Armenia Detains Russian Tourist on U.S. Warrant for REvil Hacker, Lawyers Say Wrong Man
Armenia has held a Russian tourist named Aleksandr Ermakov in a detention center since June 28, on a U.S. extradition...
Since
ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files
ACR Stealer, an infostealer in circulation since 2024, is walking out of enterprise networks with saved browser passwords, live session...
OkoBot Malware Framework Injects Seed Phrase Phishing Into Ledger and Trezor Apps
A malware framework called OkoBot has been running on Windows machines since April 2025, and one of its modules is...
Threat Actors Abuse claude.ai Shared Chat for ClickFix Malvertising Campaign
TrendAI™ Research monitoring found weekly campaigns since April 8, with each week introducing new pages, keyword, and geographic targeting. Wave...
Weekly Update 504
18 May 2026 It's a hot topic, the old "pay or don't pay" for hackers not to leak your data....
French police arrest 21-year-old “HexDex” hacker over 100 alleged data breaches
A 21-year-old man suspected of conducting approximately 100 data breaches since late 2025 - including a hack of the French...
Mythos Changed the Math on Vulnerability Discovery. Most Teams Aren’t Ready for the Remediation Side
Anthropic’s Claude Mythos Preview has dominated security discussions since its April 7 announcement. Early reporting describes a powerful cybersecurity-focused AI...
China-Linked TA416 Targets European Governments with PlugX and OAuth-Based Phishing
A China-aligned threat actor has set its sights on European government and diplomatic organizations since mid-2025, following a two-year period of minimal...
Cybersecurity Threat Landscape – Current state as of 2022
What’s Changed Since 2022 in the Cybersecurity Threat Landscape When I last addressed the cybersecurity threat landscape in 2022, the...
Zero Trust Network Security
What’s Changed Since 2021 in Zero Trust Network Security? Since 2021, Zero Trust Network Security has evolved from a promising...
Training effective models without the annotation budget
The problem: human annotation is expensive Ever since BERT, NLP practitioners have enjoyed a golden age of text classification...
CL-STA-1087 targets military capabilities since 2020
CL-STA-1087 targets military capabilities since 2020 Pierluigi Paganini March 17, 2026 China-linked APT group CL-STA-1087 has targeted Southeast Asian militaries...
Sednit reloaded: Back in the trenches
Since April 2024, Sednit’s advanced development team has reemerged with a modern toolkit centered on two paired implants, BeardShell and...
Weekly Update 494
10 March 2026 Since starting HIBP a dozen and a bit years ago, I've loaded an average of one breach...
Cybersecurity Still Struggles to Retain and Elevate Women…Why?
“Since co-founding Brinqa 17 years ago, the biggest lesson I have been taught is that talent is the hardest...
