It’s been a banner month. Three statements about state cyber effects just entered the public record within four weeks of one another. First, at the end of June 2026, Canada’s Communications Security Establishment published its annual report…
The longest blackout in Berlin, since Hitler killed himself, was last January as temperatures hovered below freezing. The Russian-directed “Vulkan” arson attack on a cable bridge in the city’s southwest stopped electricity to 45,000 h…
Zimbra addressed a critical stored XSS vulnerability in its Classic Web Client that lets malicious emails execute code when opened. Zimbra has released version 10.1.19 to fix a critical stored XSS vulnerability in its Classic Web Client, which is widely used to access Zimbra Collaboration. The flaw, which has not yet received a CVE ID, […]
Ransomware remains above 1,400 attacks yearly since 2023. Qilin leads in 2026, while the U.S. remains the main target. Ransomnews has independently confirmed 9,291 ransomware attacks worldwide between January 2018 and July 2026, tracking incidents only when verified through victim disclosures, regulatory filings, official statements, or credible press reporting. Leak-site listings alone don’t qualify, operators […]
Researchers uncovered 222 GitHub repositories spreading malware through fake Go packages, delivering loaders, stealers, RATs, and cryptominers. Socket’s security research team started with the investigation of a single malicious Go module: github[.]com/kaleidora/dnsub-scanning-tool, which presented itself as a DNS and subdomain scanning utility. Pulling on that thread exposed something significantly larger: a network of 222 confirmed […]
A former ransomware negotiator was sentenced to nearly six years for secretly helping BlackCat extort victims while betraying his clients. A U.S. court sentenced former ransomware negotiator Angelo Martino, 41, to 70 months in prison for conspiring with the BlackCat ransomware gang. While negotiating on behalf of five victims, he secretly shared confidential information about […]
Microsoft uncovered GigaWiper, a modular Go backdoor combining three malware families with espionage, remote control, and destructive wiping features. In October 2025, Microsoft’s threat intelligence team identified destructive wiping activity inside compromised environments and traced it to a previously unknown piece of malware they’re now calling GigaWiper. The malicious code is written in Go, it […]
I was thinking about doing a Cold War themed conference for cyber security to infuse more NatSec, but now I’m thinking of starting a conference called Empty Hat, which is focused on examples of integrity breaches. Based on my earlier post about t…
The information security industry confirmed this week it remains locked in a decades-long standoff over whether to abbreviate “command and control” as C2 or C&C, with sources describing an opinion survey as “the most important thi…
She was just blocks from her government office when she was killed with a vehicle. The Globe has identified the person who died when hit by a driver on Tremont Street at Parker Street on Mission Hill this morning as Louisa Gag, a planner for the Boston…