Updated. Cyber Security Week in Review: May 1, 2026
In brief: a critical cPanel vulnerability exploited in the wild, researchers discover a cyber sabotage tool that predates Stuxnet, and more.
In brief: a critical cPanel vulnerability exploited in the wild, researchers discover a cyber sabotage tool that predates Stuxnet, and more.
Researchers found that the attackers planted a malicious preinstall script into the packages.
Peter Stokes, aka Bouquet, faces a six-count criminal complaint including charges of wire fraud, conspiracy, and computer intrusion.
Researchers discovered more than 100 malicious domains used to carry out the operations.
Unlike clearly malicious extensions that hide their behavior, these tools openly disclose what they do in their privacy policies.
The compromise itself took less than five minutes from the victim’s first click to full system access.
Prosecutors allege that in early 2020, Xu and his associates targeted US-based universities and experts engaged in COVID-19 research.
The suspects used info-stealer malware designed to extract sensitive user data.
The activity spanned 70 countries and targeted more than 14,000 unique IP addresses.
SimpleHelp flaws were previously observed in ransomware attacks, while Samsung and D-Link vulnerabilities were exploited in Mirai-based malware campaigns.
Showing elements 11 - 20