News

CISA has added CVE‑2025-29635 to its Known Exploited Vulnerabilities catalogue, affecting D‑Link’s DIR‑823X router. The vulnerability is a command injection flaw that allows an authorised attacker to execute arbitrary commands on the device by sending a…

US authorities have charged 29 people in a Myanmar-based scam network, including a Cambodian senator, and seized more than 500 Web domains tied to fake investment sites. The actions form part of a broader crackdown that has included coordinated government…

Glasswing is credited with securing the code, while the rest of the stack remains the responsibility of others, according to the piece. It notes that five million automated fuzzer testing passes hit a vulnerable line of code in FFmpeg, yet none of them…

According to the Office of Inspector General (OIG) of the U.S. National Aeronautics and Space Administration (NASA), a Chinese national posed as a U.S. researcher as part of a spear-phishing campaign to obtain sensitive information from NASA, other…

AI phishing is No. 1 for cyberattackers, with Cisco Talos' IR Trends Q1 2026 report showing that phishing became the top initial-access vector in the first quarter, overtaking the exploitation of external vulnerabilities. According to Cisco Talos, more than…

The personal health data of more than half a million UK Biobank volunteers has been put up for sale on e-commerce platforms in China following a data breach. In a statement to the House of Commons, according to Ian Murry, the Minister for Digital Government…

North Korea's Lazarus Group is using ClickFix attacks to target macOS users, expanding their reach to Mac-centric organisations and high-value leaders, according to Any[.]Run. The research published on April 21 describes a new nation-state campaign that…

A former CISO, Karim Benslimane, argues that even with tight security tech, humans remain a weak link in email-driven threats, with credential abuse and phishing accounting for around 60% of all breaches according to Verizon. He describes three pressing SAT…

According to Infosecurity Magazine, the rush to deploy AI in enterprise environments is not only creating new security vulnerabilities but reviving old security failures, with Jurgen Kutscher, VP of Mandiant Consulting, part of Google Cloud, warning of…

According to U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR), the four settlements conclude separate ransomware investigations under HIPAA’s Security Rule, with OCR monitoring for two years and a total of $1,165,000 paid.…

On 24 April 2026, The Hacker News outlined how AI agents expose a delegation gap in enterprise security, since agents are started and empowered by existing identities rather than possessing independent authority. The piece argues that the real governance…

Cybersecurity researchers have uncovered 26 malicious apps on the Apple App Store that impersonate popular crypto wallets to harvest recovery phrases and private keys, with activity dating back to at least fall 2025. The FakeWallet family mimics wallets such…

Npm supply chain malware attack targets developers with worm-like propagation, with Infosecurity Magazine reporting the activity on 24 April 2026. According to Socket, the new research describes worm-style techniques that mirror earlier attacks using…

LMDeploy’s high-severity vulnerability CVE-2026-33626 was exploited within 13 hours of its public disclosure, exposing a Server-Side Request Forgery flaw in the project’s vision-language module. According to Sysdig, the advisory notes that the load_image()…

China-backed actors are increasingly using covert networks of compromised routers, IoT and smart devices to carry out attacks with a “low-cost, low-risk, deniable way,” according to this week’s advisory from coordinating cybersecurity bodies. Evidence cited…

A new ransomware family, called Kyber, is leveraging post-quantum cryptography in its operations to hype the strength of its encryption, claims the Ars Technica report published on 23 April 2026. According to Rapid7, the Windows variant uses ML-KEM1024, the…

On 23 April 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-39987, the Marimo Remote Code Execution Vulnerability, to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Marimo’s Marimo product and permits…

According to SecuritySnacks, a Chrome extension impersonating Google's Authenticator has been identified as part of an ongoing malicious campaign active since at least early 2026, with the AiFrame infrastructure linked to multiple extensions under the…

UNC6692 has been observed using social engineering via Microsoft Teams to deploy a custom malware suite on compromised hosts, with attackers impersonating IT helpdesk staff to lure victims into accepting a Teams chat invitation. According to Mandiant, the…