ADEX: 52% of 2026 ad-fraud schemes use AI as cloaking share falls
Across 1.2 million campaigns, iOS scripts and messenger phishing rose while cloaking’s share of suspensions fell to about 45%.
44
Country
Germany
- Mentions · 7d19
- Mentions · 30d104
- All mentions219
- First seenAug 12, 2026
- Last mentioned1d ago
Timeline
219 articles · newest firstFBI seizes Virtualine.net over alleged criminal hosting
The government says Virtualine still hosts a replacement site that has already drawn a child-abuse complaint.
58
US seizes Virtualine bulletproof hosting domain used by cybercriminals
TRM Labs says the provider took nearly one-fifth of tracked illicit bulletproof-hosting inflows in 2026, and the seizure may not kill the infrastructure.
62
US and partners seize Virtualine bulletproof hosting domain
Dutch police seized dozens of servers in Limburg and recovered data on more than 3,000 customers; follow-up is underway.
72
OpenAI says Dots should reach more of Europe within weeks
Personal Pro accounts in the EEA, Switzerland and the UK remain locked out, while some business accounts already have access.
38
AfD breach exposes 345,000 email addresses and messages
Have I Been Pwned added the September leak on October 27 as a sensitive breach, so only verified owners can search it.
72
FBI seizes Virtualine bulletproof hosting domain
Prosecutors say the host ignored abuse notices, offered to move infrastructure after law-enforcement requests, and took unhosted Bitcoin payments.
62
FBI seizes Virtualine bulletproof hosting domain
A court authorized seizure of virtualine.net; prosecutors allege it kept serving a forum after child-abuse complaints and have not charged operators.
58
FBI seizes Virtualine bulletproof hosting domain in Operation Omegaline
German, Dutch and UK agencies assisted; the operator said it could rebrand and resume within about a day.
62
ESET reviews a week of PHP, kernel, and LiteLLM incidents
PHP fixes shipped October 21; nine firms, including ESET, told NBC News they had seen no successful PHP2Shell attacks.
58
Nefilim and Hive ransomware affiliate sentenced to 70 months
Artem Stryzhak pleaded guilty after attacks on hospitals and large firms; an alleged accomplice remains at large.
58
Buyer’s guide rates 12 confidential computing options for 2026
The roundup contrasts Intel SGX/TDX and AMD SEV-SNP with cloud, EU, and web3 offerings, without new vulnerabilities.
18
FBI seizes Virtualine domain over alleged criminal hosting
Prosecutors say the host kept a forum online after child-exploitation notices and took unhosted bitcoin.
70
Nefilim and Hive affiliate Artem Stryzhak sentenced to 70 months
He pleaded guilty after extradition from Spain for attacks from 2018 through 2021; prosecutors still seek co-conspirator Volodymyr Tymoshchuk.
46
FBI says SafePay breached 600-plus organizations since 2024
US, German and UK agencies say the gang guesses passwords, phishes and exploits known flaws.
78
AfD email-host breach exposed 345,000 addresses, HIBP says
Have I Been Pwned confirmed the scale after the party disclosed a September attack on its hosting firm, Alternita.
74
HqcLethe streams HQC encapsulation for stateless post-quantum handshakes
Chinese-remainder splitting keeps each Raspberry Pi worker in fixed memory and is checked in Rocq and ProVerif.
46
Stolen login tokens used to hijack Microsoft 365 accounts at 79 organizations
Huntress counted 497 successful sign-ins and more than 200,000 failures from July 14 to September 22, 2026.
74
Caseway CEO says expansion is shifting to Taiwan and Europe
The founder says a September 8 US directive halted new American sales while two existing US customers remain.
28
AfD confirms breach after hacker publishes 281 GB mail archive
The torrent is said to hold 421,179 emails and over 100,000 files, with messages dated through September 12, 2026.
70
Stolen Microsoft 365 sessions replayed at 79 organizations
Huntress counted 497 successful sign-ins and over 200,000 failures from July 14 to September 22, with inbox rules hiding mail.
76
PHP2Shell takes 32 UK government services offline
AWS says the two critical PHP bugs were exploited four days before disclosure; no public-sector compromise is confirmed.
88
M365 token spray and replay campaign hits 79 organizations
Huntress saw 497 successful sign-ins and more than 200,000 failed attempts from July 14 to September 22, 2026.
74
Paper reassesses structural attack claims against Classic McEliece
Conditional recovery estimates fall well below targets for larger sets, but the authors say no attack is demonstrated.
52
RUGGEDCOM CROSSBOW before 6.0 allows SQL injection and credential theft
Authenticated attackers can run SQL, steal admin credentials, or change configuration; Siemens says to update to V6.0 or later.
62
RUGGEDCOM CROSSBOW SAC before 6.0 includes vulnerable SQLite code
Five SQLite flaws can yield code execution, denial of service, or information disclosure; the product fix is V6.0 or later.
60
Microsoft security chief says sovereignty is a speed and risk choice
Halbheer says boards buy a location and assurance, while identity abuse and detection speed decide real control.
28
European public bodies adopt NVIDIA open models under local control
Work covers the Commission, Poland, the UK, Germany and France, including imaging, personas and a classified cloud plan.
38
Researchers turn permissive IPv6 tunnels into pulsing denial-of-service lines
Forty-four scans found 1,909,440 forwarding tunnel hosts; a controlled test peaked above 180 times the average send rate inside 20 ms.
52
Notebook counts 421,178 messages in AfD email leak
The hexane archive also holds WordPress databases for afd.de and about 140 other party sites.
64
Rapid7: high-severity flaws exploited within three days in Q3
The Gentlemen and Qilin led claimed ransomware incidents, the US accounted for 60% of attacks, and AI was operational in 8%.
56
Sites go offline as two critical PHP bugs draw early attacks
Fixes are out only for PHP 8.2 and newer; Cloudflare and watchTowr report emerging attacks dubbed PHP2Shell.
90
CISA says SafePay hit at least 600 critical infrastructure organizations
A US, German and UK advisory says the group, active since August 2024, uses double extortion across four regions.
86
NVIDIA partners expand European cloud capacity for sovereign AI
Nscale says DSX MaxLPS ran 37% more GPUs and nearly 50% more inference throughput on GB300 NVL72 within the same power budget.
38
FBI says SafePay breached more than 600 organizations since 2024
U.S., German, and U.K. agencies say the gang guesses passwords, phishes, and exploits listed flaws.
78
Royal Render 9.1.26b job port runs shells on workers
Default-unauthenticated submissions on rrServer TCP 7773 execute as the worker identity, measured as root.
58
Google Cloud London outage disrupts Revolut payments and ATM withdrawals
Revolut says customer money and data are safe; Google was still investigating europe-west2.
52
Midnight Mimosa malware ships in Android phone firmware
A platform-signed system app installs ad-fraud plugins after briefly disabling the Play Store; proxy use was not seen.
70
CISA, FBI detail SafePay ransomware hitting 600+ victims since 2024
Agencies say SafePay uses stolen or guessed passwords, phishing, and five known edge-device flaws, then encrypts files for crypto payment.
78
AfD confirms hosting hack as archive posts 421,179 email summaries
hexane.cc publishes AI summaries rather than messages, and none has been matched to a verifiable original email.
64
Related CVEs
by mentions- CVE-2026-593103%9.8Unauthenticated Path Traversal RCE in Broadcom VMware vCenter Server Syslog
- CVE-2024-4076618%9.8Improper Access Control in SonicWall SonicOS Management (Gen 5/6/7 Firewalls)
- CVE-2024-4071190%9.8Unauthenticated Deserialization RCE in Veeam Backup & Replication
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2023-2026927%9.1Unauthenticated Brute-Force VPN Access in Cisco ASA and Firepower Threat Defense
- CVE-2023-2753281%7.5Missing Authentication in Veeam Backup & Replication Exposes Stored Credentials
- CVE-2020-325972%7.5Unauthenticated Memory-Disclosure Flaw in Cisco ASA and FTD Web Services
- CVE-2026-68820<1%7.0Use-After-Free Local Privilege Escalation in Microsoft Windows WinSock AFD Driver
- CVE-2026-62911<1%8.0Capture-Replay Authentication Bypass in Microsoft Exchange Server
Appears with
- Microsoftvendor · 27
- FBIorganization · 24
- CISAorganization · 23
- Googlevendor · 19
- OpenAIvendor · 15
- OpenAIorganization · 11
- Siemensvendor · 11
- Hugging Faceorganization · 11
- Nvidiavendor · 11
- BSIorganization · 9
- Androidproduct · 9
- Qilinthreat actor · 9
- Rhysidathreat actor · 8
- Bitdefenderorganization · 8
- Midnight Mimosamalware · 8
- Europolorganization · 7
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.