The United States Department of Justice (DOJ) has unsealed a 14-count superseding indictment charging 17 members of the Mabna Institute, an Iran-based company alleged to have run a decade-long campaign of computer intrusions on behalf of the Islamic Revolutionary Guard Corps (IRGC) and other Iranian government and university clients. Nine of the defendants were named in an earlier 2018 indictment; eight are newly charged. The case sits before the US District Court for the Sou

Connor Riley Moucka, 26, of Kitchener, Ontario, pleaded guilty on 5 August 2026 to a computer hacking conspiracy that compromised more than 165 victim organisations and resulted in the theft of billions of sensitive customer records. According to court documents, Moucka and his co-conspirators used stolen login credentials between February and October 2024 to access cloud-hosted data belonging to customers of a US-based software-as-a-service company, exfiltrating terabytes of

The European Supervisory Authorities — the European Banking Authority (EBA), the European Insurance and Occupational Pensions Authority (EIOPA) and the European Securities and Markets Authority (ESMA), collectively the ESAs — published a joint statement on 31 July 2026 calling for a cross-sectoral, risk-based and consistent supervisory approach to the information and communication technology (ICT) risks arising from frontier artificial intelligence (AI) models. The statement

The Financial Crimes Enforcement Network (FinCEN) issued an alert on 24 July 2026 urging financial institutions to detect, prevent and report suspicious activity linked to organised fraud against student aid programmes administered by the US Federal government. The alert, FIN-2026-Alert004, sets out two principal typologies and a set of transactional indicators drawn from Bank Secrecy Act (BSA) reporting. The first typology concerns so-called "ghost students". Fraud rings obt

On 15 May 2026, the Financial Conduct Authority (FCA), the Bank of England (BoE) and His Majesty's Treasury (HMT) published a joint statement setting out their expectations for how regulated firms and financial market infrastructures (FMIs) should respond to the escalating cyber risks posed by frontier artificial intelligence (AI) models. The authorities warn that the cyber capabilities of current frontier AI models are already exceeding what a skilled practitioner could achi

A United States cybersecurity professional has pleaded guilty to participating in a ransomware conspiracy, in a case that underscores the growing threat of insider risk within the cyber incident response ecosystem. The Department of Justice confirmed that Angelo Martino, a former ransomware negotiator, conspired with BlackCat ALPHV operators to both facilitate and execute attacks against U.S. organisations in 2023. According to court filings, Martino exploited his position at

FinCEN’s Rapid Response Programme has now helped interdict more than $1.8 billion in stolen funds for US victims of cyber-enabled fraud, underlining the growing importance of rapid cross-border financial intelligence sharing in tackling digital crime. According to FinCEN, more than $268 million has been interdicted since President Trump resumed office. The programme works by enabling FinCEN to share financial intelligence quickly with foreign financial intelligence units and

The Department of Justice has sentenced two US nationals for facilitating a fraudulent remote IT worker scheme that generated more than $5 million in illicit revenue for the Democratic People’s Republic of Korea, underlining the growing national security risk posed by DPRK cyber-enabled revenue operations. Kejia Wang, 42, of Edison, New Jersey, was sentenced to 108 months in prison, while Zhenxing Wang, 39, of New Brunswick, New Jersey, received a 92-month sentence. Both men

The US Department of Justice (DOJ) has intensified its response to state-backed cybercrime with a court-authorised operation targeting a DNS hijacking network linked to Russia’s GRU. Announced on 7 April 2026, the action focused on dismantling infrastructure used by APT28, a well-known cyber espionage group, which had compromised thousands of routers to conduct large-scale credential harvesting and surveillance activity. The operation highlights a critical evolution in cyberc

The US Department of Justice has secured an 81 month prison sentence against Russian national Aleksei Volkov for his role in a cybercrime operation that enabled ransomware groups to extort tens of millions of dollars from corporate victims. The case is significant because it targets not only the operators of ransomware campaigns, but also the specialist actors who help make those attacks possible in the first place. According to the Department of Justice, Volkov acted as an i

Authorities in the United States and across Europe have dismantled LeakBase, one of the world’s largest online forums used by cybercriminals to trade stolen data, account credentials and hacking tools. The takedown followed a coordinated operation involving law enforcement agencies from 14 countries and represents another significant disruption of the global cybercrime ecosystem. According to the Department of Justice (DoJ), LeakBase operated as a major hub for cybercriminal

The sentencing of Daren Li to the statutory maximum of 20 years’ imprisonment marks a significant escalation in the United States’ crackdown on global cryptocurrency investment fraud and associated money laundering networks. The case underscores the scale, sophistication and transnational reach of scam centre operations operating from Southeast Asia, particularly Cambodia, and highlights the growing convergence between romance fraud, cyber-enabled deception and crypto asset l