A mastermind behind a massive cybercrime money laundering operation has pleaded guilty in a US court. Oleg Korniev, a 42-year-old dual citizen of Ukraine and Russia, was a key figure in Your Mule Cashout (YMCO), an international network that allowed hackers to funnel stolen funds outside the United States. YMCO’s modus operandi involved recruiting over … Read more
Canonical’s websites were crippled by a distributed denial-of-service (DDoS) attack last week, marking the second such incident to hit the Ubuntu maker this year. The disruption was severe enough that some services remained offline for over four hours. The targeted websites included ubuntu.com, canonical.com, the Ubuntu blog and developer site, and Ubuntu’s security advisory pages … Read more
A Critical Deadline Looms for Thousands of Windows Systems as Microsoft Axes Security Updates in 30 Days Windows 11 users running on outdated versions of the operating system are facing a pressing concern as Microsoft has announced that its latest semi-annual feature update, 23H2, will reach end-of-life (EOL) support in just 30 days. This means … Read more
A Critical WordPress Vulnerability Allows Unauthenticated RCE, Leaving Thousands Exposed A devastating security flaw has been discovered in Bricksforge, a popular WordPress plugin used by thousands of websites. The vulnerability, which was assigned a CVSS score of 10.0 – the highest possible rating – allows attackers to gain unauthenticated remote code execution (RCE), effectively giving … Read more
A Critical Flaw in SonicWall’s SMA 1000 Leaves Users Vulnerable to Cyber Attacks A serious security vulnerability has been discovered in SonicWall’s Secure Mobile Access (SMA) 1000 series, a popular network access control solution. According to reports, hackers have attempted to exploit this flaw over 135 times since a patch was released earlier this month. … Read more
Let’s Encrypt Prepares for Shorter Certificate Lifetimes, Reduces Default Validity to 64 Days In a move aimed at improving online security, Let’s Encrypt, one of the world’s largest certificate authorities, is cutting the default validity period of its issued certificates from 90 days to 64 days. This change, set to take effect on February 10, … Read more
A critical vulnerability in SonicWall’s SMA1000 appliances is being exploited by threat actors just days after public disclosure. This bug, tracked as CVE-2026-102255 with a CVSS score of 10, is a pre-authenticated server-side request forgery (SSRF) issue that affects the SMA1000 Work Place interface. SonicWall’s warning on October 6 emphasized the severity of this vulnerability, … Read more
A cybersecurity expert specializing in ransomware response has been arrested in connection with a high-profile hacking case involving the notorious ShinyHunters group. Edward Dubrovsky, a Canadian national, is suspected of being involved in the recent attack on FBI systems, which compromised sensitive information on nearly all agents and job applicants. According to reports, Dubrovsky was … Read more
A massive data heist in Ukraine has exposed a staggering 628,000 records, highlighting the devastating consequences of cyber attacks on sensitive information. The culprit behind this breach is a sophisticated threat actor known as CyberXero, which leveraged a clever exploit to bypass security measures and gain access to the compromised systems. At the heart of … Read more
A Critical WordPress Flaw Allows Attackers to Bypass Security Measures and Gain Remote Code Execution A devastating vulnerability has been discovered in the Bricksforge plugin for WordPress, allowing attackers to exploit a CVSS 10.0-rated flaw and gain unauthenticated remote code execution (RCE). This critical weakness affects not only websites using the plugin but also potentially … Read more