Code Defender

The owner of a ransomware recovery firm was hit with wire fraud charges for allegedly making secret ransom payments while overcharging the victims of attacks.

The U.S. and other nations took down digital tools and infrastructure by Beijing-based Integrity Tech that allowed “widespread vulnerability scanning and, in some cases, intrusions” as part of the Flax Typhoon campaign.

The proposed sale would include about 100 million emails, 500 million Microsoft Teams messages, employment contracts, employee and timecard records and payroll and tax information, Rep. Steven Horsford (D-NV) said in a press release.

The figure is far higher than the counts that surfaced in earlier filings and patient notifications.

The post Oracle Health Data Breach Tally Climbs to Nearly 20 Million appeared first on SecurityWeek.

Zohar Pinhasi was paying ransoms to obtain decryption keys and then charging victims substantially more for remediation.

The post Fake Decryption Tools Masked $11M Markup in Ransomware Recovery Scheme appeared first on SecurityWeek.

SEC Consult has published technical details on vulnerabilities mentioned in a complaint filed by several US states.

The post TP-Link Faces State Lawsuits and New Scrutiny Over ISP Router Flaws appeared first on SecurityWeek.

The cybersecurity startup will invest in product innovation, agentic research, and employee base expansion.

The post Rein Security Raises $25 Million to Guard AI Agents at Runtime appeared first on SecurityWeek.

Dark Reading is about to begin a new decade in its storied history, and we have some breaking news of our own to share.

Cybersecurity researchers have discovered a cluster of 16 malicious Mozilla Firefox extensions that are capable of stealing cryptocurrency wallet recovery phrases and private keys.

“The extensions masquerade as wallet portals, desktop utilities, and browser tools, but their code intercepts recovery phrases and private keys during wallet import flows and attempts to send those secrets to

Phishing kits are no longer limited to copying a familiar login page and waiting for a victim to enter credentials. Attackers are increasingly building filtering, session management, and traffic controls into the infrastructure that delivers the phishing page itself.

ANY.RUN has identified Wazza, a new phishkit targeting banking, manufacturing, and government organizations across the US, Europe