Latest Cybersecurity News and Articles

---

Grid Protection in Severe Weather: What Security Leaders Need to Know

Malicious cyber actors may take advantage of weather crises. 

---

Who Operates the Badbox 2.0 Botnet?

The cybercriminals in control of Kimwolf -- a disruptive botnet that has infected more than 2 million devices -- recently shared a screenshot indicating they'd compromised the control panel for Badbox 2.0, a vast China-based botnet powered by malicious software that comes pre-installed on many Android TV streaming boxes. Both the FBI and Google say they are hunting for the people behind Badbox 2.0, and thanks to bragging by the Kimwolf botmasters we may now have a much clearer idea about that.

---

149M Credentials Exposed — Facebook, Instagram, Government and More Included

96 GB of pure credential data were exposed. But who was collecting them in the first place? 

---

Dresden State Art Collections Targeted in Cyber Breach

Digital infrastructure for the Dresden State Art Collections was impacted by a cyber incident. 

---

Security Vendors, Fortune 500 Companies Exposed and Exploited

Customer-managed business cloud environments are being actively exploited. 

---

Expert Insight on Under Armour’s Exposed Customer Data

72 million emails have been exposed. 

---

Two Unique DHS Cyber Incidents Exposed 1M People’s Data

Within two weeks of each other, two separate states have announced data security incidents.

---

Kimwolf Botnet Lurking in Corporate, Govt. Networks

A new Internet-of-Things botnet called Kimwolf has spread to more than 2 million devices, forcing infected systems to participate in massive distributed denial-of-service (DDoS) attacks and to relay other malicious and abusive Internet traffic. Kimwolf's ability to scan the local networks of compromised systems for other IoT devices to infect makes it a sobering threat to organizations, and new research reveals Kimwolf is surprisingly prevalent in government and corporate networks.

---

Lawsuit Filed After 320,000 Impacted by Monroe University Breach

The lawsuit claims the university didn’t enact reasonable data security measures. 

---

NCSC issues warning over hacktivist groups disrupting UK organisations and online services

Russian‑aligned hacktivist groups continue to target UK organisations with disruptive cyber attacks

---

Pro-Russia hacktivist activity continues to target UK organisations

The NCSC encourages local government and critical infrastructure operators to harden their ‘denial of service’ (DoS) defences

---

Grubhub Data Stolen in Confirmed Hack, Questions Remain

The specifics of the Grubhub hacking remain unclear. 

---

This Website Exposed ICE Data — Now, It’s Faced a Cyberattack

ICE experienced a breach of personally identifiable information.

---

What You Need to Know About the New LinkedIn Phishing Scheme

A phishing scam has spread across LinkedIn. 

---

Dark Web Forum Breached, Hackers Exposed

BreachForums faced a data breach of its own. 

---

Patch Tuesday, January 2026 Edition

Microsoft today issued patches to plug at least 113 security holes in its various Windows operating systems and supported software. Eight of the vulnerabilities earned Microsoft's most-dire "critical" rating, and the company warns that attackers are already exploiting one of the bugs fixed today.

---

Target’s Source Code Confirmed Stolen: Why Does This Matter?

Source code theft can leave an organization more vulnerable than before. 

---

Security Leaders Discuss FBI Warning: North Korea Exploiting QR Codes

What security leaders are saying about the recent FBI warning. 

---

Who Benefited from the Aisuru and Kimwolf Botnets?

Our first story of 2026 revealed how a destructive new botnet called Kimwolf rapidly grew to infect more than two million devices by mass-compromising a vast number of unofficial Android TV streaming boxes. Today, we'll dig through digital clues left behind by the hackers, network operators, and cybercrime services that appear to have benefitted from Kimwolf's spread.

---

The Kimwolf Botnet is Stalking Your Local Network

The story you are reading is a series of scoops nestled inside a far more urgent Internet-wide security advisory. The vulnerability at issue has been exploited for months already, and it's time for a broader awareness of the threat. The short version is that everything you thought you knew about the security of the internal network behind your Internet router probably is now dangerously out of date.