Hackers arrested for hijacking and selling 610,000 Roblox accounts
2026-04-29T19:23:34Z•d7ebd44eaa2cf1e2b3ab84d4b01b4510adff3fcbe5211e911ac698ab7ca10db1
AnodotCISACVE-2026-3854CVE-2026-42208GitHubLiteLLMOAuth-supply-chainRCESQLiVECT-2.0VimeoWHMaccount-takeoverauth-bypasscPanelcrypto-frauddata-breachdata-wiperemergency-patchfraudlaw-enforcementransomwarerobloxvulnerability-exploitationwindows-zero-day
What happened
A batch of security incidents and law‑enforcement actions: Ukrainian police arrested three individuals who hijacked and sold ~610,000 Roblox accounts; Austrian and Albanian authorities dismantled a €50M crypto investment fraud ring. Multiple high‑impact vulnerabilities and breaches were reported: an emergency cPanel/WHM update fixes a critical authentication‑bypass bug (out-of-band patching urged), CISA ordered federal agencies to patch a Windows flaw actively exploited as a zero‑day, and GitHub patched a critical RCE (CVE-2026-3854) that could have exposed millions of private repositories. Ad
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- d7ebd44eaa2cf1e2b3ab84d4b01b4510adff3fcbe5211e911ac698ab7ca10db1
- Enrichment time
- 2026-04-29T19:23:34Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.