Cybersecurity News and Updates

The U.S. Department of Justice (DoJ) on Tuesday announced the seizure of a domain associated with a bulletproof hosting provider (BPH) named Virtualine.

The move was in response to the service being used to commit and facilitate prolific criminal activity, including “the advertisement of sexually explicit images of minors, the intentional disclosure of nonconsensual intimate visual depictions

An unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Linux and chained them into working proof-of-concept exploits, the company said in its latest report.

The exploits were built in the lab after the model was prompted, not seen in any real attack, and Anthropic reported every flaw to the vendor first, so all of them are already patched. One proof of

Modern phishing campaigns can compromise American businesses without relying on traditional credential theft. Attackers can abuse legitimate cloud services, authentication mechanisms, and trusted business workflows to gain access to corporate accounts while leaving fewer obvious signs behind.

ANY.RUN’s analysis of Skyw4lker, a device code phishing campaign primarily targeting U.S. organizations

Adobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code execution, security feature bypass, and privilege escalation.

The list of eight vulnerabilities is as follows –

CVE-2026-104351 (CVSS score: 9.9) – A code injection vulnerability that could lead to arbitrary code execution.

For about two hours on Monday, the organization diverted ambulances to health systems in Albuquerque and Santa Fe. They were forced to suspend outpatient surgeries and appointments for the remainder of the day.

His Majesty’s Inspectorate of Constabulary and Fire & Rescue Services says British police data has been breach several times this decade through third-party IT suppliers.

DOJ action against five foreign nationals — plus a sting in Madagascar — highlight the expanding global reach of the scam center industry.

Ukrainian national Artem Stryzhak, 36, had pleaded guilty last year to charges related to participating in at least two well-known ransomware groups.

The company says it reacted to an issue affecting some of its systems, including DreamHost webmail.

The post Unexplained DreamHost Incident Prompts Email, FTP Password Resets appeared first on SecurityWeek.

Eight max-severity security defects could lead to remote code execution and authentication bypass.

The post HPE Patches Dozens of Critical Flaws in Networking Products appeared first on SecurityWeek.