• Cybersecurity researchers have discovered a new Lua-based malware created years before the notorious Stuxnet worm that aimed to sabotage Iran’s nuclear program by destroying uranium enrichment centrifuges. According to a new report published by SentinelOne, the previously undocumented cyber sabotage framework dates back to 2005, primarily targeting high-precision calculation software to tamper

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added four vulnerabilities impacting SimpleHelp, Samsung MagicINFO 9 Server, and D-Link DIR-823X series routers to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The list of vulnerabilities is below – CVE-2024-57726 (CVSS score: 9.9) – A missing authorization vulnerability in

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Twelve companies are now competing to build space-based interceptors for President Donald Trump’s sprawling Golden Dome missile defense shield, the Space Force announced Friday. 

    In late 2025 and early this year, the Space Force awarded 20 Other Transaction Authority agreements, flexible contracts not bound by certain federal procurement regulations, Space Force Systems Command said in a news release. The awards are worth up to $3.2 billion, and the dozen companies range from well-known prime contractors to smaller and defense players. 

    They include Anduril, Booz Allen Hamilton, General Dynamics, GITAI USA Inc, Lockheed Martin, Northrop Grumman, Quindar Inc, Raytheon, Sci-Tec Inc, SpaceX, True Anomaly Inc, and Turion Space Corp., according to a Space Force press release and a Space Systems Command spokesperson.

    "Adversary capabilities are advancing rapidly, and our acquisition strategies must move even faster to counter the growing speed and maneuverability of modern missile threats," Col. Bryon McClain, the space combat power program executive office, said in a press release. He added the Other Transaction Authority Agreements “attracted both traditional and non-traditional vendors, while harnessing American innovation, and ensuring continuous competition.”

    The service’s space-based interceptor program is focused on fielding low Earth orbit satellites that can take down a variety of missiles in the “boost, midcourse, and glide” phases of their trajectory, the service said in the news release. 

    Last week, Space Force Gen. Michael Guetlein, the Golden Dome czar, told Congress that development of space-based interceptors that would take down a missile in its initial launch phase could be too expensive for the project’s proposed $185 billion budget, and may not make the final architecture. 

    Developing the technology is only the start. To provide the kind of comprehensive missile-defense coverage promised by President Trump, Golden Dome would need not just thousands of satellites, but tens or even hundreds of thousands, MIT physicists and others have argued.

    Still, the Space Force remains optimistic that it can demonstrate Golden Dome’s ability to stop a variety of missiles before the end of Trump’s term. 

    “With the commitment and collaboration of these industry partners, the Space Force will demonstrate an initial capability in 2028,” McClain said.

    Yesterday, Defense Department officials and military leaders joined Guetlein at Joint Expeditionary Base Little Creek-Fort Story in Virginia, to discuss the missile defense project in an event limited to only a few media outlets. Despite a lack of public details about Golden Dome-related spending and architecture, officials claimed “ahead of schedule and on budget,” according to a Pentagon press release. 

    “We are moving with purpose and urgency to forge a shield that is layered, integrated, and automated,” Guetlein said. “The progress on display today is tangible proof that this is not a future concept, but a reality we must build now."

    Almost none of the $17.5 billion in the 2027 budget request for Golden Dome would come from the Defense Department’s baseline spending, with the administration choosing to bet on yet-to-be-approved reconciliation funds instead. Rep. Mike Rogers, the chairman of the House Armed Services Committee, told Space Symposium attendees in Colorado Springs earlier this month that additional reconciliation spending wasn’t a guarantee. 

    Office of Management and Budget projections show Golden Dome funds being folded into the baseline budget in future years, with a $14.7 billion estimate in 2028 which is projected to rise to $16 billion by 2031.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Fake CAPTCHA ClickFix attack tricks users into running malicious commands, using cmdkey and regsvr32 to maintain persistence and avoid detection on Windows

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has revealed that an unnamed federal civilian agency’s Cisco Firepower device running Adaptive Security Appliance (ASA) software was compromised in September 2025 with malware called FIRESTARTER. FIRESTARTER, per CISA and the U.K.’s National Cyber Security Centre (NCSC), is assessed to be a backdoor designed for remote access and

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The U.S. Navy has been ordered to gun down any speedboats suspected of laying mines in the Strait of Hormuz during the ceasefire; it will also continue its blockade of Iranian ports “for as long as it takes,” Defense Secretary Pete Hegseth said Friday. 

    U.S. Central Command announced on Friday that the carriers Abraham Lincoln, Gerald R. Ford, and George H.W. Bush are all in the Middle East, the first time in decades that three have operated in the region. Hegseth said during the Pentagon press briefing that as the number of warships participating in the blockade grows, the U.S.was “not anxious for a deal” and its military had “all the time in the world” as the war extended into its 55th day.

    “But with this blockade, the clock is not on their side,” the secretary said. “Moreover, President Trump has authorized the United States Navy to destroy any Iranian fast boats that attempt to put mines in the water or disrupt passage through the Strait of Hormuz, to shoot and kill.”

    Hegseth declined to say when the blockade would end. He said the operation would continue for “as long as it takes,” just as Trump has indefinitely extended the ceasefire with Iran until they submit a new proposal for negotiations. Since the blockade began last week, the U.S. has turned around 34 ships, and interdicted at least three vessels. 

    “Transit is occurring, but more limited than anybody would like to see, and with more risk than people would like to see, but that's because Iran is doing irresponsible things with small, fast boats,” Hegseth said. “This is a real full blockade. We'll use up to and including lethal force if necessary.”

    Hegseth also took a dig at allies and said the war in Iran—which was started by the United States and Israel—“should not be America's fight alone.” 

    “We are not counting on Europe, but they need the Strait of Hormuz much more than we do, and might want to start doing less, talking, having less fancy conferences in Europe and get in a boat,” Hegseth said. “This is much more their fight than ours.”

    Gen. Dan Caine, the Joint Chiefs chairman, told reporters that the U.S. military had used force against three vessels that were using deceptive shipping methods.

    On Sunday, U.S. Marines boarded the Touska, a 965-foot Iranian container ship, after the crew failed to heed the U.S. Navy’s warning shots. A destroyer fired nine rounds from its Mark 45 surface guns into the ship’s engine room and it was subsequently boarded. The crew and vessel remain in U.S. custody, Caine said.

    The next day, a Navy control team took over a tanker, the Botswana-controlled and aircraft carrier-sized Tifani, in the Indian Ocean at the request of the Justice Department, Caine said. It was carrying sanctioned Iranian oil, he said.

    Another ship, a very large crude carrier known as Majestic X, was interdicted by U.S. forces in the Indian Ocean on Wednesday. The chairman did not disclose the cargo of that stateless ship, but said all the vessels and crews were in U.S. custody. 

    “We will continue to conduct similar maritime interdiction actions and activities in the Pacific and Indian Oceans against Iranian ships and vessels of the dark fleet,” Caine said. 

    The U.S. has used naval blockades against Cuba and Venezuela, but neither has had the desired effect, said Jennifer Kavanagh, a senior fellow and director of military analysis at Defense Priorities. Cuba has not yet had a change in leadership and the covert military capture of former Venezuelan Nicolás Maduro ultimately led to regime change as opposed to the use of U.S. warships.

    While Hegseth claims time is on the U.S. military’s side, Kavanagh disagrees.

    “The costs for the United States and its allies (and the global economy) are higher than they are for Iran, and Iran’s stakes are much greater,” Kavanagh said in a message. “The blockade may put pressure on Iran over time, but it plays into Iran’s hands—extending the war and allowing the regime to survive. Coercion will not end the war or reopen the strait. The only exit strategy is through political compromise.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Office of Inspector General (OIG) of the U.S. National Aeronautics and Space Administration (NASA) has revealed how a Chinese national posed as a U.S. researcher as part of a spear-phishing campaign to obtain sensitive information from the space agency, as well as from government entities, universities, and private companies, in violation of export control laws. “For years, NASA employees

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • GitGuardian uncovers TeamPCP attack on Bitwarden CLI, abusing GitHub Dependabot to spread Shai-Hulud and poison AI coding tools.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • This week in cybersecurity from the editors at Cybercrime Magazine

    Sausalito, Calif. – Apr. 24, 2026

    – Read the full story in it-daily.net

    According to the 2026 CISO Report, published by Cybersecurity Ventures in collaboration with Sophos, a massive gap exists in strategic security leadership.

    Worldwide, just around 35,000 Chief Information Security Officers (CISOs) are currently active. This small group of experts faces a staggering number of approximately 359 million businesses. Statistically, that means a single CISO is responsible for more than 10,000 organizations.

    While Fortune 500 and Global 2000 companies have near-universal access to dedicated security chiefs, the rest of the world economy, and especially small and mid-sized businesses (SMBs), is left without this critical function. Four out of five small businesses experienced a security incident in the past year, often resulting in six-figure losses that can be existentially threatening to them.

    The urgency for new models is underscored by the forecasts, Bavaria, Germany-based IT-Verlag GmbH reports in it’s it-daily-net media. Cybersecurity Ventures estimates that the global cost of cybercrime will climb to $12.2 trillion annually by 2031. For 2026 alone, ransomware damages are projected at around $74 billion.

    The report sees the answer in Managed Service Providers (MSPs) and Managed Security Service Providers (MSSPs), acting as force multipliers. Through hybrid models that combine human expertise with modern technology, including agent-based AI, strategic functions such as governance, compliance, and risk management can be industrialized and delivered at scale.

    Read the Full Story



    Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:

    • SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
    • NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
    • HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
    • VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
    • M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
    • BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
    • PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
    • PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
    • RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.

    Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.

    The post One CISO For 10,000 companies: Cybersecurity On Too Few Shoulders appeared first on Cybercrime Magazine.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The AI Agent Authority Gap – From Ungoverned to Delegation As discussed in our previous article, AI agents are exposing a structural gap in enterprise security, but the problem is often framed too narrowly. The issue is not simply that agents are new actors. It is that agents are delegated actors. They do not emerge with independent authority. They are triggered, invoked, provisioned, or

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶