IN THE NEWS

A new Internet-of-Things (IoT) botnet called Kimwolf has spread to more than 2 million devices, forcing infected systems to participate in massive distributed denial-of-service (DDoS) attacks and to relay other malicious and abusive Internet traffic. Kimwolf’s ability to scan the local networks of compromised systems for other IoT devices to infect makes it a sobering threat to organizations, and new research reveals Kimwolf is surprisingly prevalent in government and corporate networks.

In cybersecurity, the line between a normal update and a serious incident keeps getting thinner. Systems that once felt reliable are now under pressure from constant change. New AI tools, connected devices, and automated systems quietly create more ways in, often faster than security teams can react. This week’s stories show how easily a small mistake or hidden service can turn into a real break-in.

Infoblox today announced updates to its Skilled to Secure Partner Program, including the introduction of an updated Service Provider track designed for Managed Security Service Providers (MSSPs) and Global System Integrators (GSIs). The changes introduce clearer program requirements, more flexible enablement options, and additional tools and benefits to support service delivery and partner growth.

Across the world, organisations are racing to adopt AI. It promises efficiencies, new capabilities, and, in the case of cybersecurity, a genuine breakthrough. AI can scan vast datasets in seconds, detect subtle anomalies, and help analysts respond to threats that now unfold at machine speed.

Two “pig butchering-as-a-service” (PBaaS) providers are detailed in a recent report by Infoblox, demonstrating how off-the-shelf kits, templates, panels and infrastructure facilitate global scams similarly to malware-as-a-service (MaaS) and phishing-as-a-service (PhaaS).

Cybersecurity researchers have shed light on two service providers that supply online criminal networks with the necessary tools and infrastructure to fuel the pig butchering-as-a-service (PBaaS) economy. At least since 2016, Chinese-speaking criminal groups have erected industrial-scale scam centers across Southeast Asia, creating special economic zones that are devoted to fraudulent investment and impersonation operations.

The past year was a landmark for AI proliferation, with sweeping implications for virtually every area of business and life. But with progress came peril. We saw cyberattacks explode in number and sophistication, outmaneuvering legacy security defenses to create record damage.

SAIPAN, Northern Mariana Islands — The beachfront casino built here by a Chinese mother-and-son duo a decade ago was billed as a $2 billion investment, a resort bigger than the Casino de Monte-Carlo in Monaco. The giant, gilded Imperial Palace would transform this tiny American island’s economy, the venture’s investors said.

Recently, I asked several cybersecurity experts, including my colleagues here at PCMag, for their predictions on online privacy and safety in 2026. After all, 2025 was tumultuous, with scammers infiltrating social media platforms, hackers utilizing AI to automate various crimes-as-a-service businesses, and ransomware attacks hitting companies throughout the year. While not exactly surprising, most of the responses were pretty negative, to say the least.

AI agents are a force multiplier but that force cuts both ways. Our Rubrik Zero Labs research found that 98% of Australian security leaders cite identity-driven attacks as their top concern. With 99% already integrating or planning to integrate AI into identity systems, the stakes have never been higher.