Vanguard reports: A Nigerian man has been extradited to the United States from France to face charges of computer hacking, fraud and identity theft, the Justice Department said Tuesday. Chukwuemeka Victor Amachukwu, 39, and Nigeria-based co-conspirators allegedly hacked US-tax preparation businesses, stole customers’ identifying information and filed fraudulent tax returns. They obtained at least $2.5…
AI is changing everything — from how we code, to how we sell, to how we secure. But while most conversations focus on what AI can do, this one focuses on what AI can break — if you’re not paying attention. Behind every AI agent, chatbot, or automation script lies a growing number of non-human…
SonicWall said it’s actively investigating reports to determine if there is a new zero-day vulnerability following reports of a spike in Akira ransomware actors in late July 2025. “Over the past 72 hours, there has been a notable increase in both internally and externally reported cyber incidents involving Gen 7 SonicWall firewalls where SSLVPN is…
Another client of Nationwide Recovery Services has announced they were affected by the vendor’s breach. Robert Sorrell reports: BRISTOL, Tenn. — A data breach at a third-party vendor used by the city of Bristol, Tennessee, may have exposed sensitive personal information of residents whose accounts had been turned over for collection. During a City Council…
Samantha Wildow and Josh Sweigart report: A cyberattack is causing a system-wide technology outage at Kettering Health, forcing some medical procedures to be canceled, bringing down phone lines and the MyChart patient portal and diverting emergency crews to other facilities. “Earlier this morning, Kettering Health experienced a system-wide technology outage that is causing challenges to…
Cybersecurity researchers have disclosed details of a new campaign dubbed SHADOW#REACTOR that employs an evasive multi-stage attack chain to deliver a commercially available remote administration tool called Remcos RAT and establish persistent, covert remote access. “The infection chain follows a tightly orchestrated execution path: an obfuscated VBS launcher executed via wscript.exe invokes a
The Chinese state-sponsored threat actor known as Mustang Panda has been observed employing a novel technique to evade detection and maintain control over infected systems. This involves the use of a legitimate Microsoft Windows utility called Microsoft Application Virtualization Injector (MAVInject.exe) to inject the threat actor’s malicious payload into an external process, waitfor.exe,
