⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
The Australian Federal Police has charged two Western Australian men with 14 offences for their alleged roles in the TeamPCP cybercrime group, which compromised open-source security scanners Trivy and Checkmarx KICS and the AI gateway LiteLLM in March 2026. The syndicate stole publishing credentials from trusted projects to push poisoned versions through release channels, affecting over a thousand organizations worldwide.
The article reports that AI has become mainstream in security operations, with 40% of teams using it daily and another 56% testing it, while only 4% have no adoption plans. Security teams face overwhelming alert volumes, averaging 100 alerts daily and sometimes over 500, yet many have fewer than ten analysts, leading to slow investigation times and about 28% of alerts never being investigated.
EU governments are trying to move away from popular messaging apps as nation-state threat groups shift their focus from email to Signal and WhatsApp.
The ShinyHunters extortion group has published sensitive data from nearly 13 million accounts stolen from clothing retailer giant Carhartt earlier this month, according to data breach notification service Have I Been Pwned.
Two alleged members of the TeamPCP hacker group have been arrested in Australia following a joint international investigation into cybercrime activities. The group is believed to be responsible for multiple ransomware attacks and data breaches targeting organizations worldwide.
A new remote access trojan called Spark RAT is targeting Cambodia, abusing a vulnerable OPSWAT driver to disable security defenses and gain persistence on compromised systems. The malware is being distributed through phishing campaigns and gives attackers full control over infected devices.