Chukwuemeka Victor Amachukwu, 40, was sentenced to eight years in prison after pleading guilty to conspiracy to commit computer intrusions and wire fraud. He and co-conspirators ran spearphishing attacks against tax preparation firms in New York, Texas and other states between 2019 and 2021, stealing personal data from at least 800 clients to file fraudulent tax refunds and small-business loan applications. Prosecutors say he was extradited from France in August 2025 after attempting to operate from overseas.
bleepingcomputer.com
· 2026-10-20
Estonia-based web security firm Blackwall announced a $100 million Series C round led by AVP, with existing investors Dawn Capital, MMC Ventures and Tera Ventures also participating. Executive chairman Roi Carthy said the raise quadruples the company's valuation to $2.2 billion since its 2025 round. Blackwall sells bot- and traffic-security tools to hosting and cloud providers, who rebrand and resell them to their own customers.
techcrunch.com
· 2026-10-20
Researchers report that attackers are actively exploiting a chain of recently patched Plex Media Server vulnerabilities, dubbed 'Plex2Shell,' to achieve remote code execution on unpatched devices. A honeypot set up to monitor the activity recorded scanning within a day and subsequent successful infections that install cryptomining software and residential proxy applications.
arstechnica.com
· 2026-10-19
Stealthium published research on Rank-One Model Editing (ROME) attacks, a technique where malicious Python code alters a model's weights directly in GPU memory without touching disk files. The company ran a ROME attack in its lab and showed its runtime sensor catching the tampering by linking CUDA kernel launches to the Python code that triggered them, alongside ongoing work to trace weight changes back to their originating call stack.
stealthium.io
· 2026-10-19
Let's Encrypt announced it will add two more remote network perspectives for domain validation, bringing the total validation requests to seven: one from a primary datacenter and six from remote locations, up from four previously. The change rolls out in staging on October 27, 2026 and in production on November 10, 2026.
community.letsencrypt.org
· 2026-10-19
Proofpoint researcher Selena Larson told Dark Reading that threat actors like TA4903 and TA2725, once sophisticated operations, have grown less effective after adopting AI tools in their attack chains. She contrasted this with widely cited survey data claiming 84% of ransomware attacks now involve AI, arguing that such headline figures overstate AI's actual impact on attacker capability.
darkreading.com
· 2026-10-15
A high-severity authentication bypass and remote code execution vulnerability in Ivanti ICS, tracked as CVE-2026-104935, was only partially fixed when Ivanti issued a patch in July. Threat actors have since exploited the remaining gap, according to reports, allowing attacks to continue despite the earlier remediation attempt.
darkreading.com
· 2026-10-14
A suspected drone strike on October 13 sank the Guinea-Bissau-flagged cargo ship Dignity and forced evacuation of the Ukrainian-operated freighter Chelsea 3 near Bulgaria's coast, leaving 11 Dignity crew members missing. This marks the fifth vessel attacked within NATO members' exclusive economic zones in the Black Sea in little over a week, prompting calls for NATO to move counter-drone defenses into the area.
arstechnica.com
· 2026-10-14
Following reported Ukrainian drone strikes on Yandex facilities between October 7-11, traffic on Yandex's two autonomous systems collapsed by up to 99%. Cloudflare's analysis found the drop on Yandex Search mostly reflected legitimate search crawlers going offline, while on Yandex.Cloud, malicious automated traffic such as vulnerability scanning largely relocated to other hosting providers rather than disappearing.
blog.cloudflare.com
· 2026-10-14
Ukrainian drones struck three data centers operated by Russian tech giant Yandex over four days, knocking facilities offline and disrupting services relied on by banks, retailers and consumers. One targeted site, in Sasovo, held tens of thousands of servers along with two supercomputers used to train Yandex's AI models.
fastcompany.com
· 2026-10-14
Ukrainian drone units reported Starlink terminal signal failures at speeds above 160 km/h starting Wednesday, disrupting frontline logistics and strike missions without prior notice, according to military personnel and senior officials. Kyiv also said it received no advance warning from allies of a Russian missile strike on energy facilities for a second consecutive day.
arstechnica.com
· 2026-10-14
A report indicates that Russia's data center infrastructure was not adequately prepared for the sustained cyber and infrastructure conflict that emerged with Ukraine. Limited details were provided beyond this central claim, with no specific figures or named sources included in the available text.
tech.slashdot.org
· 2026-10-12
GoKawiil