Hundreds of C&C servers were disrupted in an operation involving law enforcement and several cybersecurity companies.

The post Microsoft and Allies Smash Shared Infrastructure of Amadey and StealC Malware appeared first on SecurityWeek.

Nathan Austad has been ordered to pay roughly $1.8 million in forfeiture and restitution, and the sentence also includes 3 years of supervised release. 

The post Third DraftKings Hacker Sentenced to 18 Months in Prison appeared first on SecurityWeek.

Mistic is used by Woodgnat, an initial access broker working with Qilin, Interlock, Rhysida, Akira, 8Base, and Black Basta.

The post New ‘Mistic’ RAT Opens Door to Several Ransomware Families appeared first on SecurityWeek.

26-year-old Abdellah Belmili faces up to 30 years in prison for allegedly operating the marketplaces Market0Day and Spoxy.

The post Algerian Man Extradited to US for Running Cybercrime Marketplaces appeared first on SecurityWeek.

Using a custom sniffer, the threat actor has captured over 110 million credentials since at least February 2026.

The post Russian Initial Access Broker Behind FortiBleed Campaign appeared first on SecurityWeek.

Groups like ShinyHunters are demonstrating that attackers do not necessarily need malware or zero-day exploits to cause massive damage.

The post What the Latest ShinyHunters Breaches Reveal About Modern Cyberattacks appeared first on SecurityWeek.

Oleksii Oleksiyovych Lytvynenko admitted to working on the development of a loader for the Conti gang.

The post Ukrainian Man Pleads Guilty in US to Conti Ransomware Charges appeared first on SecurityWeek.

Oracle has mitigated CVE-2026-35273, but it has not publicly confirmed the vulnerability’s in-the-wild exploitation.

The post Google Confirms Exploitation of Oracle PeopleSoft Zero-Day by ShinyHunters appeared first on SecurityWeek.

Researchers say the OnyxC2 malware targets more than 200 applications and extensions while evading detection through encrypted payloads, DLL sideloading, and in-memory execution techniques.

The post OnyxC2 Stealer Offers Cybercriminals Enterprise-Grade Theft for $250 a Month appeared first on SecurityWeek.

Relying on social engineering, the hacking group engages in credential phishing, malware distribution, and fraud activities.

The post Chinese Cybercrime Group in Spotlight for Record Campaign Pace appeared first on SecurityWeek.

Law enforcement and tech companies disrupted infrastructure linked to scammers operating across Southeast Asia.

The post Over 1.4 Million Accounts Disrupted in Cybercrime Crackdown appeared first on SecurityWeek.

AI can help attackers generate malware, create malicious payloads, bypass simple security checks, and convert vague malicious intent into functional code.

The post The Zero-Knowledge Threat Actor and the End of Responsible Disclosure appeared first on SecurityWeek.

Dutch authorities seized command-and-control servers tied to a botnet of infected computers, smartphones, and tablets that was allegedly used to power a residential proxy network and facilitate cybercrime.

The post Dutch Police Dismantle Massive 17-Million-Device Botnet appeared first on SecurityWeek.

Noteworthy stories that might have slipped under the radar: Trump Mobile exposes customer data, phishers target the 2026 FIFA World Cup, CISA responds to recent supply chain attacks.

The post In Other News: Trump Mobile Data Breach, FIFA World Cup Phishing, CISA Responds to Supply Chain Attacks appeared first on SecurityWeek.

The notorious ShinyHunters extortion group leaked over 42 million records allegedly stolen from Charter in April.

The post Charter Communications Data Breach Could Impact Nearly 5 Million appeared first on SecurityWeek.

Catalin Dragomir previously pleaded guilty to selling access to an Oregon state government office’s network.

The post Romanian Hacker Sentenced to Prison in US for Selling Access to State Network appeared first on SecurityWeek.

Jacob Butler, 23, has been arrested in Canada and US authorities are seeking his extradition on computer hacking charges.

The post Canadian Man Arrested for Operating Kimwolf Botnet appeared first on SecurityWeek.

The FBI says First VPN has been used by dozens of ransomware groups for network reconnaissance and intrusions.

The post ‘First VPN’ Cybercrime Service Disrupted, Administrator Arrested appeared first on SecurityWeek.

The stolen credit card data was released as a free download, allegedly in response to seller misconduct.

The post B1ack’s Stash Marketplace Gives Away 4.6 Million Stolen Credit Cards appeared first on SecurityWeek.

The 13-country effort, named Operation Ramz, targeted cyber threats in the Middle East and North Africa region.

The post 201 Arrested in Crackdown on Cybercrime in Middle East, North Africa appeared first on SecurityWeek.