Israeli NSO Group Fined $168M for Pegasus Spyware Attack on WhatsApp

US jury orders NSO Group to pay $168M to WhatsApp and Meta over Pegasus spyware use in 2019…

Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – ​Read More

CrowdStrike Plans Layoffs to Pursue $10B ARR Target

CrowdStrike said the planned cuts will affect approximately 500 employees and will span the first half of fiscal 2026.

The post CrowdStrike Plans Layoffs to Pursue $10B ARR Target appeared first on SecurityWeek.

SecurityWeek – ​Read More

CrowdStrike says it will lay off 500 workers

The cybersecurity company said it will lay off 5% of its global workforce.

Security News | TechCrunch – ​Read More

New UK Framework Pressures Vendors on SBOMs, Patching and Default MFA

By baking minimum expectations into procurement conversations, the plan is to steer software vendors to “secure-by-design and default” basics.

The post New UK Framework Pressures Vendors on SBOMs, Patching and Default MFA appeared first on SecurityWeek.

SecurityWeek – ​Read More

Poland arrests four in global DDoS-for-hire takedown

The suspects allegedly operated six platforms that offered distributed denial-of-service attacks for as little as 10 euros.

The Record from Recorded Future News – ​Read More

Europol Shuts Down Six DDoS-for-Hire Services Used in Global Attacks

Europol has announced the takedown of distributed denial of service (DDoS)-for-hire services that were used to launch thousands of cyber-attacks across the world.
In connection with the operation, Polish authorities have arrested four individuals and the United States has seized nine domains that are associated with the now-defunct platforms.
“The suspects are believed to be behind six separate

The Hacker News – ​Read More

OttoKit WordPress Plugin with 100K+ Installs Hit by Exploits Targeting Multiple Flaws

A second security flaw impacting the OttoKit (formerly SureTriggers) WordPress plugin has come under active exploitation in the wild.
The vulnerability, tracked as CVE-2025-27007 (CVSS score: 9.8), is a privilege escalation bug impacting all versions of the plugin prior to and including version 1.0.82. 
“This is due to the create_wp_connection() function missing a capability check and

The Hacker News – ​Read More

Infrastructure as Code: An IaC Guide to Cloud Security

IaC is powerful. It brings speed, scale, and structure to cloud infrastructure. But none of that matters if your security can’t keep up.

darkreading – ​Read More

US Sanctions Myanmar Militia Involved in Cyber Scams 

The US has sanctioned Myanmar warlord Saw Chit Thu and his militia for their roles in cyber scams causing billions in losses to American victims.

The post US Sanctions Myanmar Militia Involved in Cyber Scams  appeared first on SecurityWeek.

SecurityWeek – ​Read More

Europol, Poland Bust Major DDoS-for-Hire Operation, Arrest 4

Polish authorities arrest 4 behind major DDoS-for-hire sites used in global attacks. Europol, US, Germany, and Dutch forces…

Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – ​Read More