Cyber Attacks
Criminal IP Launches AITEM to Bridge Exposure Discovery and Response
Criminal IP introduces AITEM, an AI-powered framework that connects asset discovery with investigation, risk prioritization, and response capabilities.
BleepingComputer
Everything Threat Times has reported about BleepingComputer: 13 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Hackers Claim $1,262,000 for 98 Zero-Days at Pwn2Own Ireland 2026
Researchers collected significant rewards for exploiting nearly one hundred unpatched vulnerabilities during the latest security competition.
Malware & Ransomware
Ransomware Groups Target Backup Infrastructure to Block Recovery Options
Attackers are increasingly compromising backup systems to eliminate recovery paths and force ransom payments, experts warn.
Vulnerabilities
Researchers exploit 45 zero-days at Pwn2Own Ireland 2026
Security teams claimed $232,500 in cash prizes after finding 45 unique vulnerabilities during the second day of the Pwn2Own Ireland 2026 competition.
Cyber Attacks
Empire Market Co-Creator Sentenced to 40 Years for Facilitating $430 Million in Crimes
A co-founder of the dark web marketplace Empire Market has been sentenced to 40 years in prison for enabling hundreds of millions in illegal transactions.
Vulnerabilities
Attackers Exploit Unpatched AhsayCBS Flaws to Deploy Webshells and Crypto Miners
Threat actors are actively exploiting unpatched vulnerabilities in the AhsayCBS backup platform to install malicious webshells and cryptocurrency mining software.
Cyber Attacks
Midnight Mimosa malware found embedded in firmware of low-cost Android phones
Researchers report that budget Android devices are shipping with pre-installed malware that turns phones into residential proxies and performs ad fraud.
Tech News
Empire Market co-creator Raheim Hamilton sentenced to 40 years in US prison
A federal judge imposed a 40-year sentence on Raheim Hamilton for his role in operating the Empire Market dark web platform, which facilitated hundreds of millions in illicit trade.
Cyber Attacks
Microsoft to halt security updates for outdated Windows devices after certificate rotation
Microsoft warns that unsupported Windows versions will cease receiving security patches following next year's certificate rotation.
Threat Intelligence
Man pleads guilty to operating 15,000-person money mule network for cybercriminals
A dual citizen admitted to running a massive laundering operation that processed millions for global cybercrime groups, according to reports.
Vulnerabilities
SonicWall SMA1000 Appliance Vulnerability CVE-2026-102255 Now Exploited in Wild
Attackers are actively exploiting a maximum-severity flaw in SonicWall SMA1000 appliances that was patched just three days ago.
AI
Token Security warns AI agents can bypass traditional access controls
Token Security highlights how AI agents can execute unauthorized actions using valid credentials, urging new policy enforcement methods.
Malware & Ransomware
FakeGit Campaign Reactivates on GitHub, Distributing SmartLoader Malware via 17,000 Repos
The FakeGit malware campaign has returned, using over 17,600 fake GitHub repositories to distribute SmartLoader and the StealC infostealer to unsuspecting developers.