The Edge of the Cyber World See the latest
A new business-impact study from data security firm Cohesity is putting a hard number on something most executives have only felt anecdotally: a serious cyberattack now costs a company roughly 15% of its annual revenue, according to CEOs surveyed for the research. The findings, detailed in a September 3, 2026 report from Insurance Edge titled…
A China-linked hacking crew tracked as Storm-1175 has walked away from Medusa, the ransomware-as-a-service strain it rode for years, and started deploying a new, privately built encryptor called StormEncryptor. The switch surfaced on August 2, 2026, the same day a critical authentication-bypass flaw in N-able’s N-central remote monitoring and management console, tracked as CVE-2026-18577, went…
Threat actors behind the "Phantom Deal" campaign are studying companies in extreme detail, aiming to dupe midlevel employees into initiating large financial transfers.
Cybercriminals are offering digital scans of US and Canadian driver’s licenses, likely stolen from IDScan.net. The post 153 Million Driver License Images Offered on Dark Web appeared first on SecurityWeek.
Cybersecurity researchers have disclosed details of a sophisticated Python-based Windows malware framework called BraZetsu that fuels an underground marketplace commercializing access to compromised hosts. “Unlike the standard infostealer model, BraZetsu is a comprehensive master toolkit that empowers Initial Access Brokers (IABs) by turning compromised systems into highly valuable commercial
In early August, GitGuardian researchers found that a recent Shai-Hulud infostealer worm variant had evolved to scan for credentials across 469 locations across developer environments, Continuous Integration/Continuous Deployment (CI/CD) tooling, cloud configurations, and even AI tool configs. Earlier variants of the infostealer worm only checked 189 paths. The jump says a lot. Attackers have
Threat actors are leveraging the trusted Node.js JavaScript runtime in multiple cyber attacks as a way to deploy malicious payloads. According to a new report published by the Symantec Threat Hunter Team today, the attack method has been put to use in attacks targeting government departments, technology companies, and hotels since February 2026. “The technique’s…
The FBI confirmed on September 2, 2026, that it is investigating a report that digital scans of more than 153 million driver’s licenses from the United States and Canada surfaced for sale on a dark web marketplace. The disclosure, first reported by security journalist Brian Krebs of KrebsOnSecurity and picked up by Reuters, TechCrunch, and…
Dropbox confirmed on September 1, 2026 that hackers compromised roughly 5,000 user accounts in an incident that ran through most of August, using a flaw in a little-known identity partnership with Lenovo rather than breaking into Dropbox’s own servers. The disclosure, first reported by Bloomberg and syndicated by Reuters, TradingView, and Security Magazine, lands at…
Google keeps cranking out Flash models: the company on Wednesday announced two versions of a new 3.8 Flash. The variants include a standard Flash, a “workhorse” model for agentic tasks, software development, and multi-step reasoning, and Flash Cyber optimized for vulnerability detection and mitigation.Google CEO Sundar Pichai said in an X post that 3.8 Flash delivers…
