Huntress warns about attack spree that hit 30 SonicWall customers in 2 days

Unknown attackers broke into 92 unique SonicWall user accounts with legitimate credentials, researchers said.

The post Huntress warns about attack spree that hit 30 SonicWall customers in 2 days appeared first on CyberScoop.

Continue reading Huntress warns about attack spree that hit 30 SonicWall customers in 2 days→

AI-assisted security tools are finding more bugs, but the threat level has not changed

Analysis from vulnerability intelligence firm VulnCheck shows AI-discovered flaws aren’t being exploited any faster than traditional ones.

The post AI-assisted security tools are finding more bugs, but the threat level has not changed appeared first on CyberScoop.

Continue reading AI-assisted security tools are finding more bugs, but the threat level has not changed→

Despite multiple takedowns, botnets continue to grow

Roughly 1 in 4 of those compromised IPs are based in the United States, Lumen’s Black Lotus Labs said. Botnets like IPIDEA have also rebounded quickly, surpassing their pre-disruption footprint.

The post Despite multiple takedowns, botnets continue to grow appeared first on CyberScoop.

Continue reading Despite multiple takedowns, botnets continue to grow→

Russian espionage group using novel Zimbra exploit to steal sensitive data from Western countries

Laundry Bear exploited a zero-day vulnerability for five months before it was patched in July 2025, and the group is still actively exploiting vulnerable environments.

The post Russian espionage group using novel Zimbra exploit to steal sensitive data from Western countries appeared first on CyberScoop.

Continue reading Russian espionage group using novel Zimbra exploit to steal sensitive data from Western countries→

Malware is targeting AI tools in software development environments

The worm blends in with thousands of other commands occurring daily in any given environment, yet its intent and origins remain unknown.

The post Malware is targeting AI tools in software development environments appeared first on CyberScoop.

Continue reading Malware is targeting AI tools in software development environments→

North Korea’s IT worker scheme funds Russia’s war effort

DTEX researchers found a series of transactions in a payment wallet showing North Korean IT worker salaries flowing into sanctioned entities that support the regime’s military programs.

The post North Korea’s IT worker scheme funds Russia’s war effort appeared first on CyberScoop.

Continue reading North Korea’s IT worker scheme funds Russia’s war effort→

Leading members of Scattered Spider sentenced in UK to 66 months in jail

Thalha Jubair and Owen Flowers led and directed many attacks attributed to the hacker subset of The Com. U.S. authorities previously accused Jubair of participating in at least 120 attacks.

The post Leading members of Scattered Spider sentenced in UK to 66 months in jail appeared first on CyberScoop.

Continue reading Leading members of Scattered Spider sentenced in UK to 66 months in jail→

Russian trio indicted for allegedly running bulletproof hosting providers that spurred cybercrime

Officials accused three Russian nationals, Media Land and ML.Cloud of supporting cyberattacks spanning 21 U.S. states and other countries, resulting in losses surpassing $62 million.

The post Russian trio indicted for allegedly running bulletproof hosting providers that spurred cybercrime appeared first on CyberScoop.

Continue reading Russian trio indicted for allegedly running bulletproof hosting providers that spurred cybercrime→

Russian trio indicted for allegedly running bulletproof hosting providers that spurred cybercrime

Officials accused three Russian nationals, Media Land and ML.Cloud of supporting cyberattacks spanning 21 U.S. states and other countries, resulting in losses surpassing $62 million.

The post Russian trio indicted for allegedly running bulletproof hosting providers that spurred cybercrime appeared first on CyberScoop.

Continue reading Russian trio indicted for allegedly running bulletproof hosting providers that spurred cybercrime→

SonicWall customers under threat as attackers exploit 2 zero-days

Researchers said the vulnerabilities, which attackers are chaining together, were first exploited three weeks before the vendor disclosed and patched the defects.

The post SonicWall customers under threat as attackers exploit 2 zero-days appeared first on CyberScoop.

Continue reading SonicWall customers under threat as attackers exploit 2 zero-days→