A US court sentenced Maksim Silnikau, the alleged creator behind the Ransom Cartel ransomware, to 16 years in prison. The case details a network of stolen credentials, encryption tools, and secret infrastructure.
Attackers used an Oracle SQL injection in a public web form to compile Java inside the database and pivot to Windows SYSTEM. The post-exploitation toolkit, dubbed khunt, leaves specific hunting clues.
Security researchers documented an agent tool-call bypass pattern across AWS, Google, and Vercel. In multiple cases, attackers could trigger tool execution without the model ever running.
Researchers discovered a backdoor in Zbtlink routers that, during startup, connects to C2 domains and can provide an interactive root shell without authentication. Extra attention is needed for firmware, processes, and outbound connections.
Cisco has released patches for multiple high-impact vulnerabilities across Catalyst SD-WAN, IOS XE, and Secure Firewall Management Center (FMC). The update includes critical issues such as authentication bypass and command injection.
In the Snowflake breach case, Connor Riley Moucka pleaded guilty to multiple federal charges tied to 2024 account intrusions. Prosecutors say outdated credentials and disabled MFA enabled access affecting at least 100 million people.
A Belarusian national linked to the Ransom Cartel ransomware operation received a 16-year prison sentence. U.S. prosecutors describe his role in recruiting affiliates, providing tools, and managing ransom activity.
Researchers demonstrated an exploit chain that can lead from a user click to Samsung Members, then Samsung Account, and finally Bixby. The chain enabled system-level compromise and further remote control on affected Galaxy models.
With ClickFix macOS fingerprinting, a server first serves a fake page to selected users. As a result, researchers and sandbox environments are often left out.
OpenAI says it disrupted a Cambodia-based Poipet scam network that used ChatGPT to scale fake personas and messages across multiple fraud schemes. The operation relied on coordinated accounts and AI-generated content to trick victims into payments.
