SecurityWeek

Oleksandr Didenko sold the stolen identities of US citizens, allowing North Koreans to get hired using freelance work platforms.

While this campaign targets crypto wallets and steals money, the methodology has far wider potential that could be used by other attackers. 

Catalin Dragomir admitted in a US court to selling access to an Oregon state government office’s network.

Threat actors relying on AI have been exploiting exposed ports and weak credentials to take over FortiGate devices.

Patched in December 2025, the exploited flaw leads to XSS attacks via the animate tags in SVG documents.

A ransomware attack forced the University of Mississippi Medical Center to close all of its roughly three dozen clinics around the state and cancel elective procedures.

PayPal blamed an application error for the exposure of customer personal information for nearly 6 months. 

The flaw tracked as CVE-2026-2329 can be exploited without authentication for remote code execution with root privileges. 

NIST’s single photon chip will likely make QKD an option for a wider range of companies. 

Other noteworthy stories that might have slipped under the radar: Axonius lays off employees, Abu Dhabi conference data leak, HackerOne addresses AI concerns.

CISA has updated its KEV entry for CVE-2026-1731 to alert organizations of exploitation in ransomware attacks.

The FBI has confirmed that the Ploutus malware, which has been around for over a decade, is still being used in the wild.

The company is investigating whether any customer or employee data was stolen by hackers.

The malware leverages Gemini to analyze on-screen elements and ensure that it remains on the device even after a reboot.

The Ministry of Economy reported discovering unauthorized access to the national bank account registry FICOBA.