cyberattacks Archives

AppWizard

July 16, 2026

Grand Theft Auto 6 leaker who was given an indefinite sentence in 2023 because he wouldn’t stop hacking is now out of hospital and awaiting retrial

Arion Kurtaj, previously involved in high-profile cyberattacks as part of the hacking group Lapsus$, has been transferred from a secure hospital facility to a standard prison while awaiting retrial. At 18, he was found liable by a UK court for cyber intrusions targeting major corporations, notably leaking 90 videos of Grand Theft Auto 6 in 2022. Initially held under police protection with limited technology access, he was sentenced to a secure hospital pending a medical assessment. This assessment has concluded, allowing his transfer to prison. Kurtaj's retrial is scheduled for November, coinciding with the launch of Grand Theft Auto 6.

Winsage

July 16, 2026

Nightmare Eclipse Drops ‘LegacyHive’ Windows Zero-Day

A security researcher known as Nightmare Eclipse has revealed a new unpatched vulnerability in Windows, named LegacyHive, which is a local privilege escalation flaw in the Windows User Profile Service. This vulnerability allows attackers to access and load user hives of other accounts, including administrators. Nightmare Eclipse has provided proof-of-concept exploit code that works on systems with Microsoft's July 2026 patches. The exploit initially did not require user credentials but now necessitates them for accessing other hives. Nightmare Eclipse has previously disclosed over half a dozen zero-day vulnerabilities affecting Microsoft products. Microsoft has not yet acknowledged the LegacyHive exploit.

AppWizard

July 14, 2026

Steam, Minecraft and Dota 2 simultaneously “went down” worldwide

Users globally are experiencing significant disruptions in the Steam service, with 46% facing server connection issues, 29% having login problems, and 14% encountering difficulties with downloading and updating games. Similar disruptions are reported in Minecraft and Dota 2. Additionally, the European Union has blacklisted members of a Russian intelligence group involved in espionage and cyberattacks against the EU and Ukraine since 2010.

Tech Optimizer

July 13, 2026

Best antivirus software for 2026, tested and reviewed by an expert

The digital landscape is increasingly threatened by scams and cyberattacks, necessitating robust antivirus solutions for various devices. Modern antivirus software has evolved into comprehensive security suites that include features like VPNs, email protection, and dark web monitoring. Users must balance feature richness with system performance, as costs can vary significantly after initial promotional rates. The best antivirus software includes: - Bitdefender Premium: Rated 4.5/5, priced from £49.99 per year, known for strong performance and a comprehensive feature set but limited to a single device for the free version. - Surfshark One: Rated 4/5, priced from £1.99 per month, recognized for its user-friendly interface but lacking some central features. - Norton 360 Deluxe: Rated 4/5, priced from £29.99 per year, praised for excellent performance and light system impact, though its interface is less polished. - Avira Free Security: Rated 3/5, free option available, offers basic protection but prompts users to upgrade frequently. - Avast One: Rated 4/5, free option available, features a modular design but includes persistent upgrade prompts. Each antivirus package provides solid protection against cyber threats, with many offering free trials for evaluation.

AppWizard

July 13, 2026

EU Sanctions VK for Developing Messenger App Max

The European Union has imposed sanctions on Russian tech giant VK and its subsidiary, Communication Platform LLC, due to their involvement in the development of the Kremlin-backed messaging app, Max. The development of Max was overseen by the Federal Security Service (FSB), and it has been criticized for its surveillance capabilities. These sanctions are part of a broader strategy by the EU and the UK to target entities linked to Russian cyberattacks. The EU and UK also announced additional sanctions against individuals and entities involved in Russian cyber operations, including targeting leaders of Russia's GRU military intelligence and individuals linked to the FSB’s Center 16. Apple removed VK platforms and the Max app from its App Store last month, citing compliance with sanctions. The EU plans to introduce its 21st package of sanctions against Russia soon.

AppWizard

July 13, 2026

EU Imposes Sanctions on Tech Giant VK and State-Backed MAX Messaging App

The European Union has sanctioned VK, the Russian technology firm behind VKontakte and its subsidiary MAX, due to their involvement in cyber activities and providing personal data to Russian authorities against dissenters. These sanctions were formalized on July 13 and align with a broader effort involving the UK, targeting individuals and entities linked to Russia's cyber operations. The MAX application is developed under the oversight of Russia's Federal Security Service (FSB). Additionally, Apple's removal of VK applications from its App Store has prompted a response from the Kremlin, with government spokesperson Dmitry Peskov indicating a need for clarification from Apple on this decision.

Winsage

July 13, 2026

Microsoft expands AI-powered Windows security

AI-driven security tools are enhancing Microsoft's ability to detect vulnerabilities earlier, improving the speed of Windows security responses. Microsoft is integrating AI into its Windows security strategy to expedite the discovery, analysis, and remediation of vulnerabilities in its software development process. This integration allows security teams to identify potential issues more quickly across large codebases, reducing the time between vulnerability identification and protective measures implementation. The updated strategy combines AI-powered security analysis tools with advanced multi-model agentic scanning systems to detect, validate, and prioritize high-confidence risks. Microsoft is also incorporating AI into engineering workflows to assist developers in investigating issues, recommending fixes, and enhancing testing, while ensuring human oversight. The company is investing in automated patching, vulnerability management, and deployment tools to facilitate efficient application of security updates. This approach reflects a shift towards continuous, AI-assisted security engineering, moving away from traditional periodic security updates.

Winsage

July 10, 2026

Microsoft goes all in on new AI-powered Windows security strategy – what it means for you

Microsoft is integrating artificial intelligence into its vulnerability management processes to enhance cybersecurity, particularly for its Windows operating system used by over 1.5 billion devices. The company is implementing an automated, AI-driven approach to identify vulnerabilities earlier in the development cycle, allowing for quicker fixes. Microsoft has developed a cloud-based scanning system called MDASH, which has identified 16 vulnerabilities since its introduction, four of which were critical and promptly patched. AI tools are being embedded earlier in the software development lifecycle, and Microsoft is updating its Secure Development Lifecycle best practices to address potential AI-enabled attack techniques. The shift towards an AI-enhanced system will lead to an increase in the volume of security updates, requiring enterprise administrators to adopt more agile approaches to testing and deploying updates. Microsoft has introduced a feature called Known Issue Rollback (KIR) to help admins revert problematic changes. The company emphasizes the importance of human oversight in evaluating AI findings and making informed decisions.

Winsage

July 10, 2026

Microsoft Warns of GigaWiper Backdoor Built to Destroy Windows PCs

Microsoft has unveiled a destructive Windows backdoor named GigaWiper, which allows operators remote control over compromised systems to execute irreversible damage. GigaWiper originated from cyberattacks in October 2025 and is a composite of code from at least three malware families. It maintains its presence through a scheduled task disguised as “OneDrive Update,” executing at startup and every minute. GigaWiper can obliterate partition information, overwrite physical drives, and restart systems. It also mimics ransomware by encrypting files with the .candy extension, using randomly generated keys that are not stored, making recovery impossible. The malware has connections to the Crucio ransomware and resembles FlockWiper, with rewritten code in Go. GigaWiper features 20 command codes for various functions, including executing PowerShell instructions, managing processes, capturing screenshots, and remote access similar to VNC. It can remain on a system for surveillance until its destructive functions are activated. Microsoft Defender includes detection capabilities for GigaWiper, and users are advised to enable tamper protection and monitor for suspicious activities.

Tech Optimizer

July 6, 2026

Why Antivirus Alone No Longer Protects Small Businesses

Many small businesses have historically relied on antivirus software for computer security, which was effective against identifiable malware. However, the current cyber threat landscape includes sophisticated attacks such as phishing, credential theft, and ransomware that traditional antivirus solutions may not adequately address. Factors driving increased cyber threats in Kenya include phishing, weak authentication practices, delayed software updates, and the use of artificial intelligence by malicious actors. While antivirus software can detect known malware and block common threats, it falls short against tactics like stolen credentials and social engineering. The Communications Authority recommends complementing antivirus with multi-factor authentication, regular software updates, secure configurations, and user training. Endpoint Detection and Response (EDR) solutions enhance visibility into attacks by monitoring endpoint activity for suspicious behaviors, allowing for prompt investigation and response. A layered security strategy that integrates multiple protective measures is essential for effective cybersecurity, and many modern security platforms offer unified solutions to simplify management for smaller organizations. The Kaspersky SMB Cybersecurity Guide provides insights into modern attack methods and the role of endpoint protection in improving a business's cybersecurity posture.