US Indicts 17 Iranians Over Years-Long Cyber Espionage Campaign

Security news covering Iranian cyber-espionage indictments, a criminal network abusing nearly 2,000 compromised WordPress sites, large-scale Dahua camera compromises, MacSync Stealer activity, exposure of more than 50,000 Stripe API keys, multiple vulnerabilities added to CISA’s Known Exploited Vulnerabilities catalog, a breach affecting 1.2 million Heights Finance customers, adversarial attacks against surveillance AI, and a critical unauthenticated GitLab GraphQL vulnerability. The most urgent items are actively exploited or critical vulnerabilities, particularly GitLab CVE-2026-19478 and KE