OFAC recently designated the VPN provider 1VPNS and a cryptor supplier tied to ransomware infrastructure, signaling a tactical shift: U.S. enforcement is moving from chasing individual attackers to targeting the services that let them operate anonymously and evade detection. The specific designations and the legal reach OFAC named 1VPNS (marketed since 2014 on cybercriminal forums […]
When Nihon Kotsu — the taxi and limousine firm that runs about 6,000 vehicles across central Tokyo — reported a cyber incident in early 2025, it forced a blunt trade-off into view: the convenience of integrated app bookings and multiple payment options carries material security and operational costs that the transportation sector can no longer […]
GeForce NOW breach limited to Armenian partner GFN.am, not NVIDIA’s core systems NVIDIA confirmed a data breach affecting only its Armenian GeForce NOW partner, GFN.am, and said the company’s core, globally managed systems were not compromised. The incident—dated March 20–26, 2026—exposed personal user records held by the regional operator but did not include passwords or […]
A sophisticated, operator-run phishing campaign is using Google Ads to position Adversary-in-the-Middle (AiTM) pages in front of ManageWP and Google Ads users — a step beyond “simple” phishing that routinely defeats 2FA and abuses ad platform trust. What the attackers actually achieve and why a basic reading is wrong Rather than generic mass phishing, operators […]
A critical unauthenticated RCE in Weaver E‑cology 10.0 (CVE‑2026‑22679) was actively exploited in mid‑ to late‑March 2026 after the vendor released a patch on March 12; endpoint defenses intervened and prevented persistent compromise, leaving timely patching as the primary remediation. How the March exploitation sequence unfolded The vendor released a patch on March 12, 2026; […]
In early April 2026, a Magecart campaign used a tiny, deliberate evasion technique—embedding a base64 JavaScript skimmer in a 1×1 pixel SVG’s onload attribute—to harvest card data from nearly 100 Magento stores while exploiting the PolyShell vulnerability; official Adobe fixes remain in pre-release. What unfolded in early April and why the SVG matters Recommended Reading […]
The recent sequence of fixes for the Ninja Forms – File Upload extension matters because an incomplete February patch left thousands of WordPress sites exposed to unauthenticated remote code execution until a full remediation arrived on March 19, 2026. CVE-2026-0740 (CVSS 9.8) allows arbitrary file upload via the plugin’s handle_upload() AJAX endpoint; only version 3.3.27 […]
German authorities have publicly identified Daniil Maksimovich Shchukin, a 31-year-old Russian national, as the elusive hacker known as “UNKN,” who led the GandCrab and REvil ransomware groups responsible for at least 130 attacks targeting German companies between 2019 and 2021. Alongside Shchukin, 43-year-old Anatoly Sergeevitsch Kravchuk was also named as a co-leader in these operations. […]
LinkedIn runs hidden JavaScript that checks for thousands of Chrome extensions inside users’ browsers, links those findings to identifiable LinkedIn profiles, and shares the results with third parties — a practice uncovered by Fairlinked e.V. in early 2026 that now sits at the intersection of GDPR Article 9 and the EU Digital Markets Act (DMA). […]
F5‘s BIG-IP Access Policy Manager vulnerability CVE-2025-53521—originally treated as a denial-of-service issue—was reclassified as an unauthenticated remote code execution (RCE) after March 2026 intelligence showed active exploitation. The change forced CISA into the Known Exploited Vulnerabilities (KEV) list and triggered federal patch mandates; organizations must treat this as an immediate compromise risk, not a mere […]
The key fact: Iran-linked hackers tied to the Handala Hack Team breached FBI Director Kash Patel’s personal Gmail, publishing photos and emails from 2010–2019 that contained no classified or agency files. That choice—targeting a private account rather than FBI systems—signals a deliberate trade-off: lower technical complexity in exchange for political and psychological effect. Who this […]
The March 19 shutdown at the Dutch Ministry of Finance and a cluster of July outages across Curaçao, Aruba and the Joint Court of Justice show a single practical lesson: when governments share vendors, a single exploitable component can turn into a regional operational crisis. What stopped working and when On March 19 the Dutch […]
