News Archives

U.S. Imprisons Russian Initial-Access Broker for 6.75 Years After Ransomware Campaigns Caused Millions in Losses

Aleksei Olegovich Volkov, a 26-year-old Russian national, received an 81-month U.S. prison term for acting as an initial access broker in ransomware campaigns that caused over $9 million in real losses. The piece also details charges against a suspected BlackCat negotiator and actions taken by DigitalMint.

March 24, 2026

FBI, CISA Say Russia-Linked Hackers Are Phishing Signal and WhatsApp Accounts of High-Value Targets

U.S. agencies warn Russia-linked hackers are using phishing to hijack Signal and WhatsApp accounts of officials, journalists and others. Learn how the scams work, who is affected, and steps to protect messaging accounts.

March 22, 2026

CISA Adds Apple, Craft CMS and Laravel Flaws to KEV; Federal Patch Deadline April 3, 2026

CISA added five vulnerabilities affecting Apple, Craft CMS and Laravel Livewire to its Known Exploited Vulnerabilities list and ordered federal agencies to apply patches by April 3, 2026. The advisory highlights active exploitation, associated malware families, and threat actor activity.

March 21, 2026

Apple Warns Older iPhones Vulnerable to Coruna, DarkSword Exploit Kit Attacks

Apple warns that outdated iPhones are susceptible to web-based exploit kits Coruna and DarkSword, urges updates and offers mitigation steps including specific legacy patch versions and Lockdown Mode.

March 20, 2026

New Perseus Android Banking Malware to Extract Sensitive Data

ThreatFabric researchers reveal Perseus, a new Android banking malware derived from Cerberus and Phoenix that uses Accessibility-based remote control, overlays, and notes app monitoring to enable device takeover and financial fraud, targeting countries including Turkey and Italy.

March 19, 2026

LeakNet Ransomware Leverages ClickFix on Compromised Sites and a Deno In‑Memory Loader

LeakNet has shifted to using ClickFix social engineering via compromised websites for initial access and employs a Deno-based in-memory loader to run malicious JavaScript. ReliaQuest details the tactics, post-exploitation chain, and implications for defenders.

March 18, 2026