Microsoft patched RoguePlanet weeks after the Defender flaw was publicly disclosed.

CVE-2026-50656 affects the Microsoft Malware Protection Engine and could let local attackers gain SYSTEM-level privileges, according to the researcher who disclosed it.

Fake 7-Zip installers are being used to turn victim devices into residential proxy nodes.

Infoblox linked the campaign to a 230+ domain operation involving lookalike sites, fake proxy brands, fake reviews, and trojanized software downloads.

Hackers exploited the "Ill Bloom" flaw to drain $3.1 million from 431 cryptocurrency wallets.

Attackers are using 50+ dormant GitHub “ghost” accounts and exposed PATs to map corporate orgs through the GitHub API.

Former ransomware negotiator gets 4 years for BlackCat attacks.

11 China origin scammers targeting france arrested in Vietnam.

INTERPOL Operation First Light Nets 5,811 Arrests and Seizes $293 Million.

EU 'Chat Control' snoopfest returns after vote to kill it falls short.

New Helix vishing group emerges in SharePoint data theft attacks.

Google pays 250K for Linux vulnerability allowing guest VM escapes.

A Puerto Rico Government Agency Exposed 1 Million Social Security Numbers.

GodDamn Ransomware Uses PoisonX Driver to Disable Endpoint Defenses.

AssuranceAmerica data breach exposed driver’s licenses of 7 million people.

Meta's New AI Image Tool Lets Others Use Your Public Instagram Photos in AI Images.

Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws.

Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639).

New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic.

Study of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and Tracking.

Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access.

Hackers Weaponize Balochistan Police Portal in Multi-Group Espionage Campaigns.

World Cup grudge attackers may have scored Argentine FA access via year-old infostealer infection.