
Empire Market co-founder Raheim Hamilton ordered to forfeit $100m in assets
The operator of a major dark web marketplace faces four decades in prison and a multimillion-dollar fine for facilitating illicit trade.
Cyber Attacks coverage from AppSec Scoop holds 14 articles, 11 of them reference guides. The newest was published on October 12, 2026. New stories are added as soon as they are confirmed, from more than 150 sources checked as often as every 45 seconds. Each story lists its sources. Primary sources we follow for this section include UK National Cyber Security Centre and OWASP Foundation.

The operator of a major dark web marketplace faces four decades in prison and a multimillion-dollar fine for facilitating illicit trade.

A replay attack reuses valid data transmissions to gain unauthorised access, bypassing authentication without breaking encryption or guessing secrets.

Most attachment attacks fail at the final stage because modern operating systems block script execution by default, forcing attackers to rely on user error.

Attackers compromise trusted community sites to infect visitors, bypassing perimeter defences by exploiting implicit trust in known domains.

Default security settings often leave execution paths open, requiring manual policy adjustments to block unsigned scripts and lateral movement tools.

Attackers replace broad spam with careful research to make fraud look like a routine request from someone you know.

Small firms often miss lateral movement because they monitor perimeter traffic but ignore internal network chatter between standard office devices.

Typosquatting succeeds because human memory for exact spellings is imperfect, turning a simple keystroke error into a persistent supply chain or credential theft vector that bypasses standard perimeter defences.

Authority overrides scrutiny, allowing attackers to manipulate payment processes without technical exploits.

Attackers use voice calls to bypass email filters, forcing staff to validate fraud through direct human interaction rather than digital analysis.

Most financial damage occurs in the first hour. You must isolate the compromised account before any funds leave the organisation, as speed outweighs perfect forensic detail.

Simulating a breach exposes communication gaps that technical controls cannot fix, saving money by preventing operational paralysis during a real incident.

OpenAI identifies a Politology-linked operation as its most far-reaching disruption, citing targets that include educational institutions and foreign diplomats.

Department of Justice alleges executive secretly paid hackers while overcharging victims, undermining trust in incident response services.