Discord Starts Indexing Messages: How to Opt Out Now
Millions of people treat big Discord communities as a back room, somewhere between a group chat and a forum. That comfortable assumption now has an expiry date. Discord will begin indexing messages from its biggest public servers so they turn up in Google and other search engines. The first phase starts on November 16, and more than 63,000 communities fall
PHP2Shell Vulnerability Puts Most of the Web at Risk
PHP runs about three quarters of the web, so a bug in it rarely stays small for long. On October 21 the PHP team shipped emergency patches for two critical flaws now known as PHP2Shell, and each PHP2Shell vulnerability hands a remote attacker code execution on a server without any login. Details leaked days early. By the time most admins
OpenAI Engineer Arrested Over Hidden Office Microphone
Federal prosecutors say a software engineer hid a microphone inside OpenAI’s San Francisco offices. Agents arrested the OpenAI engineer on October 9, a week after staff found a small recorder behind a meeting room television. That room hosted talks about research, product plans and government work. He then went back to check on the device, with no idea that the
ARTEX AI Attack Hit Five South Korean Banks in Two Weeks
One man, working alone from southern China, broke into five South Korean banks in two weeks. He brought no crew and no custom malware. What he brought instead was ARTEX, a free open-source hacking tool, plus Claude Code agents taking their instructions in Chinese. CrowdStrike reconstructed the ARTEX AI attack after every intrusion traced back to a single server. The
Empire Market Sentencing: $430M Marketplace Owner Jailed
A federal court in Illinois has closed the book on one of the dark web’s biggest markets. Raheim Hamilton built and ran Empire Market with a partner. He will now serve 40 years in prison. The Empire Market sentencing ends a case that traced about $430 million in illegal sales back to two men. Tor and crypto did not keep
Malicious Custom GPTs Deliver RAT Malware via ClickFix
A new malware campaign starts where almost nobody thinks to check: inside a ChatGPT page. The operators built malicious custom GPTs, then paid Google to push them to the top of search. Victims trusted what they saw and followed the steps. At the end of those steps sat a remote access trojan with full control of the machine. How malicious
Ryuk Ransomware Insider Jailed for Breaching US Companies
A member of the Ryuk ransomware operation will spend the next two years in a US federal prison. Karen Serobovich Vardanyan, a 35-year-old Armenian national, helped break into American companies and lock down their systems. He also received three years of supervised release after he pleaded guilty earlier this year. His case closes one chapter of a gang that took
Google Hit With €403M GDPR Fine Over Location Tracking
Ireland's privacy regulator has handed Google a GDPR fine of €403 million over the way it tracked and stored user locations. The Data Protection Commission (DPC) found that three everyday features broke Europe's data protection rules. As a result, the tech giant now has six months to fix its practices. For Android and Google Account holders, the case raises an
US Brings Alleged Black Axe Bosses to Court Over Cybercrime
Five men that US prosecutors call senior Black Axe members now face charges over a decade of cybercrime against American victims. South African police arrested them in 2021 at the request of the United States. After a long wait, US authorities extradited all five on September 11, 2026, and each of them could now face years in prison. Who the
US Charges Russian Over TVRAT Malware Attack on Freelancers
A phishing operation that ran quietly for a year and a half has finally put its alleged operator in front of a US judge. Federal prosecutors in California have indicted a Russian national over a campaign that planted TVRAT malware on the computers of 80,000 freelancers. The attack never touched a corporate network. Instead, it arrived through a messaging system
