VulnHub

Real-time Cybersecurity News

Russia arrests suspected owner of LeakBase cybercrime forum

BleepingComputer

Overview

Russian authorities have arrested a resident of Taganrog, suspected to be the owner of LeakBase, a significant online forum where cybercriminals trade stolen data and hacking tools. This forum has been a key platform for illicit activities, facilitating the exchange of sensitive information among hackers. The arrest is part of a broader effort by law enforcement to combat cybercrime within Russia, which has been a major concern for global cybersecurity. The case raises questions about the extent of cybercrime in the region and the challenges in addressing it. The implications of this arrest may affect other cybercriminal operations and deter potential offenders from engaging in similar activities.

Key Takeaways

  • Affected Systems: LeakBase forum, stolen data, hacking tools
  • Timeline: Ongoing since October 2023

Original Article Summary

Russian police arrested a Taganrog resident believed to be the owner of LeakBase, a major online forum used by cybercriminals to buy and sell stolen data and hacking tools. [...]

Impact

LeakBase forum, stolen data, hacking tools

Exploitation Status

No active exploitation has been reported at this time. However, organizations should still apply patches promptly as proof-of-concept code may exist.

Timeline

Ongoing since October 2023

Remediation

Not specified

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Read Original Article

Related Coverage

‘SymJack’ Attack Turns AI Coding Agents Into Supply Chain Attack Delivery Systems

SecurityWeek

Researchers have discovered a new attack method called 'SymJack' that exploits AI coding agents. By using malicious repositories and deceptive symlinks, attackers can trick these AI systems into installing compromised servers under their control. This allows the attackers to steal sensitive information, disrupt continuous integration pipelines, and inject harmful code into software projects. The implications are significant, especially for companies relying on AI tools for software development, as it exposes them to supply chain attacks that can go unnoticed. Developers and organizations need to be vigilant about the sources of their code and the integrity of the tools they use.

May 27, 2026

GlassWorm Botnet Disrupted

SecurityWeek

Security firms have successfully disrupted the GlassWorm botnet by taking down all four command-and-control channels that the malware relied on. This operation is significant because botnets like GlassWorm can be used by attackers for various malicious activities, such as launching distributed denial-of-service (DDoS) attacks or spreading other malware. By dismantling these C&C channels, researchers have reduced the botnet's ability to control infected devices, which is a win for cybersecurity efforts. This disruption not only impacts the operators of the botnet but also protects potential victims from being exploited. As the threat landscape evolves, ongoing vigilance against such malware remains crucial for both individuals and organizations.

May 27, 2026

Dutch police arrests suspect linked to Ajax football club hack

BleepingComputer

Dutch police have arrested a 35-year-old man in connection with a cyberattack on Ajax Amsterdam, a prominent football club. The hack occurred earlier this year, although specific details about the nature of the attack and the data compromised have not been disclosed. This incident raises concerns about the security measures in place at sports organizations, especially as they handle sensitive information about players, fans, and operations. The arrest is part of ongoing efforts by law enforcement to address cybercrime targeting high-profile entities like sports clubs. As the investigation continues, it serves as a reminder for organizations to strengthen their cybersecurity practices to prevent similar incidents.

May 27, 2026

FBI: Hackers Sending Operatives in Person to Insert USB Drives and Steal Data

SecurityWeek

The FBI has issued a warning about a new tactic being employed by the Silent Ransom Group, which involves sending operatives to law firms to physically insert malicious USB drives into their systems. This method allows hackers to bypass traditional cybersecurity measures, making it easier to steal sensitive data. Law firms are particularly vulnerable due to the confidential information they handle. The FBI's alert emphasizes the importance of employee training and heightened awareness regarding suspicious devices in the workplace. Organizations should review their security protocols to mitigate the risk of such physical infiltration.

May 27, 2026

CISA Urges Immediate Patching of Exploited LiteSpeed cPanel Plugin Zero-Day

SecurityWeek

A recently discovered zero-day vulnerability in the LiteSpeed cPanel plugin has been exploited by attackers to execute scripts with root privileges. This security flaw poses a significant risk to users of LiteSpeed's web server and cPanel, particularly those who have not yet applied the necessary patches. The Cybersecurity and Infrastructure Security Agency (CISA) has urged immediate action to patch this vulnerability, which had been actively exploited before it was resolved last week. Failure to address this issue could leave systems vulnerable to further attacks, potentially compromising sensitive data and system integrity. Users are strongly advised to prioritize updates to safeguard their environments.

May 27, 2026

Cybercriminals increasingly use AI for deepfake-based KYC bypass, report finds

SCM feed for Latest

According to new research from Flashpoint, cybercriminals are increasingly using artificial intelligence to create deepfake technology that can bypass Know Your Customer (KYC) processes. Rather than inventing new AI tools, these threat actors are honing existing technologies to make their attacks more effective. This trend poses a significant risk to financial institutions and companies that rely on KYC protocols to verify customer identities. As deepfakes become more sophisticated, organizations may struggle to differentiate between real and fake identities, leading to potential fraud and security breaches. The report indicates that as these tactics evolve, companies must enhance their verification processes to combat this growing threat.

May 26, 2026