• Forcepoint’s X-Labs reports an 11-step DHL phishing scam that uses fake OTP codes and EmailJS to harvest user credentials and device telemetry.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Crypto Custody Concentration hits $152.9B as institutions shift to derivatives, consolidating capital on top exchanges amid Q1 market slowdown.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • As the Navy celebrates the first flight of its unmanned robot refueler, the service’s latest budget documents show the aircraft won’t be operational until at least 2029—another delay for the troubled program.

    The MQ-25 A Stingray was originally supposed to reach initial operating capability, or IOC, by 2024. That was pushed to 2026, and then slipped to 2027. And Navy budget documents released this week show that the initial aircraft is now scheduled to be operational roughly five years past the original deadline.

    “The latest projection for MQ-25 IOC is February 2029, and the program continues to look for opportunities to mitigate additional schedule risk,” according to Navy budget documents. The service did not immediately comment on the delays. 

    A production model of the Boeing-made MQ-25A Stingray flew for the first time on Saturday, the company said in a news release this week. The autonomous robot refueler taxied, took off, landed, and responded to multiple commands during the two-hour demonstration. It's one of four Engineering Development Model aircraft being built for the Navy, with the goal of taking refueling missions off the plate of F/A-18 Super Hornets in future fights. A company spokesperson deferred comment on the delays to the Navy.

    The MQ-25 program of record calls for 76 aircraft. Four of them are engineering development models and five are System Demonstration Test Articles, according to the Navy’s budget. In 2027, the service is requesting $771 million to buy three of the drone refuelers.

    A test version of the MQ-25 prototype had its first flight in 2019 and has since refueled an F/A-18 Super Hornet, E-2D Hawkeye and F-35C Lightning II, according to the company’s website. 

    The Defense Department’s internal reports have highlighted the yearslong issues with the program, including COVID-19 impacts on Boeing suppliers, aircraft design woes, and quality issues with the aircraft.

    Rear Adm. Tony Rossi, the Navy’s program executive officer for unmanned aviation and strike weapons, called the milestone a “landmark achievement” in a Monday press release.

    “This flight demonstrates our progress in delivering a carrier-based refueling capability that will significantly extend the reach and lethality of our fleet,” Rossi said in the release. 

    Last week, Boeing CEO Kelly Ortberg teased the first flight during the company’s first quarter earnings call, and said he didn’t expect any additional program cost adjustments.

    “We are now one step closer to providing this first-of-its-kind capability to further enable the U.S. to project power worldwide,” Ortberg said. “Overall, I'm pleased with the progress our [defense] development programs are making, and there are no major [estimate at completion] adjustments.”

    Boeing and the Navy are conducting additional flight tests in Illinois at MidAmerica St. Louis Airport, with plans to move demonstrations to Maryland’s Naval Air Station Patuxent River for carrier qualifications, the company said in its news release.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Marine Corps is halfway through a decade-long project to re-imagine itself for the next generation of warfare, refocusing itself as a seagoing service with Force Design 2030

    But the Marines aren’t leaving land warfare behind, and will release an updated approach to ground combat in the coming weeks, Col. Erick Clark, director of future operations and plans, said Tuesday during the Modern Day Marine conference in Washington, D.C.

    Ground Combat Element 2040 follows the service’s latest aviation plan, released in February. 

    The framework will “make sure that we are staying focused on the ground combat element, to make sure that beyond some of the capabilities that were rolled out in Force Design, specifically focused on our Marine littoral regiments and other capabilities that would enhance the [Marine Air-Ground Task Force], we wanted to make sure that we were not losing track of our core capabilities to conduct offensive, defensive, and expeditionary operations within the ground combat element,” said Maj. Gen. Kyle Ellison, who commands 3rd Marine Division, said during a panel previewing the new plan.

    Experts and recent national defense strategies have identified China as the U.S.’s most likely future opponent, though the Trump administration’s most recent doctrine seeks to cocoon the U.S. in the Western Hemisphere.

    “When you envision the type of fight we're preparing for, where we face a peer or near-peer adversary in a high-end fight, where all domains are contested—and then in some, the adversary will have an advantage—that's not a battlefield we have fought on, at least since I've been in the Marine Corps,” said Maj. Gen. Farrell Sullivan, who commands 2nd Marine Division.

    While Force Design 2030 has been all about evolving the Corps past the Global War on Terror, the war in Ukraine has provided concrete lessons for what combat may look like in the next U.S. ground war.

    “I don't want to have a bias toward that conflict and say that the future will look exactly like that, because it won't, but we would be criminal not to be paying attention to that,” Sullivan said. 

    Like the other services, the Marine Corps is seeking to quickly build up its counter-unmanned systems capabilities, anticipating that any conflict is going to include a heavy dose of drone warfare. 

    “Ground-based air defense at echelon is something that we are very much focused on, based off of the UAS threat right now that you're seeing on the modern day battlefield,” said Maj. Gen. Jason Morris, who directs the operations division at Marine Corps headquarters. “And while Force Design did field a number of systems…there is still a shortfall for maneuver coverage at the [ground combat and logistics] level, and so we are taking action to field dismounted, organic counter-UAS kits to our lower level formations, infantry battalions, [combat logistics battalions], to bases and stations to make sure that we can handle the Group 1, Group 2 UAS threats.”

    The service is taking feedback from that effort to refine what those units need in counter-UAS systems, in an effort to speed up the acquisition of something closer to the best solution. 

    “This is a work in progress,” Morris said. “We're building a plane as we're flying it, but we can't wait on the standard acquisitions program timeline for things to be fielded in five to seven years, because things are changing on the battlefield so much and so quickly that we've got to be able to adapt, to adapt faster than that, in the weeks and months timeframe.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybersecurity researchers have disclosed details of a critical security vulnerability impacting GitHub.com and GitHub Enterprise Server that could allow an authenticated user to obtain remote code execution with a single “git push” command. The flaw, tracked as CVE-2026-3854 (CVSS score: 8.7), is a case of command injection that could allow an attacker with push access to a repository to achieve

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A cybercrime group of Brazilian origin has resurfaced after more than three years to orchestrate a campaign that targets Minecraft players with a new stealer called LofyStealer (aka GrabBot). “The malware disguises itself as a Minecraft hack called ‘Slinky,'” Brazil-based cybersecurity company ZenoX said in a technical report. “It uses the official game icon to induce voluntary execution,

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Security experts have found a high-severity flaw named Pack2TheRoot in PackageKit that allows hackers to gain full root access on multiple Linux distributions.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Threat hunters are warning that the cybercriminal operation known as VECT 2.0 acts more like a wiper than a ransomware due to a critical flaw in its encryption implementation across Windows, Linux, and ESXi variants that renders recovery impossible even for the threat actors. The fact that VECT’s locker permanently destroys large files rather than encrypting them means even victims who opt to

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Stablecoins are becoming the money layer for the always-on economy.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • This week in cybersecurity from the editors at Cybercrime Magazine

    Sausalito, Calif. – Apr. 28, 2026

    – Read the report

    Media outlets globally have been covering the 2026 CISO Report from Cybersecurity Ventures in collaboration with Sophos, and the main message is around the chief information security officer gap: There are 35,000 CISOs employed worldwide in 2026, and there are nearly 360 million businesses in operation.

    Joe Levy, CEO at Sophos, told the World Economic Forum that’s a 10,000:1 ratio and a massive challenge for global cybersecurity resilience. “Those are not good odds,” says Levy. “This is a market failure. We haven’t figured out how to address this gap. We have the potential to do that now.”

    The good news, according to an article in Forbes, is that an increasing number of organizations are utilizing virtual (remote) CISOs, also referred to as vCISOs, to address the expertise deficit without incurring the costs associated with hiring a full-time executive. “The challenge with the vCISO offerings in the market today is that human bandwidth doesn’t scale infinitely,” says Raja Patel, President, Product & Marketing at Sophos.

    Sophos views managed service providers (MSPs) and managed security service providers (MSSPs) as the force multiplier in security leadership. Just as managed detection and response (MDR) proved that security operations scale best through services, security leadership scales best through partners. Various industry estimates put the number of MSPs and MSSPs at tens of thousands globally.

    These service providers already sit at the intersection of technology, operations, and trust. Sophos is providing MSPs and MSSPs with its CISO Advantage to extend their role into governance, compliance, and risk management, services that are desperately needed by underserved small to midsized businesses (SMBs). “There’s an opportunity for us to create the next generation of MSPs and MSSPs through this hybrid model of humans and agents working together to be able to deal this strategy leadership to hundreds of millions of businesses that would otherwise not have access to it,” says Levy.

    Read the 2026 CISO Report



    Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:

    • SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
    • NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
    • HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
    • VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
    • M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
    • BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
    • PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
    • PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
    • RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.

    Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.

    The post CISO Gap: SMBs Exposed; MSSPs To The Rescue appeared first on Cybercrime Magazine.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶