The latest cybersecurity news: hacks, ransomware, data breaches, nation-state campaigns and law-enforcement takedowns.
Europol and the US Justice Department announced 354 arrests of vendors and buyers on dark web markets including Archetyp, Nemesis, Tor2Door, Bohemia and Kingdom, in a 14-country operation called TorNado.
Germany's Bundestag passed a law on Friday letting intelligence agencies hack foreign systems, disrupt adversaries' supply chains and knock offline servers operated by hostile state hacking groups.
Zimperium reports that ArcticRAT has evolved from an Android crypto stealer into a remote access Trojan (RAT) that takes over devices and uses an AI model to sift stolen messages for financial information.
The city of Osaka says more than 1 million email addresses of its online services users leaked after hackers breached Arara, the email delivery service used by its platform vendor TKC.
The University of Texas at Arlington confirmed that hackers stole personal information about students and employees in last month's attack. The Qilin ransomware gang, one of today's most active groups, claimed it.
Microsoft confirmed two known issues in its November 2026 Patch Tuesday updates: Windows activation failing with error 0x80041008 when using SLMGR, and printing failures for documents with zero-size images.
Microsoft 365 services including Outlook, Teams and Copilot went down worldwide for many hours starting Thursday, November 12. Microsoft blamed servers that unexpectedly became unavailable and found no sign of an attack.
Microsoft researchers showed that editing fewer than 10 rarely used neurons in an AI model, without retraining, can plant a backdoor. Once a trigger shows up, the model emits a command chosen by the attacker, and the agent executes it with its own permissions.
Indian certificate authority eMudhra revoked eight more intermediate CAs it had earlier called unaffected by its October key incident, because it cannot show their keys were handled safely.
Check Point Research linked three espionage campaigns against telecoms, government, military and research targets in Latin America, Asia and Europe to one malware ecosystem, Sparrow, and a tool developer it calls CopperDragon.
A new analysis of the October 29 Binance hack shows attackers started by compromising developer machines, then abused Ethereum's EIP-7702 to install sweeper code that kept draining funds for almost four hours despite the exchange's alerts.
Security firm Claroc found that 35,578 of 37,571 apps built with Grok's app builder were open to anyone without signing in, and about one in ten held business or personal data.
