News

Mozilla says Anthropic’s new cybersecurity-focused Claude Mythos AI model has discovered 271 vulnerabilities in Firefox, all of which were patched with the release of version 150. According to Mozilla, more than 40 CVEs have been addressed in Firefox 150,…

A former ransomware negotiator has pleaded guilty to secretly working with the BlackCat ransomware group and conspiring to launch attacks against multiple victims across the US. Angelo Martino, 41, of Land O’Lakes, Florida, admitted one count of conspiracy…

Cybersecurity researchers have identified Lotus Wiper, a previously undocumented data wiper used in destructive attacks against Venezuela’s energy and utilities sector at the end of last year and into 2026, according to Kaspersky. The campaign relies on two…

North Korean hackers have been using AppleScript and the ClickFix technique in fresh macOS attacks against financial organisations, including cryptocurrency, venture capital, and blockchain entities, according to SecurityWeek on 22 April 2026. A campaign…

On 31 January 2026, researchers disclosed that Moltbook, a social network for AI agents, left its database exposed, revealing 35,000 email addresses and 1.5 million agent API tokens across 770,000 active agents. The private messages also contained plaintext…

Cybersecurity researchers have uncovered a Belarus-based software platform called ProxySmart that is powering SIM farms on an “industrial scale,” according to Infrawatch. In a report published on 21 April 2026, Infrawatch identified 87 ProxySmart control…

Google Antigravity has moved from a developer tool to a target for abuse as researchers uncovered a remote code execution vulnerability that could escape the sandbox and run arbitrary code, with Google patching the flaw in late February. Researchers at…

Microsoft has released out-of-band updates for ASP[.]NET Core to fix a privilege-escalation vulnerability tracked as CVE-2026-40372, which Microsoft says could allow an attacker to gain SYSTEM privileges over a network. The flaw has a CVSS score of 9.1 out…

Oracle released 481 new security patches as part of its April 2026 Critical Patch Update (CPU), covering 28 product families. Across those products, more than 300 fixes address vulnerabilities that are remotely exploitable without authentication, with…

The UK faces a “perfect storm” for cybersecurity, with the coming decade expected to be defined by geopolitical tensions and rapid technological evolution, including AI, according to the article. Speaking at the tenth CYBERUK conference in Glasgow, Richard…

Mustang Panda’s new LOTUSLITE variant has been observed targeting India’s banking sector, with additional activity affecting South Korea’s policy circles, according to Acronis researchers Subhajeet Singha and Santiago Pontiroli. The backdoor communicates…

A critical vulnerability has been disclosed in the Python-based sandbox Terrarium, developed by Cohere AI, tracked as CVE-2026-5752 and rated 9.3 on the CVSS scale, which could lead to arbitrary code execution with root privileges on a host process.…

Malicious versions of pgserve were published to npm on 21 April 2026, with the compromised editions being 1.1.11, 1.1.12 and 1.1.13. The versions inject a 1,143-line credential-harvesting script that runs via postinstall on every npm install, and the malware…

On 21 April 2026, Mozilla said that Mythos Preview had helped pre-identify 271 security vulnerabilities in Firefox 150, the week’s release of the browser. In its blog post, Mozilla noted that the vulnerabilities were detected by analysing unreleased source…

A former ransomware negotiator pleaded guilty this week to conspiring with the ransomware actor BlackCat/ALPHV to commit attacks against US companies in 2023, according to a statement from the Department of Justice. Angelo Martino, 41, of Land O'Lakes,…

Three publicly available proof-of-concept exploits are being used to attack Microsoft Defender and turn its protective functions against organisations, with two of the exploits unpatched. BlueHammer is a TOCTOU flaw in Defender’s signature update workflow…

A new variant of the NGate malware family has been identified, using a trojanized Android application to capture payment card data and PINs. According to ESET, the campaign has replaced earlier tooling with a modified version of HandyPay, a legitimate…

Cybersecurity researchers have identified BRIDGE:BREAK, a set of 22 vulnerabilities across Lantronix and Silex serial-to-IP converters, which could allow attackers to hijack devices and tamper with data exchanged by them. The flaws affect as many as eight…

A fresh wave of cyberattacks has exploited Bomgar RMM instances across organisations and their customers over the past two weeks, underscoring the rapid downstream risk to unpatched supply chains. According to Huntress Security Operations Center, there has…

Google has fixed a critical prompt-injection flaw in its agentic integrated development environment Antigravity that allowed sandbox escape and remote code execution through a PoC, researchers reported this week. The vulnerability centres on how Antigravity…

A 24-year-old British national, a senior member of the cybercrime group Scattered Spider, has pleaded guilty to wire fraud conspiracy and aggravated identity theft, according to the U.S. Justice Department. Tyler Robert Buchanan, who used the hacker handle…

According to Kaspersky, over two dozen fake cryptocurrency applications targeting iOS have been published to the Apple App Store, in a campaign dubbed FakeWallet that has been ongoing since at least the fall of 2025. The 26 phishing apps mimicked major…

Posted on 21 April 2026, Dutch warship compromised with $5 tracker and a postcard reports that Just Vervaart, working for Omroep Gelderland, hid a $5 Bluetooth tracker inside an envelope with a postcard via the military postal service. According to Omroep…

On 21 April 2026, Vercel confirmed a cyber-incident described as highly sophisticated, arising after a third‑party tool was used by an employee. According to InfoSecurity Magazine, the attacker used that access to take over the employee’s Vercel Google…

Two thirds of organisations have suffered a cybersecurity incident related to the deployment of AI agents in the last year, according to the Cloud Security Alliance research conducted with Token Security. The CSA paper notes that 68% of respondents claim to…

Mature SOCs cut MTTR by embedding threat intelligence directly into daily workflows, not by speeding up people. In detection, they move upstream by ingesting real‑world indicators with ANY[.]RUN Threat Intelligence Feeds to flag suspicious infrastructure…