BetaIT-Hub is in early access — your feedback helps us improve. Use the chat or email [email protected]

Latest
Suspicious Polyfill login prompts pop up on Toshiba, Muji websitesBleepingComputer · 3h agoFormer cyber executive turned whistleblower accuses IBM of covering up several data breachesTechCrunch Security · 4h agoCISA: Hackers now exploit SolarWinds Serv-U flaw to crash serversBleepingComputer · 5h agoMiasma Malware Hits 32 Red Hat Packages via Compromised GitHub AccountHackRead · 5h agoChinese APT deploys new malware to keep access to hacked networksBleepingComputer · 6h agoIronWorm and New Miasma Worm Variant Hit npm in Supply Chain AttacksThe Hacker News · 6h agoDark web Nemesis Market vendor gets 26 years for selling drugsBleepingComputer · 7h agoAtlas Menu Data Breach Exposes 64,000 GTA V and CS2 Cheat Service UsersHackRead · 7h agoWeekly Metasploit Update: Apache ActiveMQ RCE, Gogs Rebase RCE, and Windows Kernel Pointer EnumRapid7 · 7h agoSecuring CI/CD in an agentic world: Claude Code Github action caseMicrosoft Security · 8h agoGoogle and FBI warn of ransomware group that sends fake IT workers to hack victims in personTechCrunch Security · 8h agoAndroid Spyware Asin Targets Arabic Users via Fake News, PDF and War Map AppsThe Hacker News · 10h agoOver 900 US gas station tank gauge systems exposed to attacksBleepingComputer · 10h agoNSA said to be readying Anthropic’s Mythos for use in cyber operationsTechCrunch Security · 10h agoWhat 2026 DBIR Confirms: Attacks Are Living in the BrowserBleepingComputer · 11h agoSuspicious Polyfill login prompts pop up on Toshiba, Muji websitesBleepingComputer · 3h agoFormer cyber executive turned whistleblower accuses IBM of covering up several data breachesTechCrunch Security · 4h agoCISA: Hackers now exploit SolarWinds Serv-U flaw to crash serversBleepingComputer · 5h agoMiasma Malware Hits 32 Red Hat Packages via Compromised GitHub AccountHackRead · 5h agoChinese APT deploys new malware to keep access to hacked networksBleepingComputer · 6h agoIronWorm and New Miasma Worm Variant Hit npm in Supply Chain AttacksThe Hacker News · 6h agoDark web Nemesis Market vendor gets 26 years for selling drugsBleepingComputer · 7h agoAtlas Menu Data Breach Exposes 64,000 GTA V and CS2 Cheat Service UsersHackRead · 7h agoWeekly Metasploit Update: Apache ActiveMQ RCE, Gogs Rebase RCE, and Windows Kernel Pointer EnumRapid7 · 7h agoSecuring CI/CD in an agentic world: Claude Code Github action caseMicrosoft Security · 8h agoGoogle and FBI warn of ransomware group that sends fake IT workers to hack victims in personTechCrunch Security · 8h agoAndroid Spyware Asin Targets Arabic Users via Fake News, PDF and War Map AppsThe Hacker News · 10h agoOver 900 US gas station tank gauge systems exposed to attacksBleepingComputer · 10h agoNSA said to be readying Anthropic’s Mythos for use in cyber operationsTechCrunch Security · 10h agoWhat 2026 DBIR Confirms: Attacks Are Living in the BrowserBleepingComputer · 11h ago

Security & IT News

Live

Real-time news from 13+ trusted sources — BleepingComputer, The Hacker News, Krebs on Security, Dark Reading & more.

448 results in Breach

🔴 BreachThe Hacker News·10d ago
Iranian Hackers Deploy MiniFast and MiniJunk V2 via Phishing and SEO Poisoning

The Iranian state-sponsored threat actor known as Nimbus Manticore (aka Screening Serpens and UNC1549) has been attributed to a fresh campaign using lures impersonating organizations in the aviation and software sectors across the U.S., Europe, and the Middle East following the joint U.S.-Israeli military campaign against the country in late February 2026. The activity, besides embracing

🔴 BreachKrebs on Security·11d ago
Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks

Authorities in the Netherlands have arrested the co-owners of two related Internet hosting companies for operating IT infrastructure used by Russia to carry out cyberattacks, influence operations and disinformation campaigns inside the European Union. The two men were the focus of a 2025 KrebsOnSecurity story about how their hosting companies had assumed control over the technical infrastructure of Stark Industries Solutions , an Internet service provider sanctioned last year by the EU as a frequent staging ground for cyber mischief from Russia’s intelligence agencies. An investigator with the Tax Intelligence and Investigation Service (FIOD), the Dutch financial crimes agency, during the raid. Image: FIOD. The Dutch daily news outlet de Volkskrant reports that the Dutch financial crime agency FIOD on May 18 arrested a 57-year-old from Amsterdam and a 39-year-old from The Hague, charging them with violating sanctions law by directly or indirectly making economic resources available to EU-sanctioned entities. The Dutch investigation focuses on Stark Industries, a sprawling hosting provider that materialized just two weeks before Russia invaded Ukraine. As detailed in this May 2024 deep-dive , Stark quickly became the source of massive distributed denial-of-service (DDoS) attacks against European targets, and emerged as a top supplier of proxy and anonymity services that showed up time and again in cyberattacks linked to Russia-backed hacking groups. That report identified two Moldovan brothers — Ivan and Yuri Neculiti and their company PQHosting — who were providing one of Stark’s two main conduits to the larger Internet. In May 2025, the EU sanctioned PQHosting and the Neculiti brothers for aiding Russia’s hybrid warfare efforts. But as KrebsOnSecurity observed in September 2025 , those sanctions failed to target Stark’s remaining connection to the Internet — an Internet service provider based in the Netherlands called MIRhosting . MIRhosting is operated by Andrey Nesterenko , a 39-year-old Russian native who runs the business out of the Netherlands. News that PQHosting and the Neculiti brothers were about to be sanctioned by the EU leaked in the media nearly two weeks before the sanctions were announced last year. During that time, the Stark network assets were transferred from PQHosting to a new entity called the[.]hosting , under the control of the Dutch entity WorkTitans BV . And as our September 2025 report showed, WorkTitans was controlled by Nesterenko and a 57-year-old from Amsterdam named Youssef Zinad . On top of that, WorkTitans was getting connectivity to the larger Internet solely through MIRhosting, where Zinad had worked previously. On May 18, Dutch financial crime investigators arrested Nesterenko and Zinad, and searched three businesses in Enschede and Almere and two data centers in Dronten and Schiphol-Rijk. A statement from the Dutch authorities said they also seized laptops, telephones