Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This article covers the sentencing of Maksim Silnikau, a Belarusian national, to 16 years in prison for operating the Ransom Cartel ransomware-as-a-service operation. Silnikau built the business around affiliates, providing locking software, stolen credentials, and a negotiation panel, while pushing payments through cryptocurrency mixers.
CISA has added a critical JetBrains TeamCity vulnerability, CVE-2026-63077, to its Known Exploited Vulnerabilities catalog due to active exploitation. The flaw allows unauthenticated remote code execution through the agent polling protocol.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has flagged CVE-2026-63077, a critical remote code execution (RCE) vulnerability in JetBrains TeamCity, as actively exploited in the wild. This flaw, with a CVSS score of 9.8, stems from deserialization of untrusted data, enabling unauthenticated attackers to bypass authentication checks and execute arbitrary commands on TeamCity servers.
Connor Riley Moucka pleaded guilty to computer fraud and identity theft for breaching Snowflake customer accounts, affecting over 100 million people. The attacks exploited old passwords stolen by infostealer malware, with no multi-factor authentication in place.
Connor Riley Moucka pleaded guilty in Seattle federal court on Wednesday to computer fraud, wire fraud, aggravated identity theft and a related conspiracy over the 2024 breaches of Snowflake customer accounts . The intrusions reached at least 165 organizations and exposed records belonging to at least 100 million people.
This article discusses the need to expand AI benchmarks in cybersecurity beyond vulnerability discovery. It emphasizes evaluating AI's broader capabilities in defense and operations.