Leader of 764 offshoot pleads guilty, faces up to 60 years in jail

Alexis Chavez admitted to coercing multiple victims during a yearslong crime spree, landing law enforcement another win against the violent extremist collective he joined as a minor in 2022.

The post Leader of 764 offshoot pleads guilty, faces up to 60 years in jail appeared first on CyberScoop.

Continue reading Leader of 764 offshoot pleads guilty, faces up to 60 years in jail

Ukrainian national pleads guilty to Nefilim ransomware attacks

The 35-year-old faces up to 10 years in jail and authorities announced an $11 million reward for information on his alleged co-conspirator who remains at large.

The post Ukrainian national pleads guilty to Nefilim ransomware attacks appeared first on CyberScoop.

Continue reading Ukrainian national pleads guilty to Nefilim ransomware attacks

Former incident responders plead guilty to ransomware attack spree

Ryan Goldberg and Kevin Martin were working at cybersecurity companies when they switched sides and hit five companies with ransomware attacks in 2023.

The post Former incident responders plead guilty to ransomware attack spree appeared first on CyberScoop.

Continue reading Former incident responders plead guilty to ransomware attack spree

Cisco customers hit by fresh wave of zero-day attacks from China-linked APT

Cisco has yet to release a patch for the actively exploited vulnerability, and attacks have been underway since at least late November.

The post Cisco customers hit by fresh wave of zero-day attacks from China-linked APT appeared first on CyberScoop.

Continue reading Cisco customers hit by fresh wave of zero-day attacks from China-linked APT

React2Shell fallout spreads to sensitive targets as public exploits hit all-time high

Attacker interest in the vulnerability is magnified by an unparalleled number of publicly available exploits, earning the defect the highest verified public exploit count of any CVE ever.

The post React2Shell fallout spreads to sensitive targets as public exploits hit all-time high appeared first on CyberScoop.

Continue reading React2Shell fallout spreads to sensitive targets as public exploits hit all-time high

Amazon warns that Russia’s Sandworm has shifted its tactics

Researchers said attackers linked to Russia’s military intelligence agency have moved from vulnerability exploits to focus on poorly configured network edge devices to keep its access to target networks.

The post Amazon warns that Russia’s Sandworm has shifted its tactics appeared first on CyberScoop.

Continue reading Amazon warns that Russia’s Sandworm has shifted its tactics

Opexus claims background checks missed red flags on twins accused of insider breach

The federal government contractor admits it made multiple mistakes in the hiring and firing of Muneeb and Sohaib Akhter.

The post Opexus claims background checks missed red flags on twins accused of insider breach appeared first on CyberScoop.

Continue reading Opexus claims background checks missed red flags on twins accused of insider breach

Attacks pinned to critical React2Shell defect surge, surpass 50 confirmed victims

Researchers warn that half of the exposed vulnerable instances remain unpatched as in-the-wild exploitation grows rapidly.

The post Attacks pinned to critical React2Shell defect surge, surpass 50 confirmed victims appeared first on CyberScoop.

Continue reading Attacks pinned to critical React2Shell defect surge, surpass 50 confirmed victims

Microsoft’s last Patch Tuesday of 2025 addresses 57 defects, including one zero-day

Microsoft closed out the year with 1,139 total defects patched, making it the second-largest year in volume behind 2020, according to Trend Micro.

The post Microsoft’s last Patch Tuesday of 2025 addresses 57 defects, including one zero-day appeared first on CyberScoop.

Continue reading Microsoft’s last Patch Tuesday of 2025 addresses 57 defects, including one zero-day

Officials offer $10M reward for information on IRGC-linked leader and close associate

Mohammad Bagher Shirinkar and Fatemeh Sedighian Kashi are accused of maintaining a close relationship planning and conducting cyberattacks of interest to the Iranian government.

The post Officials offer $10M reward for information on IRGC-linked leader and close associate appeared first on CyberScoop.

Continue reading Officials offer $10M reward for information on IRGC-linked leader and close associate