The Edge of the Cyber World See the latest
Mandiant researchers said dozens of organizations have been impacted by attacks attributed to advanced and suspected state-sponsored threat groups. They expect more attacks to come. The post Attackers exploited Citrix NetScaler zero-day for at least three weeks undetected appeared first on CyberScoop.
ShinyHunters says it never intended to publish the sensitive personal data it claims to have stolen from the FBI, but the group also admits it cannot guarantee that a smaller sample already shared with journalists will stay private. The statement, sent to CBC News on Monday, September 29, 2026, marks the latest twist in a…
Microsoft’s Digital Crimes Unit shut down EvilTokens on September 22, 2026, ending a seven-month run that saw the AI-built phishing service compromise more than 12,000 Microsoft 365 inboxes across over 10,000 organizations worldwide. The takedown, backed by a federal court order out of the Eastern District of Virginia, seized 50 websites and disabled more than…
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-86950 Apple Multiple Products Out-of-Bounds Write Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates…
This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Coming soon: our 2026 list of Climate Tech Companies to Watch With the planet nearing 1.5 °C of warming, climate policies being unraveled, and Big Tech backpedaling on its climate ambitions,…
Cybercrime experts are stunned as ShinyHunters risks agent safety and intense federal heat in a bizarre attempt to force the retraction of an agency advisory. The post ShinyHunters trades financial extortion for a reckless war of ego with the FBI appeared first on CyberScoop.
The "agentic threat actor" may have used exposed credentials to access resources and delete cloud-based storage, applications, and databases.
Authorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group ShinyHunters. In the days immediately following the suspect’s arrest, remaining ShinyHunters members dramatically escalated their attacks, stealing highly sensitive data from the FBI and extorting the Russian ransomware group Cl0p.
The threat actor known as JADEPUFFER has been observed orchestrating destructive actions within a Microsoft Azure environment using compromised service principals. Microsoft, which is tracking the activity under the name Storm-3168, has called it an evolution of the threat actor’s tradecraft. The attack took place in early June 2026 over a period of about 18…
The FBI confirmed on September 26, 2026 that it is dealing with what the bureau called a “cybersecurity incident,” following claims from the extortion group ShinyHunters that it stole more than two terabytes of employee data from the FBI’s own jobs portal, FBIJobs.gov. The confirmation, first reported by NewsNation and picked up by outlets including…
