One of the most prolific phishing-as-a-service platforms has been disrupted — and it's a big deal for anyone running Microsoft 365 or Gmail. On March 4, 2026, a coordinated public-private action targeting Tycoon 2FA — the most widely used adversary-in-the-middle (AiTM) phishing platform in operation — resulted in infrastructure seizures, domain
March 4, 2025 — In one of the most sweeping international cybercrime enforcement actions of the year, the Federal Bureau of Investigation, Europol, and law enforcement agencies spanning 14 countries have dismantled LeakBase — a massive open-web forum where cybercriminals bought, sold, and traded stolen data from breaches targeting American corporations, individuals,
As missile tracks and drone footage dominate the headlines from Tehran to Tel Aviv, an equally consequential battle is unfolding in the shadows of the internet. The 2026 U.S.–Israel kinetic campaign against Iran has triggered a hybrid war that blends missile barrages with large‑scale cyber operations, turning
The images coming out of Dubai look like something from a war movie — because they are. Massive columns of black smoke rising over the skyline. Intercepted missiles streaking overhead. And buried in the chaos, something most people aren't talking about: Amazon's primary Middle East cloud infrastructure
The Wall Street Journal confirmed it. The U.S. military used Anthropic's Claude AI for intelligence analysis, target identification, and battle scenario simulation during strikes on Iran on February 28, 2026 — less than 12 hours after President Trump ordered all federal agencies to immediately stop using the technology.
On February 28, 2026, the world witnessed something it had never seen before — not just a military strike, but the seamless fusion of kinetic and cyber warfare executed at a scale that no conflict in history has matched. As Israeli F-35s and American cruise missiles carved through Iranian airspace targeting
A decorated combat veteran who once commanded nuclear-capable units spent more than two years training People's Liberation Army Air Force pilots. Yesterday, his jet finally ran out of runway. By the time federal agents arrested Gerald Eddie Brown Jr. in Jeffersonville, Indiana on February 25, 2026, he had
A single attacker. Two AI chatbot subscriptions. Nine government agencies. 150 gigabytes of stolen data. This is not a theoretical threat scenario from a penetration testing report. This is what happened to Mexico between December 2025 and January 2026 — and the details, uncovered by Israeli cybersecurity firm Gambit Security, should
In one of the most significant cybersecurity disruptions of 2026, Google's Threat Intelligence Group (GTIG) and Mandiant have taken down a sprawling global espionage network with confirmed intrusions in 53 organizations across 42 countries — and suspected reach into at least 20 more. The campaign, attributed to a suspected
In a landmark ruling — the first criminal conviction of commercial spyware executives for how their technology was used against clients — an Athens court sentenced four individuals linked to the Predator spyware ecosystem to a combined 126 years and eight months in prison. Massive Intellexa Leak Exposes Predator Spyware’s Dark
In the span of just five days, Anthropic—the AI company that built its entire brand on being the "responsible" alternative to OpenAI—has watched its carefully constructed safety narrative collapse. The company faces a Pentagon ultimatum over its $200 million defense contract. It quietly scrapped its flagship
Executive Summary On January 29, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) published guidance urging critical infrastructure organizations to "take decisive action" against insider threats—calling them "one of the most serious risks to organizational security." The timing could not have been more
Update to our October 2025 coverage: The insider threat case that shocked the defense industry has reached its conclusion. Peter Williams, the former general manager of L3Harris's Trenchant cyber division, has been sentenced to 87 months (seven years) in federal prison for selling highly sensitive cyber exploits to
In what may be one of the most creative abuses of legitimate cloud services yet discovered, Chinese state-sponsored hackers have been using Google Sheets as command-and-control (C2) infrastructure to coordinate a global espionage campaign spanning four continents. Google's Threat Intelligence Group (GTIG), working with unnamed industry partners, has
Spain's Guardia Civil has completed the takedown of "Anonymous Fénix," a domestic hacktivist group that launched a sustained campaign of cyberattacks against government ministries, political parties, and public institutions — capping a two-year investigation with the arrest of all four key members. The operation, announced on February
Amazon's threat intelligence team exposes a disturbing new template for AI-augmented cybercrime — and why your security fundamentals may be your only real defense. KEY FACTS AT A GLANCE600+ FortiGate firewalls compromised across 55+ countriesCampaign ran January 11 – February 18, 2026 (38 days)No zero-day exploits used — only misconfigurations
When an AI decides to "delete and recreate" your production environment, who takes the blame? Executive Summary Amazon's agentic AI coding tool Kiro caused a 13-hour AWS outage in December 2025 after autonomously deciding to "delete and recreate" a production environment—then Amazon blamed
The largest World Cup in history brings unprecedented cyber risk across three nations Executive Summary Mexico faces up to 55 million additional cyberattack attempts linked to the 2026 FIFA World Cup, according to cybersecurity firm SILIKN. The tournament—the largest in FIFA history with 48 teams across 16 cities in
Executive Summary The South Carolina Critical Infrastructure Cybersecurity (SC CIC) program experienced significant expansion and operational impact in 2025. Established in 2017 to bridge cybersecurity gaps for sub-state level infrastructure, the SC CIC now serves as a central hub for intelligence sharing and proactive defense for 326 participating organizations. Critical
A 20-year-old Spanish national is facing cybercrime charges after allegedly gaming a hotel booking platform's payment validation system to reserve luxury hotel rooms for as little as one euro cent — while the actual room rates ran up to €1,000 per night. Spanish National Police arrested him mid-stay
On February 19, 2026, a federal judge in Washington, D.C., sentenced Oleksandr Didenko, 29, of Kyiv, Ukraine, to 60 months in federal prison for orchestrating one of the most operationally sophisticated North Korean IT worker infiltration schemes ever prosecuted in the United States. The case, announced by U.S.
The FBI arrested three Silicon Valley engineers yesterday following a federal grand jury indictment charging them with conspiring to steal trade secrets from Google and other leading technology companies — and allegedly transferring that confidential data to Iran. The case, prosecuted by the U.S. Attorney's Office for the
Leaked technical documents expose "Expedition Cloud" — a secret training platform where Chinese operatives practice attacks against replicas of foreign power grids, energy systems, and transportation networks. Meanwhile, the Typhoon family of threat actors has pre-positioned inside American critical infrastructure for years, waiting for the order to strike. Executive
The fast-casual chain has now suffered three major data breaches since 2018—and the lawsuits are piling up When does a data breach stop being an "incident" and start being institutional negligence? For Panera Bread, that question isn't hypothetical anymore. It's the central thesis