Search: “platforms”

5 stories in the last 24h

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Threat actor 15 AI industry 12 Industry 10 Policy & legal 9 Exploit / PoC 7 Malware 6 AI safety & security 6 Vulnerability 5 Phishing & fraud 5 Advisory 4 AI research 3 AI policy 3 Data breach 3 Ransomware 1

SeverityAll critical 7 high 22 medium 23 low 2 info 38

US takes down NightmareStresser DDoS-for-hire platform

FBI seized NightmareStresser, a DDoS-for-hire platform with 566,000 users and servers capable of 200 Gbps attacks, under Operation PowerOFF.

US law enforcement seized the nightmare-stresser[.]com and nightmarestresser[.]org domains used by the DDoS-for-hire service. Searchlight Cyber reported in 2023 that NightmareStresser had over 566,000 registered users and 52 dedicated servers launching attacks of up to 200 Gbps against Layer 4 and Layer 7 targets. The FBI said the service was used for hundreds of thousands of actual or attempted DDoS attacks since 2022. The action continues Operation PowerOFF, which began in December 2018 and previously took down DigitalStress, Dstat.cc and dozens of booter domains.

BleepingComputerupdated 13:37 UTC · 22m agofirst 11:33 UTC · 2h agoPolicy & legal 5 sources

Ofcom discovers issuing Online Safety Act fines is easier than collecting them

Ofcom says most Online Safety Act fines totaling over £7 million remain unpaid as platforms structure businesses to evade collection.

Ofcom director of enforcement Suzanne Cater told the House of Lords that the majority of fines issued under the UK Online Safety Act remain uncollected despite over £7 million in penalties on 11 providers. The regulator's largest fine was £1.4 million against 8579 LLC in February. Ofcom is running six enforcement programs and 40 formal investigations covering more than 100 services, including Telegram, TikTok and X, and is working with the UK government to strengthen its enforcement powers.

The Register · Security10:08 UTC · 3h agoPolicy & legal

Three Ukrainians to face charges for alleged hack of 610,000 Roblox accounts

Ukrainian prosecutors charged three men for stealing session tokens from over 610,000 Roblox accounts and selling them for an estimated $480,000.

Prosecutors in Ukraine's Lviv region said a 19-year-old organizer from Drohobych and two 22-year-old associates operated from May 2025 to April 2026, harvesting Roblox session tokens via infostealer malware disguised as game cheats and bonus software. They used software to validate stolen cookies and inventory virtual currency and rare items, then sold accounts via Russian platforms for as little as $0.80 each, advertising through Telegram channels and receiving crypto payments. All three are in custody facing charges of theft, money laundering, unauthorized computer interference, and illegal sale of restricted information, carrying up to 12 years in prison.

The RecordSep 16, 14:30 UTC · 23h agoPolicy & legal in the wild

Why APAC Enterprises Need Real-Time Threat Intelligence as Singapore, Malaysia, and Thailand Tighten Cyber Compliance in 2026

Singapore, Malaysia, and Thailand all tightened cyber compliance in 2026, mandating continuous monitoring and rapid incident reporting for critical infrastructure.

Singapore's CSA issued the Cybersecurity Code of Practice 2026 for Critical Information Infrastructure on 29 July 2026, adding board cyber-resilience duties, annual training, and controls on Interconnected Systems, with most obligations effective by 29 July 2027. Malaysia's Cyber Security Act 2024 requires NACSA-licensed providers, audits, and fast incident notification, with fines up to RM500,000 and up to ten years' imprisonment. Thailand's NCSA cloud security standard has been enforced since 10 September 2026, with a Website Security Standard effective 16 September 2026. The vendor article argues detection speed has become a compliance metric driving demand for real-time threat intelligence.

Cyble09:57 UTC · 4h agoPolicy & legal

LinkedIn fights for the right to tell customers when the feds want their data

Microsoft's chief legal officer argues federal subpoenas for LinkedIn user data should carry narrower scope and that secrecy orders must become the exception.

Microsoft chief legal officer Jon Palmer said federal courts and Congress must curb overly broad US government subpoenas for LinkedIn user data that arrive with secrecy orders preventing customer notification. The company is asking courts to enforce meaningful limits on demand scope and secrecy, invoking Fourth and First Amendment arguments. Palmer cited House legislation passed August 31 to rein in secret surveillance, while LinkedIn simultaneously faces user privacy lawsuits, one dismissed with leave to amend by Judge Vince Chhabria.

CSO OnlineSep 16, 19:50 UTC · 18h agoPolicy & legal