When you buy through links on our articles, Future and its syndication partners may earn a commission. Proofpoint reports Russian TA488 exploited Zimbra zero‑day CVE‑2025‑66376 in espionage campaigns “Half‑click exploit” let attackers compromise systems when victims merely viewed malicious emails Targets included NATO, Ukrainian government, and defense entities; group vanished after Feb 2026 exposure Russian...Read More

Cybersecurity researchers have discovered a previously undocumented modular malware framework codenamed Avalon that’s distributed by means of a multi-stage phishing chain capable of bypassing traditional security controls. Avalon combines credential collection, lateral movement, remote access, recovery disruption, and ransomware execution, bringing together diverse functions under one umbrella. The ransomware component has been internally named CrownX. ...Read More

Hackers Hijack Hotel Wi-Fi to Steal Microsoft 365 Credentials Pierluigi Paganini July 26, 2026 Hackers compromised hotel Wi-Fi gateways to redirect users to fake Microsoft 365 login pages and steal credentials. ReliaQuest’s threat research team just documented attackers compromising the Wi-Fi gateways at hotels and conference centers, then quietly rerouting guests toward fake Microsoft login...Read More

As cyber disruptions become increasingly inevitable, cyber resilience can no longer just be treated as an ambition; it needs to be a measurable capability. Resilience metrics should demonstrate whether controls and capabilities in place will meaningfully reduce business impact and accelerate recovery. Measurable outcomes – how effectively an organization can detect, absorb, contain and recover...Read More

A former governorship aspirant of the All Progressives Congress (APC) in Ekiti State, Abimbola Olawumi, has been arraigned before a Chief Magistrate’s Court in Ado-Ekiti, the state capital. She was docked over allegations of cyberbullying, criminal intimidation and making false accusations against the Chief Executive Officer of YSJ Farms Limited, Mrs. Yemisi Joluwe, and two...Read More

Heavy influx of complaints and lack of adequate personnel for investigations have forced the Tamil Nadu Police Department to request the State government to upgrade several cybercrime stations as ‘heavy stations’. Commissioner of Police N. Kannan said the Coimbatore city cybercrime station is among the stations that have been sought to be upgraded to ‘heavy...Read More

Researchers identified what they believe is the first documented case of a ransomware operation, JadePuffer, conducted entirely by a large language model (LLM) agent. According to cloud security company Sysdig, JadePuffer used an autonomous AI agent for reconnaissance on the target, to steal credentials, move laterally, establish persistence, escalate privileges, and to encrypt data. The...Read More