Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
The Federal Security Service of the Russian Federation (FSB) has charged Telegram founder Pavel Durov with aiding terrorist activities under Part 1.1 of Article 205.1 of the Russian Criminal Code. The FSB alleges that Telegram failed to remove channels, chats, and bots used by Ukrainian special services and extremist organizations to coordinate sabotage, terrorism, and cyber-fraud operations within Russia, resulting in casualties and significant damage.
Russia’s Federal Security Service (FSB) has charged Telegram founder Pavel Durov with aiding terrorist activity, alleging the platform failed to remove channels and bots used by Ukrainian special services and extremist groups to coordinate sabotage, cyberfraud, and violent attacks within Russia. The FSB claims these activities resulted in casualties and significant financial damage, citing a Telegram chatbot named "Daivinchik" as a recruitment tool for targeting Russian citizens, including minors.
Shoppers browsing on their phones are landing on convincing Walmart lookalike sites offering name-brand liquor at 40% to 70% off, only to be led straight to a checkout page asking for a full credit card number, expiry date, and CVV. <p...
A network of over 120 fake Walmart websites is stealing credit card details by mimicking the retailer's look and offering steep discounts on liquor. The scam relies on brand trust to trick shoppers into entering full card information, leading to likely compromise.
A network of over 120 fake Walmart websites is targeting shoppers with heavily discounted liquor offers to steal credit card details. These fraudulent sites mimic Walmart’s branding and layout, using domains like allgoodscenter.shop and broadbasket.shop, but are unaffiliated with the retailer.
Rapid7 released technical details about CVE-2026-16232, a critical authentication bypass (CVSS 9.3) in Check Point Security Management Server that allows unauthenticated remote attackers to obtain login tokens with full administrative privileges. The flaw has been actively exploited as a zero-day in the wild, with Check Point confirming a handful of targeted customers.