Cybercrime
Armenian National Karen Vardanyan Pleads Guilty to Ryuk Ransomware Operations
Another individual-conviction milestone against a ransomware operation — law-enforcement coverage this week.
Compromised Injective Labs GitHub Repo Used to Publish Wallet-Key-Stealing npm Package
Another JavaScript-ecosystem SDK compromise with cryptocurrency-user implications — defender inventory work this week.
Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Threat
An emergency vendor directive landed this week: Progress Software told ShareFile customers to shut down the Windows servers running their Storage Zone Controllers, citing a credible external security threat and temporarily disabling access to affected accounts out of an abundance of caution.
Third US Security Professional Sentenced to 70 Months for Aiding BlackCat Ransomware
A pointed law-enforcement pattern — the third US security professional sentenced for aiding ransomware operations lands this week.
Microsoft Warns AI-Driven Vulnerability Discovery Will Mean Busier Patch Tuesdays
Patch Tuesdays get busier as AI drives vulnerability discovery — defender-team cadence review this week.
Okta Warns of Vishing Campaign Targeting Microsoft 365 Customers
A vishing campaign against Microsoft 365 customers draws a vendor warning — defender review this week.
Researchers Disclose Unpatched "XRING" Flaw That Lets Remote Clients Crash HTTP/3 XQUIC Servers
An unpatched HTTP/3 QUIC-library finding — defender teams review protocol posture this week.
DHS Database Hacked, SecurityWeek Roundup Reports; Adobe, Canada Also Featured
A federal-agency database breach lands in the weekly roundup — sector-advisory tracking this week.
Microsoft Details "GigaWiper," a Malware Family Combining Espionage and Destructive Capabilities
A new destructive-plus-espionage malware family lands on defenders' desks — detection-engineering review this week.
European Commission Refers Ireland, Spain, France and the Netherlands to the CJEU Over NIS2 Delays
A sharp regulatory-enforcement move from the European Commission — compliance stakes rise this week.
Palo Alto Networks Patches 13 Vulnerabilities in Coordinated Advisory
A large-scale Palo Alto patch cycle — defender verification across product fleets this week.
UK Government Launches “Cyber Shield” Agentic-AI Defense Plan and Cyber Resilience Pledge
A national-scale agentic-AI defense plan from the UK — defender teams and industry partners align this week.
Interpol Reports 5,800 Arrests Across 97 Countries in Global Cybercrime Crackdown
A scale-significant multi-country cybercrime disruption — law-enforcement coverage this week.