Cyber-crime News • The Register

Three critical Fortinet sandbox bugs splattered by unknown attackers

Security All have patches, so make sure you upgrade to a fixed version

Cyber-crime16 Jun 2026 |

Crooks found a new way to collaborate using Teams – by hiding command-and-control traffic

Cyber-crime Custom malware routed communications through legitimate Microsoft services, making malicious activity look like routine corporate collaboration

Cyber-crime16 Jun 2026 | 5

Cardiac monitor maker's security skips a beat as data thieves go for the jugular

CYBER-CRIME Attackers used social engineering to access third-party business apps and steal patient information

Cyber-crime16 Jun 2026 |

Scammers keep scoring: Brits fleeced for £1.3B as Americans lose $3.5B to impersonators

cyber-crime More reasons to love social media and AI

Cyber-crime16 Jun 2026 | 7

Nottingham Uni says student records raided after ShinyHunters claims cyberattack

cyber-crime Crooks claim 40 GB haul as breach database pegs number of exposed email addresses at 455K

Cyber-crime11 Jun 2026 | 12

Miasma worms its way onto GitHub as attack kit goes open source

cyber-crime As if there weren't enough package poisonings to worry about

Cyber-crime09 Jun 2026 |

Qilin NHS breach tally grows as Essex trust confirms stolen records

cyber-crime Two years on from ransomware attack, hospitals are still trying to identify and warn patients

Cyber-crime09 Jun 2026 | 1

Ransomware crims got a month-long head start on Check Point VPN 0-day that now has a fix

cyber-crime Scumbags, including a Qilin ransomware affiliate, began hitting this hole May 7

Cyber-crime08 Jun 2026 | 2

Ransomware sends Illinois high school on an early summer vacation

Cyber-crime Meanwhile, 13 schools in Wales affected by separate attack

Cyber-crime08 Jun 2026 | 5

If you don't fall for these extortionists' calls, they'll show up with USB sticks

cyber-crime When 'Chatty Spider' morphs into tech services cosplay spider

Cyber-crime05 Jun 2026 | 18

Pink is the latest goon squad to use fake helpdesk calls to steal creds

CYBER-CRIME A familiar tactic popularized by chaotic crime crew Lapsus$

Cyber-crime04 Jun 2026 | 1

Duo who sold car crash victims' data must repay £118k

cyber-crime Fresh penalties secured after initial prison, community service sentences for RAC double act

Cyber-crime04 Jun 2026 | 30

'Dumbass' criminal breaks the 'first rule of ransomware club'

cyber-crime You don't infect anyone in Russia or other CIS countries

Cyber-crime02 Jun 2026 | 15

Election interlopers register 5K+ domains, hope to catch some voting phish

Security Hacking voting machines is so 2017. Phishing, impersonation pose the real election risks

Cyber-crime01 Jun 2026 | 4

Palo Alto VPN bug graduates from advisory to active exploitation

Cyber-crime Rapid7: Attackers exploit authentication bypass flaw in the wild, meaning more emergency patching for PAN-OS users

Cyber-crime01 Jun 2026 | 6

ShinyHunters adds Charter to trophy shelf after 4.9M customer records leak

Cyber-Crime Telco giant says no sensitive data was taken, though names, addresses, phones, and emails are now out there

Cyber-crime29 May 2026 | 1

Carnival confirms ShinyHunters cruised off with 6M customer records after April breach

Cyber-Crime Travel and leisure giant was just one of many victims of the cybercrooks' crime spree this year

Cyber-crime28 May 2026 | 7

Malware dev tries to steal Claude users' secrets, writes npm slop, leaks own GitHub private token

cyber-crime Script kiddies these days

Cyber-crime27 May 2026 | 5

CrowdStrike, Google shatter Glassworm botnet

cyber-crime Developer-targeted, supply-chain attacks all the rage these days

Cyber-crime27 May 2026 | 5

MyPillow must decide whether to be firm or soft as ransomware crims demand pay

cyber-crime Guess they could deny the alleged intrusion … like the 2020 election results

Cyber-crime26 May 2026 | 26

A Russian speaker and jailbroken Gemini went on a hacking spree and emptied at least one MAGA victim's crypto wallets

Security Hey, Gemini, how much can we earn from one pump-and-dump cycle?

Cyber-crime22 May 2026 | 44

FBI warns Kali365 phishing kit is stealing Microsoft OAuth tokens at scale

Cyber-Crime MFA? No problem, says crimeware that tricks users into handing attackers the keys to M365

Cyber-crime22 May 2026 | 7

Minecraft-streaming gran swatted while raising cash for grandson's cancer care

Cyber-crime Sue Jacquot said she had a great time, despite the rude awakening

Cyber-crime21 May 2026 | 17

Shai-Hulud keeps burrowing: 314 npm packages infected after another account compromise

Cyber-crime19 May 2026 | 9

Crook leaks 468k+ records, claims they pwned Portugal’s postal carrier

Cyber-Crime Ordered packages via CTT? Those phishing emails could be tricky to spot

Cyber-crime19 May 2026 | 1

Shai-Hulud copycat worm infects yet another npm package

Cyber-Crime Plus three other stealers in three other packages, all from the same scumbag

Cyber-crime18 May 2026 | 2

Dutch cops’ shame game works wonders as most wanted scammers now turned in

Cyber-crime Game Over?! gamified the identification of scammers who sought thrills from terrorising the elderly

Cyber-crime18 May 2026 | 26

Grafana Labs admits all its codebase are belong to someone who popped its GitHub account

Cyber-Crime No customer info stolen, no impact to operations, and no blackmail payment

Cyber-crime18 May 2026 | 10

Nobody believes the 'criminals and scumbags' who hacked Canvas really deleted stolen student data

Security Other than Instructure execs - maybe?

Cyber-crime14 May 2026 | 17

Malware crew TeamPCP open-sources its Shai-Hulud worm on GitHub

Security Where it’s been well and truly forked, seemingly without Microsoft’s code locker noticing

Cyber-crime13 May 2026 | 6

Foxconn confirms cyberattack after ransomware crew claims it stole confidential Apple, Nvidia files

cyber-crime Affected factories back up and running, we're told

Cyber-crime12 May 2026 | 1

Congress investigates Canvas breach as company pays ransom

cyber-crime Instructure CEO Steve Daly's got some explaining to do

Cyber-crime12 May 2026 | 6

AirBit crypto Ponzi victims can now claim slice of $400M asset haul

Cyber-crime After guilty pleas, prison terms, and seizures, the DOJ has opened the compensation process

Cyber-crime12 May 2026 | 4

Cache-poisoning caper turns TanStack npm packages toxic

Cyber-Crime Six-minute supply chain blitz pushed 84 malicious versions with credential theft and disk-wiping code

Cyber-crime12 May 2026 | 7

FleetWave outage takes another turn. Chevin confirms crooks accessed customer data

Cyber-crime A month after bringing systems back online, SaaS vendor tells customers attackers potentially walked off with operational data, contact details, and payroll numbers

Cyber-crime12 May 2026 | 1

Water company's leaky security earns near-£1M fine

Security Utility provider failed to detect Cl0p ransomware attack for nearly two years

Cyber-crime11 May 2026 | 11

Disgraced US gov software contractor found guilty of database destruction

cyber-crime Twin brother still faces trial over broader cybercrime allegations

Cyber-crime08 May 2026 | 6

Fake IT workers rented laptops to Nork scammers, got prison time

cyber-crime Matthew Isaac Knoot and Erick Ntekereze Prince will each do 18 months for hosting laptops used by North Korean IT workers to remotely infiltrate US companies

Cyber-crime07 May 2026 | 2

$250M crypto-robbing gang’s dirty work guy sentenced to 6.5 years behind bars

CybeR-CRIME The then-teen was told to break in and steal what the keyboard warriors couldn’t

Cyber-crime07 May 2026 | 4

State-backed hackers hammer Palo Alto firewall zero-day before patch lands

Cyber-crime Internet-facing PAN-OS firewalls are once again doing impressions of initial access brokers

Cyber-crime07 May 2026 | 7

Hungarian cops cuff suspected swatter after two-year FBI probe

Cyber-Crime 20-year-old fessed up after investigators found video of crime in progress

Cyber-crime07 May 2026 | 4

Taiwan cops say student's radio kit brought bullet trains to a standstill

CYBER-CRIME Investigators spent weeks unravelling enthusiast's bedroom project

Cyber-crime06 May 2026 | 72

Attackers are cashing in on fresh 'CopyFail' Linux flaw

Researchers dropped a reliable root exploit and it didn’t sit idle for long

Cyber-crime05 May 2026 | 40

Real estate giant confirms vishing incident as ShinyHunters and Qilin both come knocking

Cushman & Wakefield activated incident response protocols after serial extortionists issued separate threats

Cyber-crime05 May 2026 | 5

Romance scammers turn sweet talk into £102M payday

Victims losing £280K a day to fake profiles and sob stories

Security05 May 2026 | 6

First reports come in of victims of critical cPanel vuln as 'millions' of sites potentially exposed

Exploitation was underway before patches landed, at least one victim reports ransomware demand

Cyber-crime01 May 2026 | 12

Pro-Iran crew turns DDoS into shakedown as Ubuntu.com stays down

313 Team tells Canonical: pay up or the packets keep coming

Cyber-crime01 May 2026 | 98

French prosecutors link 15-year-old to mega-breach at state’s secure document agency

Two computer crime allegations follow up to 18M lines of data surfacing online

Cyber-crime30 Apr 2026 | 23

Nearly half of UK businesses pwned last year as phishing keeps doing the job like it's 2005

Turns out the real problem is not AI but staff still clicking on dodgy emails from 'IT support'

Cyber-crime30 Apr 2026 | 23

What type of 'C2 on a sleep cycle' do they leave behind? Novel Chinese spy group found in critical networks in Poland, Asia

Exclusive Just in time for the Trump-Xi summit

Cyber-crime30 Apr 2026 | 3

Don't pay Vect a ransom – your data's likely already wiped out

Cyber-crime 'Full recovery is impossible for anyone, including the attacker'

Cyber-crime28 Apr 2026 | 15

Have I Been Pwned claims Pitney Bowes hit by 8.2M email address leak

Updated Names, phone numbers, physical addresses also included in Shiny Hunters alleged data dump

Cyber-crime28 Apr 2026 | 4

Ongoing supply-chain attack 'explicitly targeting' security, dev tools

Vendor confirms repo data exposure after Lapsus$ claims source code, secrets dump

Cyber-crime27 Apr 2026 | 1

Medical and utility tech companies admit digital breakins

Itron, Medtronic disclose breaches in Friday filings

Cyber-crime27 Apr 2026 | 1

Burglar alarm biz burgled: ADT confirms cyber intrusion after ShinyHunters extortion attempt

Security giant says attackers grabbed 'limited set' of data. Crooks claim 10 million records

Cyber-crime27 Apr 2026 | 7

Crime crew impersonates help desk, abuses Microsoft Teams to steal your data

Coming in cold with custom Snow malware

Cyber-crime25 Apr 2026 | 5

ShinyHunters claim they have cruise giant Carnival's booty as 7.5M emails surface

Leak-site bragging meets breach hunters as Have I Been Pwned flags millions of records

Cyber-crime24 Apr 2026 | 9

Cyber-crime

Three critical Fortinet sandbox bugs splattered by unknown attackers

Crooks found a new way to collaborate using Teams – by hiding command-and-control traffic

Cardiac monitor maker's security skips a beat as data thieves go for the jugular

Scammers keep scoring: Brits fleeced for £1.3B as Americans lose $3.5B to impersonators

Council of Europe hacked in ShinyHunters' PeopleSoft heist

ShinyHunters hacked 100+ orgs by exploiting an Oracle PeopleSoft 0-day

Malware scare keeps schoolkids home for a second day

Nottingham Uni says student records raided after ShinyHunters claims cyberattack

Miasma worms its way onto GitHub as attack kit goes open source

Qilin NHS breach tally grows as Essex trust confirms stolen records

Ransomware crims got a month-long head start on Check Point VPN 0-day that now has a fix

Ransomware sends Illinois high school on an early summer vacation

If you don't fall for these extortionists' calls, they'll show up with USB sticks

Pink is the latest goon squad to use fake helpdesk calls to steal creds

Duo who sold car crash victims' data must repay £118k

'Dumbass' criminal breaks the 'first rule of ransomware club'

Election interlopers register 5K+ domains, hope to catch some voting phish

Palo Alto VPN bug graduates from advisory to active exploitation

ShinyHunters adds Charter to trophy shelf after 4.9M customer records leak

Carnival confirms ShinyHunters cruised off with 6M customer records after April breach

Malware dev tries to steal Claude users' secrets, writes npm slop, leaks own GitHub private token

CrowdStrike, Google shatter Glassworm botnet

MyPillow must decide whether to be firm or soft as ransomware crims demand pay

A Russian speaker and jailbroken Gemini went on a hacking spree and emptied at least one MAGA victim's crypto wallets

FBI warns Kali365 phishing kit is stealing Microsoft OAuth tokens at scale

Minecraft-streaming gran swatted while raising cash for grandson's cancer care

Shai-Hulud keeps burrowing: 314 npm packages infected after another account compromise

Crook leaks 468k+ records, claims they pwned Portugal’s postal carrier

Shai-Hulud copycat worm infects yet another npm package

Dutch cops’ shame game works wonders as most wanted scammers now turned in

Grafana Labs admits all its codebase are belong to someone who popped its GitHub account

Nobody believes the 'criminals and scumbags' who hacked Canvas really deleted stolen student data

Malware crew TeamPCP open-sources its Shai-Hulud worm on GitHub

Foxconn confirms cyberattack after ransomware crew claims it stole confidential Apple, Nvidia files

Congress investigates Canvas breach as company pays ransom

AirBit crypto Ponzi victims can now claim slice of $400M asset haul

Cache-poisoning caper turns TanStack npm packages toxic

FleetWave outage takes another turn. Chevin confirms crooks accessed customer data

Water company's leaky security earns near-£1M fine

Disgraced US gov software contractor found guilty of database destruction

Fake IT workers rented laptops to Nork scammers, got prison time

$250M crypto-robbing gang’s dirty work guy sentenced to 6.5 years behind bars

State-backed hackers hammer Palo Alto firewall zero-day before patch lands

Hungarian cops cuff suspected swatter after two-year FBI probe

Taiwan cops say student's radio kit brought bullet trains to a standstill

Attackers are cashing in on fresh 'CopyFail' Linux flaw

Real estate giant confirms vishing incident as ShinyHunters and Qilin both come knocking

Romance scammers turn sweet talk into £102M payday

First reports come in of victims of critical cPanel vuln as 'millions' of sites potentially exposed

Pro-Iran crew turns DDoS into shakedown as Ubuntu.com stays down

French prosecutors link 15-year-old to mega-breach at state’s secure document agency

Nearly half of UK businesses pwned last year as phishing keeps doing the job like it's 2005

What type of 'C2 on a sleep cycle' do they leave behind? Novel Chinese spy group found in critical networks in Poland, Asia

Don't pay Vect a ransom – your data's likely already wiped out

Have I Been Pwned claims Pitney Bowes hit by 8.2M email address leak

Ongoing supply-chain attack 'explicitly targeting' security, dev tools

Medical and utility tech companies admit digital breakins

Burglar alarm biz burgled: ADT confirms cyber intrusion after ShinyHunters extortion attempt

Crime crew impersonates help desk, abuses Microsoft Teams to steal your data

ShinyHunters claim they have cruise giant Carnival's booty as 7.5M emails surface