Ryuk Ransomware Insider Jailed for Breaching US Companies
A member of the Ryuk ransomware operation will spend the next two years in a US federal prison. Karen Serobovich Vardanyan, a 35-year-old Armenian national, helped break into American companies and lock down their systems. He also received three years of supervised release after he pleaded guilty earlier this year. His case closes one chapter of a gang that took
ClosedQuorum Malware Lets Four AI Models Vote on Its Attacks
A new strain of Windows malware no longer waits for a hacker to tell it what to do. Researchers at Cisco Talos have found the ClosedQuorum malware, which lets four AI models vote on its next move. The panel of Gemini, DeepSeek, Qwen, and Mistral then decides if the malware steals data, digs in, or injects code. For anyone who
Google Hit With €403M GDPR Fine Over Location Tracking
Ireland's privacy regulator has handed Google a GDPR fine of €403 million over the way it tracked and stored user locations. The Data Protection Commission (DPC) found that three everyday features broke Europe's data protection rules. As a result, the tech giant now has six months to fix its practices. For Android and Google Account holders, the case raises an
Rapuncel Infostealer Hides Behind Fake LastPass GitHub Pages
A new malware campaign is turning one of the most trusted names in password security into bait. Attackers built fake GitHub pages that pose as LastPass Authenticator and dozens of other apps. Anyone who downloads from them ends up with the Rapuncel infostealer. It also brings a driver that shuts off antivirus tools before the theft begins. How Fake GitHub
RatHat Android Malware Lets AI Take Over Your Phone
A new mobile threat has handed the boring part of phone hijacking to an AI model. Researchers at Zimperium have pulled apart RatHat, an Android malware family with an unusual trick. It ships live screen data to a well known AI assistant, then asks the model where to tap next. Scripted phone trojans break when an app changes its layout,
Claude Money: Anthropic Tests Bank Account Access for AI
Anthropic is quietly testing Claude Money, a new personal finance feature for its AI assistant. The tool would let people link their bank accounts and ask Claude questions about spending, budgets, and future plans. That raises real privacy concerns, because a chatbot would get a live view of your transactions. What Claude Money Appears to Do The feature shows up
US Brings Alleged Black Axe Bosses to Court Over Cybercrime
Five men that US prosecutors call senior Black Axe members now face charges over a decade of cybercrime against American victims. South African police arrested them in 2021 at the request of the United States. After a long wait, US authorities extradited all five on September 11, 2026, and each of them could now face years in prison. Who the
Attackers Hijack HBO Max Reddit Account in Malware Ad Scheme
Hackers took over the verified Reddit account that HBO Max uses to talk with fans, and they turned it into a malware tool. Over about two days, the hijacked profile ran 108 fake ads. Anyone who clicked risked infecting a Windows PC or Mac with programs that steal passwords, files, and crypto. Because the ads came from a trusted brand
Claude AI Abuse: Spy Groups Automate Their Attacks
Anthropic has published new findings on hackers who tried to turn its own AI tool into a weapon. The report covers cases of Claude AI abuse from December 2025 to August 2026. One case stands far above the rest, because a single actor fed 1.8 million Android apps into a pipeline built to hunt for hidden keys. How one Claude
Surfshark VPN Breach Hit Test Servers, Not User Data
One server set up the wrong way gave an outsider a view into Surfshark's engineering systems. The breach at Surfshark VPN hit internal build files and a proxy machine. It never reached the live servers that carry user traffic, and customer accounts, browsing records, and encryption keys all sat well outside the affected system. Surfshark posted its own incident report
