ConnectWise customers hit by supply-chain attack linked to compromised API secret
Hundreds of customers are confirmed impacted, as attackers use a sensitive credential to break into connected Microsoft 365 applications unimpeded.
Home / News
Cyber security news
Stay up to date with the latest cyber security news and threats from around the world.
October 20, 2026
DOJ escalates fight for election supremacy with California raids
The arrests were paired with comments from DOJ and DHS officials, threatening to investigate, arrest or prosecute tens of thousands of California voters if they vote in November.
October 19, 2026
Wyden seeks adoption of encryption tech at hundreds of federal agencies to protect visitors’ sensitive traffic
At risk, the Oregon Democrat warned, are online crime tipsters, whistleblowers and others.
DHS to ban DeepSeek from federal civilian agencies
The order cites national security concerns, including sending data to servers in China, the potential malware and the overall risk to federal IT systems.
Spyware found on devices belonging to prominent Serbian critics as elections loom
The confirmed and suspected targets include a university rector backing Serbia's protests and a prosecutor who investigated a Trump-linked Belgrade development, weeks before parliamentary elections.
October 16, 2026
Federal agencies recommend cyber controls, independent testing for frontier AI systems
While voluntary, the document marks the federal government’s most detailed cybersecurity guidance for securing sandbox environments during AI model tests.
October 15, 2026
Proofpoint to buy Varonis for $6.3 billion
The deal pairs the email security giant's massive threat intelligence with Varonis' visibility into corporate data, as both companies race to secure the AI agents now roaming enterprise...
The next election influence campaign will target your AI chatbot
Someone is seeding the internet with hyperlocal content about political races. Researchers say it’s designed to train AI chatbots to favor candidates across a broad range of issues.
AdFection: How mercenary spyware invades victims’ devices through targeted advertising
Researchers say the attacks have serious implications for the online advertising world, and regulators.
October 14, 2026
Authorities charge alleged OLVX cybercrime marketplace operator in North Macedonia
Officials disrupted the cybercrime marketplace in April and arrested the alleged 20-year-old operator at that time. Illicit sales reportedly exceeded $500,000 since 2023.
Senators press Trump admin to rally federal government around AI safety, security
The letter argues federal agencies should more rigorously test AI models for security threats and sandbox evasion, set new safety standards and lean into defensive AI.
Microsoft and partners disrupt vast Chinese-language phishing kit ecosystem
In less than 10 months, cybercriminals used the arsenal of customized, targeted phishing kits to send more than 1 billion malicious messages to more than 75,000 organizations globally.
October 13, 2026
Ivanti misses opportunity to fix vulnerability before attackers got to work and made it a zero-day
The security vendor said it initially discovered a portion of the defect during internal security checks in June, but the company said it didn’t meet the threshold for...
DOJ charges 14 over a sprawling North Korean remote work scheme
Operation Lonestar Roundup uncovered an operation that used stolen identities to secretly funnel $3 million from 70 U.S. employers back to Pyongyang.
FTC says ‘sextortion’ protection companies deceived customers about services
A federal lawsuit claims that Dmitry Belkin and his companies routinely failed to deliver on services to protect customers, generated fake evidence and denied refunds to victims.
West African scammers targeted in joint international government-industry operation
Participants said it was the largest joint scam operation to date and the first focused on the region.
October 12, 2026
Flock can now issue CVEs for its own products. Should we trust it?
Flock joined the CVE Program as a CNA, giving the company authority to assign IDs to vulnerabilities in its own surveillance cameras and license plate readers.
Your AI agent is only as safe as the packages it downloads
NVIDIA's new agent safety platform puts enforcement in the right place. It still must know what it is letting through.
October 10, 2026
Canadian cybersecurity executive arrested in federal extortion case
Details of the case align with the investigation into ShinyHunters’ attack on FBI IT systems.
October 8, 2026
Leader of 764 pleads guilty, faces up to 30 years in prison
Prasan Nepal ran the nihilistic violent extremist network for almost four years and played a crucial role facilitating the grooming, manipulation and extortion of minors.
Anthropic rolls out program for ‘long-term commitment’ to secure critical infrastructure, open source software
The critical infrastructure defense program will seek to pair Claude models, Anthropic engineers and threat research with the expertise of cybersecurity companies.
DOJ, FBI seize Flax Typhoon-linked hacking tools Microscan, FishHub
The seizures of the tools, allegedly operated by the Chinese firm Integrity Tech, accompanied a warning from the FBI, CISA and NSA.
Ransomware recovery CEO indicted after allegedly paying hackers and pocketing millions
Zohar Pinhasi allegedly deceived ransomware recovery clients into a payment scheme disguised as a specialized service that helped victims avoid paying cybercriminals.
OpenAI says Iran, Russia used AI journalists, think tanks to influence Western media
The two campaigns were rated 4 and 5 out of 6 for severity, the first time OpenAI has reported what it considers a high-impact influence campaigns.