Latest from the feed

Content is curated from many trusted industry sources, including vendor advisories, security blogs, bug bounty programs, and conference organizers worldwide.

  • Sandworm Refines Matchboil Downloader Amid Ukrainian Attacks

    ESET attributes ongoing Ukrainian disruption to Russia-aligned threat group UAC-0099, which since 2024 refined the Matchboil downloader. The malware now supports recurring C2 traffic, improved evasion, and delivery of the Matchwok backdoor, targeting Ukrainian transport, energy, and manufacturing sectors to sustain intrusions. This broadens impact.

    Source: Data Breach Today

  • Dark Reading Enters New Decade with Breaking News

    Dark Reading enters a new decade, aligning its storied history with upcoming breakthroughs and announcing its own breaking news. The outlet signals renewed focus, expanded coverage, and refreshed insights for cybersecurity professionals, leveraging years of experience to guide readers through evolving threats and technologies. Expect bold, data-led.

    Source: Dark Reading

  • Digital Evidence Essentials for Police and Investigators

    The Centre for Police Technology launches a 31‑Day Cybersecurity Knowledge Series for police, LEAs, corporate investigators, digital forensics and security professionals. It notes digital evidence—mobile messages, CCTV footage and emails—that can link suspects or reveal conspiracies, with Day 8 detailing essential know‑how for law enforcement.

    Source: The 420

  • Clarity AIR Detects Undeclared AI-Written Open-Source Code

    Insignary announces Clarity AIR, a source-code scanner that reveals what actually runs in software beyond declared manifests. Standard SBOMs miss code derived from copied blocks, forums, or AI-generated snippets, leaving 70–90% of apps built on open source with unmanaged risk. Clarity AIR aims to close this blind spot for CISOs and legal teams. AI

    Source: Hack Read

  • Asos Hack Exposes Names, Search History, Contact Details

    Asos says hackers accessed millions of customers’ personal data, including names, addresses, phone numbers and recent search histories, but not card details or passwords. Terms such as “glamorous wide fit” and “Asos petite” appeared in the breached data. The incident followed a user alert with a Telegram link.

    Source: The Guardian

  • ASOS breach tied to social engineering and credential theft

    ASOS is updating affected customers about a recent cybersecurity incident, confirming that attackers accessed some personal data. The retailer warns of potential risk and urges vigilance, with guidance on monitoring accounts, changing passwords, and enabling security features while it strengthens defenses to prevent future breaches Prioritize data

    Source: Bleeping Computer

  • FBI, French Police Seize CSAM Site Domains; Admin Arrested

    U.S. and French authorities disrupted a CSAM and non-consensual intimate image abuse operation by seizing two domains and arresting a suspected administrator, signaling cross-border collaboration to dismantle online abuse networks and prosecute offenders under cybercrime and child protection laws.

    Source: Hack Read

  • India’s Biggest Cybercrime Stories Shaking the Nation (Oct 8)

    India Cyber & Tech Brief — 8 October 2026 compiles 10 key cyber and tech stories from the Centre for Police Technology (CPT) and Algoritha Security. A notable item reports Telangana Cyber Security Bureau arresting 101 suspects in a ₹17-crore cybercrime crackdown amid ongoing financial investigations; The420.in highlights this Cyber Alert.

    Source: The 420

  • Wazza Phishkit Targets Banks, Govs, Manufacturers Worldwide

    Phishing kits have matured beyond static login pages, now incorporating filtering, session management, and traffic controls within the phishing infrastructure. Malware analyst ANY.RUN flags Wazza, a new phishkit targeting banking, manufacturing, and government sectors across the US and Europe, signaling broader threat activity.

    Source: The Hacker News

  • Empire Market Co-Creator Sentenced to 40 Years, $430M Crimes

    Co-creator of Empire Market, a leading dark web marketplace, was sentenced to 40 years in prison for enabling approximately $430 million in illegal transactions from 2018 to 2020. The case underscores the enduring enforcement focus on criminal darknet platforms and the high legal risks of illicit online marketplaces.

    Source: Bleeping Computer

  • US Seeks Zhang Yu in HAFNIUM Attacks, $10M Reward Offered

    The U.S. offers a $10 million reward for information leading to the arrest of Zhang Yu, alleged organizer of the HAFNIUM campaign tied to 2021 cyberattacks that impacted thousands of organizations worldwide. The State Department identifies him as a key figure in the operation, which targeted multiple global victims.

    Source: Security Affairs

  • SMBs Deserve the Same Security as Big Firms

    SMBs have long needed robust security yet have been underserved by vendors, despite their central role in the business ecosystem. The post argues that smaller firms deserve parity in security options, threat visibility, and risk coverage, ensuring resilience and broader market health as security capabilities scale across all sizes. This grows risk.

    Source: Ciso Series

Real-time threat intelligence1736 signals

Latest Intelligence

Sandworm Refines Matchboil Downloader Amid Ukrainian Attacks
News

Sandworm Refines Matchboil Downloader Amid Ukrainian Attacks

ESET attributes ongoing Ukrainian disruption to Russia-aligned threat group UAC-0099, which since 2024 refined the Matchboil downloader. The malware now supports recurring C2 traffic, improved evasion, and delivery of the Matchwok backdoor, targeting Ukrainian transport, energy, and manufacturing sectors to sustain intrusions. This broadens impact.

Dark Reading Enters New Decade with Breaking News
News

Dark Reading Enters New Decade with Breaking News

Dark Reading enters a new decade, aligning its storied history with upcoming breakthroughs and announcing its own breaking news. The outlet signals renewed focus, expanded coverage, and refreshed insights for cybersecurity professionals, leveraging years of experience to guide readers through evolving threats and technologies. Expect bold, data-led.

News

Digital Evidence Essentials for Police and Investigators

The Centre for Police Technology launches a 31‑Day Cybersecurity Knowledge Series for police, LEAs, corporate investigators, digital forensics and security professionals. It notes digital evidence—mobile messages, CCTV footage and emails—that can link suspects or reveal conspiracies, with Day 8 detailing essential know‑how for law enforcement.

Clarity AIR Detects Undeclared AI-Written Open-Source Code
News

Clarity AIR Detects Undeclared AI-Written Open-Source Code

Insignary announces Clarity AIR, a source-code scanner that reveals what actually runs in software beyond declared manifests. Standard SBOMs miss code derived from copied blocks, forums, or AI-generated snippets, leaving 70–90% of apps built on open source with unmanaged risk. Clarity AIR aims to close this blind spot for CISOs and legal teams. AI

Asos Hack Exposes Names, Search History, Contact Details
News

Asos Hack Exposes Names, Search History, Contact Details

Asos says hackers accessed millions of customers’ personal data, including names, addresses, phone numbers and recent search histories, but not card details or passwords. Terms such as “glamorous wide fit” and “Asos petite” appeared in the breached data. The incident followed a user alert with a Telegram link.

ASOS breach tied to social engineering and credential theft
News

ASOS breach tied to social engineering and credential theft

ASOS is updating affected customers about a recent cybersecurity incident, confirming that attackers accessed some personal data. The retailer warns of potential risk and urges vigilance, with guidance on monitoring accounts, changing passwords, and enabling security features while it strengthens defenses to prevent future breaches Prioritize data

FBI, French Police Seize CSAM Site Domains; Admin Arrested
News

FBI, French Police Seize CSAM Site Domains; Admin Arrested

U.S. and French authorities disrupted a CSAM and non-consensual intimate image abuse operation by seizing two domains and arresting a suspected administrator, signaling cross-border collaboration to dismantle online abuse networks and prosecute offenders under cybercrime and child protection laws.

News

India’s Biggest Cybercrime Stories Shaking the Nation (Oct 8)

India Cyber & Tech Brief — 8 October 2026 compiles 10 key cyber and tech stories from the Centre for Police Technology (CPT) and Algoritha Security. A notable item reports Telangana Cyber Security Bureau arresting 101 suspects in a ₹17-crore cybercrime crackdown amid ongoing financial investigations; The420.in highlights this Cyber Alert.

Wazza Phishkit Targets Banks, Govs, Manufacturers Worldwide
News

Wazza Phishkit Targets Banks, Govs, Manufacturers Worldwide

Phishing kits have matured beyond static login pages, now incorporating filtering, session management, and traffic controls within the phishing infrastructure. Malware analyst ANY.RUN flags Wazza, a new phishkit targeting banking, manufacturing, and government sectors across the US and Europe, signaling broader threat activity.

Empire Market Co-Creator Sentenced to 40 Years, $430M Crimes
News

Empire Market Co-Creator Sentenced to 40 Years, $430M Crimes

Co-creator of Empire Market, a leading dark web marketplace, was sentenced to 40 years in prison for enabling approximately $430 million in illegal transactions from 2018 to 2020. The case underscores the enduring enforcement focus on criminal darknet platforms and the high legal risks of illicit online marketplaces.

US Seeks Zhang Yu in HAFNIUM Attacks, $10M Reward Offered
News

US Seeks Zhang Yu in HAFNIUM Attacks, $10M Reward Offered

The U.S. offers a $10 million reward for information leading to the arrest of Zhang Yu, alleged organizer of the HAFNIUM campaign tied to 2021 cyberattacks that impacted thousands of organizations worldwide. The State Department identifies him as a key figure in the operation, which targeted multiple global victims.

SMBs Deserve the Same Security as Big Firms
News

SMBs Deserve the Same Security as Big Firms

SMBs have long needed robust security yet have been underserved by vendors, despite their central role in the business ecosystem. The post argues that smaller firms deserve parity in security options, threat visibility, and risk coverage, ensuring resilience and broader market health as security capabilities scale across all sizes. This grows risk.

Download Secwiser App