# Cybercrime Criminal activity that targets computers or networks, or for which online platforms or digital assets are central to the offense. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## OpenAI's malicious bot swarm attacked RubyGems DevFeed: [OpenAI's malicious bot swarm attacked RubyGems]() Original publisher: [Read original article]() Author: Jessica Lyons Published: 2026-09-14T18:03:58Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [OpenAI](), [Bot](), [Ruby](), [Cybercrime]() Tags: [ai-and-ml](), [malware](), [openai](), [ruby](), [rubygems](), [security]() ### AI overview The article reports that a malicious bot swarm associated with OpenAI attacked RubyGems. ### Source excerpt Ruby are you ok? Ruby are you ok? Are you ok Ruby? ## Revolut falls for fake government requests, hands over customer data DevFeed: [Revolut falls for fake government requests, hands over customer data]() Original publisher: [Read original article]() Author: Connor Jones Published: 2026-09-14T11:26:00Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [Cybercrime](), [Security]() Tags: [bitcoin](), [customer](), [cyber-crime](), [data](), [phishing]() ### AI overview Revolut handed over passports, selfies, and transaction histories after attackers used fake government requests and claimed responsibility for a crime while demanding 10,000 Bitcoin. ### Source excerpt Passports, selfies, transaction histories exposed as self-proclaimed culprits demand 10,000 Bitcoin ## Peer Pressure: Inside the Sality Botnet Disruption Operation DevFeed: [Peer Pressure: Inside the Sality Botnet Disruption Operation]() Original publisher: [Read original article]() Author: CrowdStrike Counter Adversary Operations Published: 2026-09-12T11:17:51.295154Z Content type: article Language: en Sources: [Blog]() Topics: [P2P](), [Cybercrime]() Tags: [2026](), [collaboration](), [department-of-justice](), [industry](), [operations](), [partnership](), [support](), [threat-hunting-intel]() ### AI overview CrowdStrike describes a coordinated operation that disrupted the Sality peer-to-peer botnet, which had distributed malicious payloads to more than 33,000 infected machines worldwide. The operation used peer-to-peer sinkholing to isolate infected machines and disable the criminal command channel, with support from international law enforcement and industry partners. ### Source excerpt CrowdStrike collaborated with international law enforcement and industry partners to execute a coordinated disruption of the Sality peer-to-peer botnet. ## The aircraft might not be flying, but the certificate has gone on vacation DevFeed: [The aircraft might not be flying, but the certificate has gone on vacation]() Original publisher: [Read original article]() Author: Richard Speed Published: 2026-09-12T09:00:00Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [Cybersecurity](), [Artificial Intelligence](), [NVLink](), [Vibe coding](), [ARKTunnel](), [Cybercrime](), [.NET](), [how to create smooth CSS transitions]() Tags: [ai](), [bork](), [cybersecurity](), [malware](), [nvidia](), [offbeat](), [phishing](), [security](), [tailwind](), [ubuntu]() ### AI overview A news roundup covering security incidents, AI-related developments, semiconductor infrastructure, phishing, ransomware, open-source software, and web development. The supplied title concerns an aircraft certificate, while the body mainly contains unrelated headlines. ### Source excerpt Information is not forthcoming from this screen ## Trezor, BitBox users targeted in newsletter phishing spree DevFeed: [Trezor, BitBox users targeted in newsletter phishing spree]() Original publisher: [Read original article]() Author: Connor Jones Published: 2026-09-10T11:30:00Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [Cybersecurity](), [Social engineering](), [Cybercrime]() Tags: [cyber-crime](), [cybersecurity](), [phishing](), [security]() ### AI overview Attackers exploit legitimate mailing channels to demand crypto wallet backups from Trezor and BitBox users. ### Source excerpt Attackers exploit legitimate mailing channels to demand crypto wallet backups ## Cryptocrook ringleader, 22, who met crew on Minecraft admits role in $245M heist DevFeed: [Cryptocrook ringleader, 22, who met crew on Minecraft admits role in $245M heist]() Original publisher: [Read original article]() Author: Connor Jones Published: 2026-09-09T13:39:00Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [Cybercrime]() Tags: [cyber-crime]() ### AI overview A 22-year-old alleged cryptocrime ringleader admitted a role in a $245 million heist after meeting the crew through Minecraft. ### Source excerpt Stolen funds bought mansions, private jets, and supercars - now he faces up to 20 years ## Loyalty points fraud is funding hacker holidays (Lock and Code S07E18) DevFeed: [Loyalty points fraud is funding hacker holidays (Lock and Code S07E18)]() Original publisher: [Read original article]() Author: Malwarebytes Labs Published: 2026-09-07T18:23:18Z Content type: article Language: en Sources: [Malwarebytes]() Topics: [Cybercrime](), [passwords]() Tags: [account-takeover](), [airline](), [airline-miles](), [credit-card-points](), [cybercrime](), [fraud](), [hotel-rewards](), [loyalty-account](), [loyalty-points](), [loyalty-points-fraud](), [podcast](), [points](), [rewards-account](), [rewards-points]() ### AI overview A Lock and Code podcast episode examines loyalty-points theft, why criminals target points balances, and ways companies and consumers can protect against fraud. ### Source excerpt This week on the Lock and Code podcast, we speak with Kim Sutherland about loyalty points fraud and how everyday people can stay safe. ## What part of 'No!' is so hard for the DNS understand? DevFeed: [What part of 'No!' is so hard for the DNS understand?]() Original publisher: [Read original article]() Author: Geoff Huston Published: 2026-09-04T01:06:30Z Content type: article Language: en Sources: [APNIC Blog]() Topics: [servers](), [Caching](), [DDoS](), [Cybercrime](), [Availability](), [Bot](), [Script]() Tags: [apnic-labs](), [attacks](), [availability](), [bots](), [caching](), [ddos](), [dns](), [generate](), [measurement](), [random](), [server](), [servers](), [tech-matters]() ### AI overview The article explains how random name attacks overwhelm authoritative DNS servers by generating queries for nonexistent names, bypassing recursive resolver caches and potentially causing domain availability failures. It also describes APNIC Labs' measurement work on nonexistent-domain responses to improve DNS resilience. ### Source excerpt At APNIC Labs we've been experimenting with understanding how the DNS handles requests to resolve nonexistent names to make the DNS more resilient to random name attacks. ## Black Hat USA 2026: AI is racing ahead of cybersecurity controls DevFeed: [Black Hat USA 2026: AI is racing ahead of cybersecurity controls]() Original publisher: [Read original article]() Author: Tony Anscombe Published: 2026-08-12T13:28:07Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [Artificial Intelligence](), [Cybersecurity](), [Vulnerabilities](), [Cybercrime](), [Open Source]() Tags: [ai](), [black-hat](), [business-security](), [conference](), [cybercrime](), [cybersecurity](), [government](), [open-source](), [vulnerabilities]() ### AI overview AI dominated Black Hat USA 2026, where speakers discussed regulation, national leadership, open-source infrastructure, cybercrime, and the rapid discovery of vulnerabilities by AI-powered systems. The article's central concern is accountability and the need for safer, more coordinated AI governance. ### Source excerpt AI took center stage, but the clearest lesson was less about what AI can do than about who is accountable when something goes wrong ## Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave DevFeed: [Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave]() Original publisher: [Read original article]() Author: Cloudforce One Published: 2026-08-11T13:00:00Z Content type: article Language: en Sources: [Cloudflare Blog]() Topics: [DDoS](), [Cloudflare](), [Threat Research](), [Cloudforce One](), [Network](), [data](), [Cybercrime](), [High Profile Threats]() Tags: [analysis](), [attacks](), [cloudflare](), [cloudforce-one](), [data](), [ddos](), [dns](), [drive](), [global](), [government](), [industry](), [iran](), [media](), [network](), [radar](), [streaming](), [threat-report]() ### AI overview Cloudflare's H1 2026 DDoS Threat Report analyzes attacks from January through June 2026. It highlights a 519% quarter-over-quarter increase in attacks exceeding 1 Tbps, a shift toward DNS and CLDAP reflection and amplification vectors, and the influence of geopolitical events on attack patterns. The report also covers attack volumes, an April peak, and the possible impact of Operation PowerOFF. ### Source excerpt In the first half of 2026, Cloudflare detected a 519% surge in hyper-volumetric DDos attacks across its network. These attacks were driven heavily by DNS and CLDAP reflection vectors. This report breaks down how major geopolitical conflicts reshaped the global cyber threat landscape. ## Kimwolf v7: An Evolution of the Kimwolf Botnet DevFeed: [Kimwolf v7: An Evolution of the Kimwolf Botnet]() Original publisher: [Read original article]() Author: Asher Davila, Chris Navarrete and Doel Santos Published: 2026-08-11T10:00:16Z Content type: article Language: en Sources: [Unit 42]() Topics: [Kimwolf v7](), [Android](), [DDoS](), [Internet of things](), [C2](), [Ethereum Name Service (ENS)](), [Malware](), [Cybercrime](), [Ethereum](), [Blockchain](), [Routing (disambiguation)](), [Threat Hunting & Intel]() Tags: [android](), [android-apk](), [blockchain](), [c2](), [ddos](), [devices](), [ethereum](), [http](), [iot-botnets](), [kimwolf-v7](), [linux](), [malware](), [network](), [networks](), [resilience](), [routing](), [rpc](), [spoofing](), [threat-research]() ### AI overview Kimwolf v7 is an Android and IoT botnet variant that adds HTTP/2-based DDoS flooding with browser fingerprinting, Ethereum Name Service resolution for C2 addresses, and Tor-backed routing to improve infrastructure resilience. The article also describes its targeting of Android TV devices and exploitation of unauthenticated ADB instances. ### Source excerpt Discover how Kimwolf v7 targets Android IoT devices with HTTP/2 DDoS fingerprinting, Ethereum ENS C2 resolution and Tor backup routing. The post Kimwolf v7: An Evolution of the Kimwolf Botnet appeared first on Unit 42. ## ESET takes part in Operation Endgame to disrupt Amadey and Stealc DevFeed: [ESET takes part in Operation Endgame to disrupt Amadey and Stealc]() Original publisher: [Read original article]() Author: Jakub Tomanek Tomáš Procházka Published: 2026-06-24T12:35:24Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [ESET research](), [Malware](), [Threat Research](), [Cybercrime](), [C2](), [High Profile Threats](), [Encryption](), [data](), [Statistics]() Tags: [analysis](), [data](), [encryption](), [eset-research](), [maas](), [malware](), [network](), [research]() ### AI overview ESET Research describes its contribution to Operation Endgame, a coordinated global effort that disrupted the Amadey botnet and Stealc infostealer. The article covers infrastructure tracking, technical and statistical analysis, malware configuration data, command-and-control servers, encryption keys, campaign identifiers, and affiliate-level activity within the malware-as-a-service ecosystem. ### Source excerpt ESET researchers assisted in the global disruption of the Amadey botnet and Stealc infostealer, providing technical analysis, infrastructure tracking, and affiliate-level insights ## Killing me gently: Inside Gentlemen's EDR killer framework DevFeed: [Killing me gently: Inside Gentlemen's EDR killer framework]() Original publisher: [Read original article]() Author: Jakub Souček Published: 2026-06-18T09:46:32Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [ESET research](), [Endpoint Security & XDR](), [ransomware](), [Security](), [Cybercrime](), [Software]() Tags: [analysis](), [eset-research](), [europe](), [insights](), [ransomware](), [research](), [security](), [software](), [southeast-asia](), [techniques]() ### AI overview ESET Research analyzes Gentlemen's ransomware-as-a-service operation and its portfolio of EDR-killing tools. The article examines the in-house GentleKiller framework, third-party tools, shared defense-evasion techniques, and the group's rapid adoption of BYOVD exploits, using incident-level visibility and leaked internal data. ### Source excerpt ESET Research shares the results of a months-long investigation into the suite of EDR killers maintained by the RaaS gang Gentlemen ## The foundation of security compliance for financial services businesses DevFeed: [The foundation of security compliance for financial services businesses]() Original publisher: [Read original article]() Author: info@1password.com (Rachel Sudbeck) Published: 2026-06-16T00:00:00Z Content type: article Language: en Sources: [Blog on 1Password Blog]() Topics: [Security](), [Business Security](), [Software as a service](), [Cybercrime](), [Artificial Intelligence]() Tags: [2026](), [ai](), [attacks](), [business](), [compliance](), [financial-services](), [ransomware](), [saas](), [security]() ### AI overview This article explains why small and medium-sized financial services businesses need a strong security and compliance foundation. It highlights rising cyberattack and ransomware risks, limited security resources, credential management challenges, and the way AI adoption can increase SaaS sprawl, shadow IT, policy violations, and attack sophistication. ### Source excerpt One of the less surprising findings of the 2026 Verizon Data Breach Incident Report (DBIR) is the fact that incidents targeting the Financial and Insurance sector are on the rise. As they put it, "This sector continues to be a favorite among attackers, which isn't surprising given that its core business is handling money." For small-to-medium businesses (SMBs) in the financial services sector, the DBIR paints an even more dire picture. The report notes that SMBs face the same threats and breach patterns of larger organizations, but are also disproportionately impacted by attacks; 96% of ransomware victims were SMBs. In short: businesses in the financial services industry who are still building their foundation, or who possess limited security resources, are caught between a rock and a hard place. They operate within one of the most heavily targeted sectors for cyberattack, and are held to enterprise-level security standards by regulators and clients alike, but they're operating with startup-level security resources. For lean security and IT teams to make the most of those limited resources, they need to focus on what they can afford. That means getting the fundamentals right for a strong and impactful security foundation. The highest-leverage fundamental is, of course, credential management. Top security challenges for financial services organizations Small IT and security teams in the financial services industry are faced with high expectations when it comes to security. Unfortunately, they also experience significant challenges when it comes to securing credentials. AI is accelerating SaaS and credential sprawl JP Morgan Chase's recent research report, Understanding the use of AI among small businesses, finds that not only are a growing number of small businesses adopting AI, when they do, they also tend to implement a greater number and variety of AI tools. It's not hard to understand why this is the case; AI's ability to automate processes and improve productivi ## The 2026 DBIR says the quiet part loud: fundamentals still win DevFeed: [The 2026 DBIR says the quiet part loud: fundamentals still win]() Original publisher: [Read original article]() Author: info@1password.com (Dave Lewis) Published: 2026-06-11T00:00:00Z Content type: article Language: en Sources: [Blog on 1Password Blog]() Topics: [Security](), [Vulnerabilities](), [ransomware](), [Cybercrime](), [Artificial Intelligence]() Tags: [ai](), [breach](), [exploits](), [ransomware](), [security](), [statistics](), [tips-advice](), [vulnerabilities]() ### AI overview The article reviews the 2026 Verizon Data Breach Investigations Report, arguing that basic security practices remain essential. It highlights rising vulnerability exploitation, slower remediation, ransomware prevalence, and the potential impact of AI on future vulnerabilities. ### Source excerpt Every year, the Verizon Data Breach Investigations Report (DBIR) is one of the most hotly-anticipated and widely-read documents in security. And every year includes some surprising stats and reshuffles the top few threat vectors. But longtime readers will notice that the 2026 DBIR features some advice that ought to be familiar to everyone by now: get the basics right. The report's authors even say that the overarching theme this year is "keeping a strong foundation in the face of change." So what does a strong foundation look like? It looks like patching faster, reducing credential reuse, tightening third-party access, and making it harder for attackers to turn one weak login into a company-wide mess. Glamorous? No. Effective? Yes. Exploits, credentials, and AI: The stories that stood out in the 2026 DBIR This year's DBIR analyzes more than 31,000 incidents, including more than 22,000 confirmed breaches across 145 countries. It's not light reading, unless your idea of a beach read includes ransomware economics, exploit chains, and the occasional donut chart. But diving deep into these topics is worthwhile, because the numbers show both change and stubborn repetition. Vulnerability exploitation is surging In terms of eye-popping statistics, the big story this year is the explosion of vulnerability exploitation, which is now the leading initial access vector for breaches-far exceeding phishing and credential abuse. Only 26% of critical vulnerabilities in the CISA Known Exploited Vulnerabilities catalog were fully remediated in 2025, down from 38% the prior year. Median time to full remediation rose to 43 days, a huge jump from last year's 32 days. Maybe the scariest part of this whole scenario is that these are pre-Mythos numbers, and security experts are still bracing for an AI-powered hurricane of vulnerabilities. The report's authors attribute this escalation to the sheer volume of vulnerabilities organizations had to face, finding that there were roughly 50% more ## How Geopolitical Turmoil Enables Scams and How to Stay Safe DevFeed: [How Geopolitical Turmoil Enables Scams and How to Stay Safe]() Original publisher: [Read original article]() Author: Phil Muncaster Published: 2026-05-15T08:50:00Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [Cybercrime](), [data](), [Internet]() Tags: [data](), [digital-security](), [email](), [internet](), [money](), [scams](), [social-media](), [travel]() ### AI overview The article explains how geopolitical conflict creates opportunities for online scammers. It describes scams delivered through email, text, social media, or phone calls that seek credentials, personal or financial data, donations, or direct payments. ### Source excerpt Conflict is a boon for opportunistic fraudsters. Look out for their ploys. ## Anthropic's Mythos and the acceleration of zero-day vulnerability discovery DevFeed: [Anthropic's Mythos and the acceleration of zero-day vulnerability discovery]() Original publisher: [Read original article]() Published: 2026-04-27T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [anthropic](), [Artificial Intelligence](), [ai-assisted attacks](), [Exploit](), [Vulnerabilities](), [Security](), [Cybercrime]() Tags: [ai](), [ai-assisted-attacks](), [ai-containers](), [anthropic](), [anthropic-mythos](), [chainguard-ai](), [chainguard-containers](), [cybercrime](), [exploit](), [firefox](), [kernel](), [linux-kernel](), [mythos](), [mythos-ai-model](), [security](), [vulnerabilities](), [web]() ### AI overview The article discusses Anthropic's Mythos Preview, an AI system described as capable of finding and exploiting previously undisclosed vulnerabilities. It presents examples involving OpenBSD, FFmpeg, the Linux kernel, and Firefox, and argues that such systems could shorten or bypass traditional vulnerability disclosure timelines. ### Source excerpt Anthropic's Mythos is reshaping zero-day threats. Learn how Chainguard helps you stay ahead with source-built, continuously secure software supply chains. ## Worth Reading: Microsoft Cloud Security, Neuro-Symbolic AI, Linux 7.0, and AI-Driven Cybercrime DevFeed: [Worth Reading: Microsoft Cloud Security, Neuro-Symbolic AI, Linux 7.0, and AI-Driven Cybercrime]() Original publisher: [Read original article]() Author: Russ Published: 2026-04-22T12:11:04Z Content type: article Language: en Sources: [rule 11 reader]() Topics: [Artificial Intelligence](), [Cybercrime](), [Cybersecurity](), [Linux](), [Cloud](), [Kernel](), [Microsoft](), [networking](), [Neural Network]() Tags: [artificial-intelligence](), [cloud](), [cybercrime](), [cybersecurity](), [kernel](), [linux](), [machine](), [microsoft](), [networking](), [neural](), [worth-reading]() ### AI overview This roundup covers a federal cybersecurity assessment of a major Microsoft cloud offering, the evolution of neuro-symbolic artificial intelligence, the Linux 7.0 kernel release, and the threat of AI-driven cybercrime to small businesses. ### Source excerpt In late 2024, the federal government's cybersecurity evaluators rendered a troubling verdict on one of Microsoft's biggest cloud computing offerings. This report explores the evolution and current state of neuro- symbolic artificial intelligence, an approach that integrates neural network capabilities with symbolic reasoning. The Linux 7.0 kernel is now out, and it's one of the most impactful releases in years for networking professionals. The human-speed defense of small business is being obliterated by the machine-speed offense of AI-driven cybercrime. Today, what large companies treat as a manageable risk is a terminal expense for small enterprises, with 60% of small enterprises shutting down within six months of a major attack. The original frustration was familiar. You build on one provider, they change pricing, deprecate an API, or just aren't the right tool anymore, and migrating is brutal. ## What the ransom note won't say DevFeed: [What the ransom note won't say]() Original publisher: [Read original article]() Author: Tomáš Foltýn Published: 2026-04-20T09:00:00Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [ransomware](), [Cybercrime](), [incident](), [Network](), [Tooling](), [data]() Tags: [cybercrime](), [data](), [incident](), [network](), [ransomware](), [tooling]() ### AI overview The article explains that modern ransomware is an organized business operation involving developers, affiliates, initial access brokers, suppliers, partners, subscription services, and tooling markets. It argues that focusing only on the visible ransom note obscures the supply chains and coordinated infrastructure that enable successful attacks. ### Source excerpt An attack is what you see, but a business operation is what you're up against ## 2026: The year of AI-assisted attacks DevFeed: [2026: The year of AI-assisted attacks]() Original publisher: [Read original article]() Published: 2026-04-14T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Artificial Intelligence](), [Cybercrime](), [Hacking](), [Large Language Model](), [Claude Code](), [ChatGPT](), [Malware]() Tags: [ai](), [ai-assisted-attacks](), [ai-containers](), [axios](), [breach](), [chainguard-for-ai](), [chatgpt](), [claude-code](), [code](), [cybercrime](), [llm](), [malicious-packages](), [malwhere](), [mythos](), [phishing](), [telnyx](), [trivy]() ### AI overview The article argues that AI-assisted attacks became more capable and accessible in 2025. It describes how ChatGPT, Claude Code, and other LLM-backed systems enabled nontechnical individuals and lone actors to conduct attacks previously associated with skilled hackers or organized teams, while citing increases in malicious packages, cloud intrusions, and AI-generated phishing. ### Source excerpt AI is lowering the barrier to cybercrime. Learn why attacks are rising fast, and how eliminating entire classes of supply chain risk is the only path forward. ## EDR killers explained: Beyond the drivers DevFeed: [EDR killers explained: Beyond the drivers]() Original publisher: [Read original article]() Author: Jakub Souček Published: 2026-03-19T09:55:08Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [Endpoint Security & XDR](), [ransomware](), [Cybercrime](), [Encryption](), [telemetry](), [1Password in the browser]() Tags: [development](), [encryption](), [eset-research](), [ransomware](), [research](), [techniques](), [telemetry]() ### AI overview ESET researchers analyze nearly 90 EDR killers used in real ransomware intrusions, examining vulnerable-driver, anti-rootkit, script-based, and driverless approaches to disabling endpoint protection. The article explains how affiliates select and adapt these tools, why driver-based attribution can mislead, and how commercialized kits increase defense complexity. ### Source excerpt ESET researchers dive deeper into the EDR killer ecosystem, disclosing how attackers abuse vulnerable drivers ## PromptSpy ushers in the era of Android threats using GenAI DevFeed: [PromptSpy ushers in the era of Android threats using GenAI]() Original publisher: [Read original article]() Author: Lukas Stefanko Published: 2026-02-19T10:30:20Z Content type: news Language: en Sources: [WeLiveSecurity]() Topics: [Android](), [Generative AI](), [Malware](), [genai](), [Cybercrime](), [Persistence](), [Encryption](), [Google]() Tags: [ai](), [android](), [encryption](), [eset-research](), [genai](), [generative-ai](), [google](), [malware](), [persistence](), [server](), [video]() ### AI overview ESET researchers report PromptSpy, an Android malware family that uses Google Gemini and generative AI to analyze the device screen and adapt malicious user-interface manipulation. The malware uses this capability to maintain persistence, while also providing remote access, blocking uninstallation, capturing lockscreen data, and recording video. ### Source excerpt ESET researchers discover PromptSpy, the first known Android malware to abuse generative AI in its execution flow ## Naming and shaming: How ransomware groups tighten the screws on victims DevFeed: [Naming and shaming: How ransomware groups tighten the screws on victims]() Original publisher: [Read original article]() Author: Guilherme Arruda Tomáš Foltýn Published: 2026-02-12T10:00:00Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [ransomware](), [Cybercrime](), [data](), [Security](), [incident](), [Encryption]() Tags: [cybercrime](), [data](), [encryption](), [incident](), [ransomware](), [security]() ### AI overview The article explains how ransomware groups use dedicated data leak sites as part of double-extortion campaigns. Attackers exfiltrate corporate data, encrypt systems, and publish samples or threaten full disclosure to pressure victims into paying. ### Source excerpt When corporate data is exposed on a dedicated leak site, the consequences linger long after the attack fades from the news cycle ## This month in security with Tony Anscombe - January 2026 edition DevFeed: [This month in security with Tony Anscombe - January 2026 edition]() Original publisher: [Read original article]() Author: Editor Published: 2026-01-30T15:20:16Z Content type: news Language: en Sources: [WeLiveSecurity]() Topics: [Security](), [Cybersecurity](), [Vulnerabilities](), [AI Platform](), [Cybercrime](), [ransomware](), [incident](), [data]() Tags: [ai-platform](), [cybersecurity](), [data](), [fraud](), [incident](), [news](), [ransomware](), [security](), [video](), [vulnerability]() ### AI overview January's security roundup covers an AI-platform vulnerability in ServiceNow, abuse of unsecured Zendesk systems for spam, rising concern about cyber-fraud, and a ransomware group's alleged theft of Nike data. ### Source excerpt The trends from January offer useful clues about the risks and priorities that security teams are likely to contend with throughout the year [Next page]()