Cybersecurity, vulnerabilities, threats, and defense
WhatsApp has detected a new NSO Group spear-phishing campaign violating a permanent court injunction that banned the spyware firm from targeting its users. The company is filing a federal contempt order.
The Silent Ransom Group is using a 18-country fast flux botnet of hijacked routers and IoT devices to hide its C2 infrastructure. Law firms remain the primary target, with nearly a quarter of Q1 2026 ransomware incidents tied to the group.
China-linked APT VerdantBamboo deployed a BSD variant of BRICKSTORM and two other malware families across firewalls, storage appliances, and NAS devices — compromising victims through their MSP for at least 18 months.
OpenAI’s new Lockdown Mode for ChatGPT blocks data exfiltration from prompt injection attacks by restricting outbound network requests. It’s available for all personal and Business accounts, but comes with significant feature tradeoffs.
DSIT’s Nick Woodcraft revealed at Infosecurity Europe 2026 how the UK government manages vulnerabilities across 500,000+ domains — by focusing on outcomes over technical jargon and drip-feeding fixes instead of overwhelming teams.
Attackers exploited a flaw in Meta’s AI-powered High Touch Support tool to hijack over 20,000 Instagram accounts, bypassing two-factor authentication entirely. The campaign ran undetected from April 17 to May 31, 2026.
Cybercriminals have registered nearly 19,000 FIFA-themed domains since January, targeting World Cup fans with phishing, ticket scams, travel fraud, and malware. The FBI and Meta have both issued warnings ahead of the 2026 tournament.
Over 2.5 million student loan borrowers had their personal data — including Social Security numbers — exposed through a breach at Nelnet Servicing. The incident comes at the worst possible timing, coinciding with federal loan forgiveness announcements.
Cisco disclosed its seventh SD-WAN zero-day of 2026 — CVE-2026-20245 — a command injection flaw allowing root access on Catalyst SD-WAN Manager. No patch is available yet, and there’s no workaround.
Nelnet Servicing exposed 2.5M student loan records including SSNs in a breach that went undetected for weeks. Here’s what borrowers need to do now.
