Search: “Windows Defender”

4 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 672 Ransomware 631 Vulnerability 554 Exploit / PoC 261 Threat actor 183 Data breach 106 Policy & legal 77 Industry 68 Phishing & fraud 60 AI safety & security 23 Advisory 21 Research 18 AI industry 9 Tools 8

SeverityAll critical 1128 high 859 medium 538 low 98 info 80

Ukrainian software developer faces 12 years in Swiss ransomware trial

Swiss prosecutors seek a 12-year sentence for a Ukrainian developer accused in LockerGoga, MegaCortex and Nefilim ransomware attacks causing roughly $160 million in losses.

A 52-year-old Ukrainian software developer went on trial at Zurich District Court over alleged involvement in ransomware attacks using LockerGoga, MegaCortex and Nefilim, with victims including Stadler Rail, Crealogix and Meier Tobler. Prosecutors allege he participated in attacks on 10 companies between December 2018 and May 2020, causing more than 130 million Swiss francs (~$160 million) in losses, and seek a 12-year sentence plus 1.8 million Swiss francs in proceeds. He denies developing malware, and his defense challenges digital evidence handling. The case ties to Oleksandr Ieremenko, who allegedly directed the attacks, was said to have FSB protection, and died falling from a Moscow window in 2022.

The RecordAug 18, 11:26 UTC · Aug 18, 2026Policy & legal in the wild1

Severity Is Not a Strategy: What CISA BOD 26-04 Means for the Future of Federal Software Security

CISA's BOD 26-04 replaces severity-based federal patching with risk-based remediation deadlines of 3, 14, or 60 days.

CISA's Binding Operational Directive 26-04, released June 10, 2026, replaces BOD 19-02 and BOD 22-01 for Federal Civilian Executive Branch agencies and shifts remediation prioritization from CVSS scores to risk context. Agencies assess four factors: public exposure, KEV listing, exploit automatability, and whether exploitation grants partial or total asset control, resulting in 3-, 14-, or 60-day remediation windows or next-upgrade fixes. In CISA's first review at a large civilian agency, only 1% of vulnerabilities required three-day remediation while over 60% could wait for future system upgrades. The directive also requires forensic analysis when exploitation is suspected, and Checkmarx argues the same risk-based logic must extend upstream into software development and SBOM-driven exposure management.

CheckmarxSep 9, 18:07 UTC · 7d agoPolicy & legal

Risky Bulletin: Russia starts blocking DoH and DoT

Russian users report blocks on DoH and DoT servers, including Cloudflare 1.1.1.1 and Google 8.8.8.8, in an apparent censorship crackdown.

Russian internet users began reporting failures connecting to DNS-over-HTTPS and DNS-over-TLS servers, suggesting a government crackdown on the two privacy protocols. The blocks reportedly cover Cloudflare's 1.1.1.1 and Google's 8.8.8.8 resolvers; Roskomnadzor has not officially confirmed the action. The agency tested a similar block in March on Beeline's network and had named DoH for blocking as early as 2021. The bulletin also briefly notes state-sponsored phishing of EU officials, a DDoS against Norway's Digdir, the ReliaQuest/ShinyHunters dispute, and older ransomware and breach disclosures.

Risky Business NewsAug 26, 03:07 UTC · 22d agoPolicy & legal1

Risky Bulletin: White House lets private companies carry out offensive cyber ops

A White House memo directs DHS to create a program letting vetted private companies conduct US-government-directed offensive cyber operations against cybercrime.

A presidential memo tasks the DHS National Coordination Center with building a program, under DOJ and DHS oversight, through which private-sector companies can conduct offensive cyber operations against large-scale cybercrime organizations. Requirements include secure facilities, vetted personnel, a $1 million escrow for damages, and written approvals co-signed by DHS and DOJ executive directors. The program must launch within 60 days, around October 11, expanding a March executive order targeting scam compounds, ransomware, and other large-scale cybercrime.

Risky Business NewsAug 14, 04:42 UTC · Aug 14, 2026Policy & legal