April 2026
129 posts. Browse all months
- Polymarket Says Alleged Hack Is Just Public Data Not a Breach
Polymarket has denied claims of a data breach, stating that the 300,000+ user records alleged to be stolen are publicly accessible via APIs and the blockchain, …
- [Exclusive] Ddarungi Data Leak: Insurance Coverage Limited to Only 10 Million Won… “Expansion Under Review” - The Asia Business Daily
The Seoul Facilities Corporation, responsible for the Ddarungi public bicycle service, has a personal information liability insurance coverage limit of only 10 …
- Vimeo Confirms User and Customer Data Breach - SecurityWeek
Video hosting platform Vimeo has confirmed a data breach affecting user and customer information, stolen via a third-party vendor attack on the Anodot …
- PyPI package with 1.1M monthly downloads hacked to push infostealer
The popular PyPI package elementary-data, with over 1.1 million monthly downloads, was compromised by an attacker who pushed a malicious version (0.23.3) to …
- Iran-linked hackers leak data of 2K+ US soldiers - Shafaq News
Article claims The Iran-linked hacking group Handala has leaked the personal data of over 2,300 US Marines deployed in the Middle East, claiming to possess …
- CheckMarx admits it was hit by major cyberattack that saw data leaked onto Dark Web | TechRadar
Checkmarx has confirmed a data breach originating from its GitHub repository, which was accessed through a supply chain attack on Trivy. Threat actors claimed …
- Chinese engineer stole US military and NASA software for years | Malwarebytes
A Chinese aerospace engineer, Song Wu, is wanted by the FBI for allegedly impersonating US researchers via email for four years to steal sensitive military and …
- Securing RAG pipelines in enterprise SaaS | CSO Online
This article addresses the significant security liabilities introduced by Retrieval-Augmented Generation (RAG) pipelines in enterprise SaaS, where connecting …
- Microsoft’s AI Agent Role Had a Scoping Bug
Microsoft’s Entra Agent Identity Platform had a scoping bug in its Agent ID Administrator role, allowing users with this role to take over any service …
- Everything you need to know about the GitHub Copilot pricing changes | IT Pro
GitHub is changing its Copilot pricing model from premium request units (PRUs) to GitHub AI Credits on June 1st, aiming to better align costs with usage as new …
- Compromised open source package pushed malicious Elementary CLI release to developers | IT Pro
A recent release of the Elementary Python CLI tool (version 0.23.3) was compromised with malicious code, potentially exposing sensitive developer data like SSH …
- Germany Suspects Russia Is Behind Signal Phishing That Targeted Top Officials - SecurityWeek
Germany suspects Russia is behind phishing attacks targeting high-ranking officials, military personnel, and journalists on the Signal app. The investigation, …
- New Sandworm Tradecraft Uses SSH-over-Tor Tunnel for Long-Term Hidden Persistence
The Sandworm threat group is employing a new SSH-over-Tor tunnel technique for long-term hidden persistence in targeted cyberattacks. This advanced method uses …
- UNC6692 Uses Email Bombing, Social Engineering to Deploy ‘Snow’ Malware - SecurityWeek
A threat actor known as UNC6692 is employing email bombing and social engineering tactics, impersonating IT support to trick victims into executing malicious …
- Firefox bug CVE-2026-6770 enabled cross-site tracking and Tor fingerprinting
A Firefox bug (CVE-2026-6770) allowed cross-site tracking and Tor fingerprinting, even in Private Browsing mode. This vulnerability, which exposed stable …
- Researchers Warn macOS textutil, KeePassXC Can Fuel Automation Attacks
Researchers warn that trusted tools like macOS’s textutil and KeePassXC can be exploited in automation attacks by manipulating their normal functions. Textutil …
- Pay up or expect attrition: 77% of cyber professionals missed out on pay rises last year – and almost half now plan to switch roles | IT Pro
A recent report indicates that 77% of cybersecurity professionals did not receive pay rises last year, leading nearly half (48%) to consider switching roles. …
- Linux ELF Malware Generator Evades ML Detection With Semantic-Preserving Changes
Researchers have developed a Linux ELF malware generator that uses semantic-preserving transformations to evade machine learning detection with a 67.74% …
- Secret Letter Detailing Late Medieval Britain Fully Decoded - Medievalists.net
A secret diplomatic letter from 1498, written by Pedro de Ayala, has been fully decoded by historians, offering new insights into late medieval Britain. The …
- American utility firm Itron discloses breach of internal IT network
The American utility firm Itron has disclosed a cyberattack where an unauthorized third party accessed its internal IT network. The company has blocked the …
- Man nabbed in Singapore over alleged hack and leak of upcoming ‘Avatar: The Last Airbender’ film - Yahoo News
A 26-year-old man was arrested in Singapore for allegedly hacking and leaking clips from the upcoming animated film The Legend of Aang: The Last Airbender. The …
- Lee & Lee Country Club Data Breach Suspected North Korean Hackers
A data breach at Lee & Lee Country Club has affected over 100,000 individuals, with police investigating the involvement of a North Korean hacking group. The …
- ShinyHunters Claims Udemy Data Breach of 1.4M Users | eSecurity Planet
The notorious group ShinyHunters claims to have breached Udemy, stealing over 1.4 million user records including PII and internal data, with a pay or leak …
- ADT Suffers Data Breach, ‘ShinyHunters’ Hackers Say They Stole 10 Million Records | PCMag
Home security provider ADT has experienced a data breach affecting over 10 million records, with hackers known as ShinyHunters claiming responsibility and …
- Toronto police seize ‘SMS blasters,’ a new cybercrime weapon in Canada | National Post
Toronto police have arrested three men and seized SMS blasters, a new type of cybercrime weapon not previously seen in Canada. These devices mimic legitimate …
- A group of users leaked Anthropic’s AI model Mythos by reportedly guessing where it was located | Fortune
The AI model Mythos, developed by Anthropic and considered too dangerous to release widely, was reportedly leaked by users who guessed its location, raising …
- Udemy Data Breach - ShinyHunters Claims Compromise of 1.4M User Records
The cybercriminal group ShinyHunters claims to have breached Udemy, compromising over 1.4 million user records containing PII and internal data. The group has …
- Udemy Data Breach - ShinyHunters Claims Compromise of 1.4M User Records
The cybercriminal group ShinyHunters claims to have breached Udemy, compromising over 1.4 million user records containing PII and internal data. The group has …
- French Police Arrest HexDex Hacker Over Mass Data Theft and Leaks
French police have arrested a 20-year-old hacker known as HexDex for allegedly mass data theft and leaks targeting sports organizations, government entities, …
- AI-Assisted Lazarus Campaign Targets Developers With Backdoored Coding Challenges
The Lazarus Group, a North Korean state-sponsored threat actor, is employing an AI-assisted campaign to target software developers with backdoored coding …
- AI-Assisted Lazarus Campaign Targets Developers With Backdoored Coding Challenges
The Lazarus Group, a North Korean state-sponsored threat actor, is employing an AI-assisted campaign to target software developers with backdoored coding …
- Surveillance companies exploiting telecom system to spy on targets’ locations, research shows | The Record from Recorded Future News
New research from Citizen Lab reveals that surveillance companies are exploiting telecom infrastructure, including SS7 and Diameter protocols, to secretly …
- Trigona ransomware attacks use custom exfiltration tool to steal data
The Trigona ransomware gang is employing a custom exfiltration tool, named uploader_client.exe, to steal data more efficiently and evade security detection. …
- CISA: US agency breached through Cisco vulnerability, FIRESTARTER backdoor allowed access through March | The Record from Recorded Future News
A U.S. agency was breached by sophisticated hackers in September through a Cisco vulnerability, with the FIRESTARTER backdoor malware enabling persistent …
- Cryptohack Roundup: US-Sanctioned Grinex Hacked
The Cryptohack Roundup details recent cybersecurity incidents in digital assets, including a $15 million hack of the US-sanctioned crypto exchange Grinex, …
- NOT for Sale! BlueLeaks 2.0 Hacktivist decides not to sell dataset with sensitive data - DataBreaches.Net
The hacktivist responsible for the BlueLeaks 2.0 breach of P3 Global Intel, known as Internet Yiff Machine (IYM), has decided not to sell the dataset of 8.3 …
- Duo Leaks Sensitive Data of 430,000 Marriage Brokerage Clients
The marriage brokerage company Duo leaked the sensitive data of 430,000 clients due to a hacker accessing an employee’s work PC, leading to a 1.2 billion won …
- Dating app fined after massive data leak | News.az
South Korean matchmaking company Duo has been fined 1.21 billion won (approximately $815,000) after a massive data leak exposed the sensitive personal …
- RAMP Uncovered: Anatomy of Russia’s Ransomware Marketplace
A leaked database from the RAMP dark web forum reveals the inner workings of Russia’s ransomware ecosystem, detailing 7,707 users and 340,000 IP records. The …
- Rockstar Games has confirmed it was hit by third-party data breach
Rockstar Games has confirmed a third-party data breach after the hacking group ShinyHunters claimed to have infiltrated their cloud servers, demanding payment …
- UK Biobank health data listed for sale in China, government confirms
The UK Biobank health data of 500,000 participants was found listed for sale on Alibaba in China, though the government confirmed no purchases were made and …
- Cosmetics giant Rituals confirms data breach of customer membership records | TechCrunch
Cosmetics company Rituals has confirmed a data breach impacting customer membership records, including names, dates of birth, and contact information, …
- Pharma Giant Merck and Google Cloud Sign $1B Agentic AI Deal
Pharma giant Merck has signed a multi-year, up to $1 billion deal with Google Cloud to build an AI-enabled enterprise, deploying agentic AI across its …
- 1,370+ Microsoft SharePoint Servers at Risk of Spoofing Attacks Found Exposed Online
Over 1,370 Microsoft SharePoint servers are exposed online to a spoofing vulnerability (CVE-2026-32201), which is actively exploited in the wild. This critical …
- Quantum Computers Are Not a Threat to 128-bit Symmetric Keys
Filippo Valsorda’s latest essay is a useful corrective for security leaders: the real post-quantum urgency is in asymmetric cryptography, not in reflexively …
- New Lotus data wiper used against Venezuelan energy, utility firms
A new data-wiping malware named Lotus has been identified, targeting energy and utility firms in Venezuela. The malware systematically destroys compromised …
- Exploits Turn Windows Defender into Attacker Tool
Three publicly available exploits, BlueHammer, RedSun, and UnDefend, are being used to turn Microsoft Defender into an attacker tool, with two enabling …
- Thousands of Apache ActiveMQ instances still unpatched, weeks after an actively exploited hole discovered | CSO Online
Thousands of Apache ActiveMQ instances remain unpatched weeks after a critical remote code injection vulnerability (CVE-2026-34197) was discovered, …
- Iran claims US used backdoors in networking equipment • The Register
Iranian media claims the US used backdoors or botnets to disable networking equipment during recent attacks, with Chinese state media amplifying these …
- French govt agency confirms breach as hacker offers to sell data
The French govt agency France Titres (ANTS) has confirmed a data breach impacting an undisclosed number of individuals, with a hacker claiming to have stolen …
- OpenAI launches ChatGPT Images 2.0, Codex Labs developer training service - SiliconANGLE
OpenAI has launched ChatGPT Images 2.0, an enhanced image generator with improved quality, text rendering, and wider aspect ratio support, alongside Codex …
- Florida attorney general issues subpoenas in ChatGPT probe over FSU shooting - SiliconANGLE
Florida Attorney General has issued subpoenas to OpenAI, the parent company of ChatGPT, as part of a criminal investigation into the FSU shooting. The probe …
- Microsoft Releases Emergency .NET 10.0.7 Update to Patch Elevation of Privilege Vulnerability
Microsoft has released an emergency .NET 10.0.7 update to fix a critical elevation of privilege vulnerability (CVE-2026-40372) in the …
- Exclusive Anthropic Cyber Tool Mythos Accessed by Unapproved Actors
Unauthorized actors have gained access to Anthropic’s highly restricted cybersecurity AI tool, Claude Mythos, which is capable of discovering zero-day …
- A Token Flaw Turned Azure’s AI Agent Into a Spy
A security vulnerability in Azure’s AI Agent allowed unauthorized access to commands, credentials, and sensitive information due to a flawed token verification …
- Vercel Traces Customer Data Theft to Agentic AI Tool Breach
Vercel reported a customer data theft incident originating from a breach of a third-party agentic AI tool used by an employee. The attacker exploited this …
- Fake Helpdesk Attack Uses Teams and Quick Assist to Breach Targets
Attackers are exploiting Microsoft Teams and Windows Quick Assist in a helpdesk-themed social engineering attack to gain enterprise access and steal data by …
- SmokedMeat: Open-source tool shows what attackers do inside CI/CD pipelines - Help Net Security
Boost Security has released SmokedMeat, an open-source framework designed to simulate attacker chains against CI/CD infrastructure, demonstrating the …
- QEMU Hijacked as Stealth Backdoor for Credential Theft, Ransomware
Attackers are exploiting QEMU virtual machines as stealth backdoors for credential theft and ransomware staging, hiding their operations within invisible …
- Breaking: Vercel Breach Linked to Infostealer Infection at Context.ai | InfoStealers
A Lumma stealer infection of a Context.ai employee led to the Vercel breach by compromising corporate credentials for tools like Google Workspace, Supabase, …
- NSA Confirms Use of Anthropic’s Mythos Despite Pentagon Blacklist
The NSA is confirmed to be using Anthropic’s Mythos AI model, despite the company being on the Pentagon’s blacklist due to concerns over offensive cyber …
- ZionSiphon Hits Israeli Water Systems With OT Sabotage Malware
ZionSiphon is a new OT malware designed to target Israeli water systems with sabotage capabilities, although its destructive functions are currently flawed. …
- British Hacker Admits Stealing Millions in Virtual Currency From Targeted Companies
A 24-year-old British national, Tyler Robert Buchanan, has pleaded guilty to orchestrating a cyberattack campaign that compromised over a dozen U.S. companies …
- JanaWare Ransomware Hits Turkish Users via Tailored Adwind RAT
A new ransomware campaign named JanaWare is targeting users in Turkey by utilizing a customized Adwind RAT. The malware employs stealthy delivery, geographical …
- Google Uses Gemini AI to Stop Malicious Ads From Threat Actors - 8.3 billion ads Blocked
Google has integrated its Gemini AI models to combat sophisticated malicious ads, successfully blocking over 8.3 billion ads in 2025 by analyzing complex data …
- NIST Shifts to Risk-Based NVD Model as CVE Submissions Surge 263% Since 2020
Due to a 263% surge in CVE submissions since 2020, NIST is shifting the National Vulnerability Database (NVD) to a risk-based model, prioritizing …
- OpenAI rotates macOS certs after Axios attack hit code-signing workflow
OpenAI is rotating macOS code-signing certificates following a supply chain attack where a malicious Axios package was executed, potentially exposing them. …
- 60K Bitcoin addresses leaked as LockBit ransomware gang gets hacked
Nearly 60,000 Bitcoin addresses linked to the LockBit ransomware gang were leaked after their dark web affiliate panel was breached, though private keys were …
- Jet fuel risk is now a traveller issue: What it could mean for your summer plans | Edward Kiledjian
Global jet fuel disruptions could lead to higher fares, schedule cuts, and more flight cancellations, particularly impacting travel to Europe and Asia. …
- Bluetooth tracker hidden in a postcard and mailed to a warship exposed its location — $5 gadget put a $585 million Dutch ship at risk for 24 hours | Tom’s Hardware
A Bluetooth tracker hidden inside a postcard and mailed to the Dutch warship HNLMS Evertsen exposed its location for 24 hours, putting the $585 million ship …
- Trusted access for the next era of cyber defense | OpenAI
OpenAI is expanding its Trusted Access for Cyber (TAC) program to provide thousands of verified defenders and hundreds of teams with access to advanced AI …
- Microsoft Raises Prices for All Surface PCs, Making Them More Expensive Than Equivalent Macs - MacRumors
Microsoft has raised prices for all its Surface PCs, citing increased memory and component costs due to global memory shortages. These price hikes now make …
- Apple Removes Fake Crypto Wallet App That Stole $9.5 Million From Mac Users - MacRumors
A fake crypto wallet app disguised as Ledger Live was available on the Mac App Store, successfully scamming Mac users out of $9.5 million in cryptocurrency …
- Backblaze has quietly stopped backing up your data | Robert Reese’s Website
Article claims : Backblaze has quietly stopped backing up user data from cloud storage folders like OneDrive and Dropbox, and also .git folders, despite …
- Iran-Linked CyberAv3ngers Sets Sights on Water Utilities and Industrial Controllers - Cyber Security News
The Iran-linked CyberAv3ngers group, formally connected to the IRGC-CEC, has evolved into a significant threat targeting U.S. critical infrastructure, …
- The silent “Storm”: New infostealer hijacks sessions, decrypts server-side
The new Storm infostealer operates by hijacking browser sessions and decrypting data server-side, a shift from traditional methods that evaded endpoint …
- Hackers claim breach of Rockstar Games via cloud analytics platform | The Record from Recorded Future News
The cybercrime group ShinyHunters claims to have breached Rockstar Games systems through a cloud analytics platform, threatening to release stolen data if a …
- Apache Tomcat Vulnerabilities Enables Bypass of EncryptInterceptor
Multiple Apache Tomcat vulnerabilities have been disclosed, including a critical EncryptInterceptor bypass (CVE-2026-34486) resulting from a flawed security …
- Marimo RCE Vulnerability Exploited in the Within 10 Hours of Disclosure
A critical pre-authentication RCE vulnerability (CVE-2026-39987) in the Marimo Python notebook platform was exploited within 10 hours of its disclosure, …
- APT41 Delivers ‘Undetectable’ Backdoor to Steal Cloud Credentials
The China-backed threat group APT41 is utilizing a ‘zero-detection’ backdoor to target cloud environments like AWS, Google, Azure, and Alibaba, aiming to …
- BITTER APT Uses Signal, Google, and Zoom Lures to Spread ProSpy Spyware
The BITTER APT group is using Signal, Google, and Zoom lures in spearphishing attacks to spread ProSpy and ToSpy spyware, targeting journalists and activists …
- Adobe rolls out emergency fix for Acrobat, Reader zero-day flaw
Adobe has released an emergency fix for a zero-day vulnerability (CVE-2026-34621) in Acrobat and Reader that allowed malicious PDFs to bypass sandbox …
- Hackers Abuse GitHub and Jira Notifications to Deliver Phishing Through Trusted SaaS Channels
Cybercriminals are exploiting GitHub and Jira notification systems to deliver phishing emails, bypassing traditional security measures by using the platforms' …
- FBI, Indonesia take down W3LL phishing tool | The Record from Recorded Future News
The FBI and Indonesian law enforcement have dismantled the W3LL phishing tool, a platform that enabled hackers to create fake login portals for $500, leading …
- Claude AI Reportedly Down for Hundreds of Users With Intermittent 500 Errors - Cyber Security News
Hundreds of users reported Claude AI experiencing intermittent 500 errors on April 13, 2026, affecting its website, API, and Claude Code, despite the official …
- PwC: Cybersecurity Risk Outpaces Corporate Ability to Manage
A recent PwC survey reveals that cybersecurity is a top three risk for 60% of American corporations, yet only 6% feel capable of addressing it. Despite …
- Rockstar confirms it was hacked as attackers threaten to leak data | KitGuru
Rockstar Games has confirmed it was the victim of a recent cyber-attack, where a hacking group called ShinyHunters gained access to a limited amount of …
- Booking.com warns customers of hack that exposed their data | Hacking | The Guardian
Booking.com has alerted customers to a data breach where unauthorised parties accessed booking details, including names, emails, addresses, and phone numbers, …
- FBI Recovers Deleted Signal Messages Through iPhone Notifications
The FBI has discovered a method to recover deleted Signal messages from iPhones by accessing notification data, even after the app is deleted. This loophole, …
- GlassWorm evolves with Zig dropper to infect multiple developer tools
The GlassWorm campaign has evolved to use a Zig-compiled dropper hidden within a fake IDE extension to infect multiple developer tools, including VS Code, …
- OpenAI Warns macOS Users to Update ChatGPT and Codex Immediately
OpenAI is warning macOS users to update ChatGPT and other applications immediately due to a software supply chain attack that compromised a third-party …
- Over 20,000 crypto fraud victims identified in international crackdown
An international law enforcement operation named Operation Atlantic has identified over 20,000 victims of cryptocurrency fraud across Canada, the UK, and the …
- Censys finds 5,219 devices exposed to attacks by Iranian APTs, majority in U.S.
Censys has identified 5,219 internet-exposed Rockwell Automation PLCs, with the majority located in the U.S., that are vulnerable to attacks by Iranian APTs. …
- The Art of the Gray Man: How to Travel Smart, Stay Safe, and Experience More of the World | Edward Kiledjian
A practical guide to the “gray man” approach to travel—how to blend in, stay aware, and reduce risk without paranoia. Learn how behaviour, mindset, and digital …
- Critical Marimo Flaw Exploited Hours After Public Disclosure - SecurityWeek
A critical remote code execution (RCE) vulnerability in the Marimo notebook, CVE-2026-39987, was exploited by a threat actor just nine hours after its public …
- MITRE Releases Fight Fraud Framework - SecurityWeek
The non-profit MITRE Corporation has released the Fight Fraud Framework (MITRE F3), a knowledge base detailing fraudster tactics, techniques, and procedures …
- Zephyr Energy hackers swiped £700,000 after redirecting a contractor payment | IT Pro
Oil and gas firm Zephyr Energy reported a cyber intrusion where hackers diverted a contractor payment, resulting in a loss of approximately £700,000. The …
- UAT-10362 linked to LucidRook attacks targeting Taiwan-based institutions
The LucidRook malware, a Lua-based stager, is being used in phishing attacks targeting Taiwan-based NGOs and universities, and is linked to the threat group …
- Claude uncovers a 13‑year‑old ActiveMQ RCE bug within minutes | CSO Online
A 13-year-old ActiveMQ RCE bug (CVE-2026-34197) was discovered and weaponized in minutes by researchers using AI, specifically Claude, highlighting the …
- Microsoft: Canadian employees targeted in payroll pirate attacks
A financially motivated threat actor named Storm-2755 is targeting Canadian employees through payroll pirate attacks, using malicious Microsoft 365 sign-in …
- UNC6783 Hackers Use Fake Okta Pages in Corporate Breach Campaign
The UNC6783 hackers are using fake Okta login pages and social engineering to breach corporate systems, targeting Business Process Outsourcers (BPOs) to gain …
- AI Just Hacked One Of The World’s Most Secure Operating Systems
An AI agent autonomously hacked the secure FreeBSD operating system by exploiting a kernel vulnerability in just four hours, demonstrating a profound shift in …
- CareCloud: Millions of Health Care Patients Potentially Affected by Data Breach - Newsweek
A cybersecurity incident at CareCloud, a health care technology company, potentially impacted millions of patients due to unauthorized access to an electronic …
- Sensitive LAPD records leaked in hack of L.A. city attorney’s office - Los Angeles Times
A hack of the L.A. city attorneys office has resulted in the leak of 7.7 terabytes of sensitive LAPD records, including witness names, health information, and …
- A hacker has allegedly breached one of China’s supercomputers and is attempting to sell a trove of stolen data | CNN
A hacker has allegedly stolen over 10 petabytes of sensitive data, including defense documents and missile schematics, from a state-run Chinese supercomputer. …
- Snowflake expands open data strategy with Iceberg V3 support and governance portability plan - SiliconANGLE
Snowflake is enhancing its open data strategy by adding Iceberg V3 support and a governance portability plan to reduce data movement and improve AI data …
- Russian hacking group targets home and small office routers to spy on users | Malwarebytes
A Russian military-linked hacking group, known as APT28, is conducting a widespread cyber espionage campaign by compromising home and small office routers to …
- Social engineering attacks on open source developers are escalating - Help Net Security
Social engineering attacks targeting open source developers are escalating, with North Korean hackers recently tricking a maintainer into installing malware by …
- Massachusetts Hospital Diverts Ambulances as Cyberattack Causes Disruption - SecurityWeek
Signature Healthcare in Brockton, Massachusetts, has diverted ambulances and canceled chemotherapy infusion services due to a cyberattack that caused …
- Q-Day is Coming: Are Canadian Telecoms Ready for Quantum?
The Humanitek 2026 conference revealed that Canadian telecom networks face an imminent threat from quantum computing, dubbed Q-Day, which could break current …
- Iran-Linked Hackers Launch Password Spray Campaign Against Microsoft 365 Tenants in Middle East
An Iran-linked threat actor has launched a password spray campaign targeting Microsoft 365 tenants in the Middle East, primarily focusing on Israel and the …
- Support platform breach exposes Hims & Hers customer data | Malwarebytes
Telehealth company Hims & Hers is notifying customers of a data breach affecting its customer service platform, where hackers accessed or stole support ticket …
- Microsoft says Medusa-linked Storm-1175 is speeding ransomware attacks | CSO Online
Microsoft warns that the Storm-1175 cybercrime group, linked to Medusa ransomware, is accelerating attacks by exploiting vulnerable web-facing systems and …
- Medusa Ransomware Fast to Exploit Vulnerabilities, Breached Systems - SecurityWeek
The Medusa ransomware group, operating as a ransomware-as-a-service, has been rapidly exploiting vulnerabilities, including zero-days, to breach over 300 …
- Flowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation; 12,000+ Instances Exposed
The Flowise AI Agent Builder is actively being exploited due to a critical CVSS 10.0 remote code execution vulnerability (CVE-2025-59528), affecting over …
- Security breach at European Commission impacts 30 EU institutions | DigitalShield
The European Commission experienced a significant security breach impacting at least 30 EU institutions, with the cybercriminal group TeamPCP identified as …
- Disgruntled researcher leaks “BlueHammer” Windows zero-day exploit
A disgruntled researcher has leaked the BlueHammer Windows zero-day exploit due to dissatisfaction with Microsoft’s handling of the disclosure, allowing …
- teiss - News - Jones Day confirms data breach after hackers leak client files online
Major U.S. law firm Jones Day confirmed a data breach after hackers published unauthorized client files online. The incident involved unauthorized access to …
- Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR Tools
The Qilin and Warlock ransomware operations are employing a Bring Your Own Vulnerable Driver (BYOVD) technique to disable over 300 Endpoint Detection and …
- Critical Claude Code Flaw Silently Bypasses User-Configured Security Rules
A critical flaw in Anthropic’s Claude Code AI agent allows security rules to be bypassed by padding commands with harmless subcommands, potentially leading to …
- Google Wants to Transition to Post-Quantum Cryptography by 2029 - Schneier on Security
Google plans to fully transition to post-quantum cryptography by 2029, a move praised for enhancing crypto-agility regardless of the timeline for useful …
- North Korean Hackers Pose as Trading Firm to Steal $285M from Drift
North Korean hackers, identified as UNC4736, infiltrated Drift Protocol by posing as a legitimate trading firm for six months, ultimately stealing $285 …
- Hackers Compromised ILSpy WordPress Domain to Deliver Malware
Hackers compromised the ILSpy WordPress domain on April 6, 2026, redirecting developers to a malicious site that prompted them to install a dangerous browser …
- Fake Claude Code source downloads actually delivered malware • The Register
Tens of thousands of users downloading the leaked Claude Code source code were exposed to malware, including Vidar and GhostSocks, which steal credentials and …
- Iran allows 15 ships through Strait of Hormuz
Despite ongoing conflict, Iran has allowed 15 ships to pass through the Strait of Hormuz in a 24-hour period, a significant increase though still far below the …
- Exclusive: Cuddly toy maker Charlie Bears allegedly hacked - Cyber Daily
The LockBit ransomware operation has allegedly hacked Charlie Bears, a popular cuddly toy maker, listing the company as a victim on its darknet leak site. The …
- Attackers hijack Axios npm account to spread RAT malware
Attackers hijacked the Axios npm account to distribute RAT malware by publishing malicious package updates. Developers who installed compromised versions …
- No, Iranian hackers didn’t leak a video of the FBI’s Kash Patel dancing - Truth or Fake - France 24
The Truth or Fake show debunks a viral Bollywood dance video falsely linked to a hack of FBI Director Kash Patel’s emails by an Iranian-linked group. The …
- Mercor says it was hit by cyberattack tied to compromise of open source LiteLLM project | TechCrunch
AI recruiting startup Mercor has confirmed a cyberattack linked to a compromise of the open source project LiteLLM, potentially affecting thousands of …