Cybersecurity — TechPulse

SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines

info@thehackernews.com (The Hacker News) Internet

Exploit brokers pay $500k for WordPress RCEs. I found one with GPT5.6 and $25

Adam Kues Slcyber.io

Sign Commits from Anywhere Without Your Keys Going Anywhere

Phil Haack Haacked.com

A password alone isn't enough: How to really secure your accounts

Steffen Zahn Notebookcheck.net

Volexity Uncovers Zero-Day Campaign Targeting SonicWall VPN Appliances

Pierluigi Paganini Securityaffairs.com

FBI arrests 21-year-old accused of infecting 8,000 PCs with malware through fake Steam games

Kishalaya Kundu TechSpot

Windows 10 Still Being Used, Often Unpatched and Insecure

EditorDavid Slashdot.org

Security Affairs newsletter Round 586 by Pierluigi Paganini – INTERNATIONAL EDITION

Pierluigi Paganini Securityaffairs.com

South Korean regulator begins sanctions process against Dunamu: Report

Cointelegraph by Zoltan Vardai Cointelegraph

Hackers abuse ViPNet software to target Russian govt agencies

Bill Toulas BleepingComputer

Week in review: High severity WordPress vulnerabilities, fake OAuth IDs bypass sign-in logs

Anamarija Pogorelec Help Net Security

Deepsec

vercel-labs Github.com

blind-transpiler 1.0.0

joshimohit@bhu.ac.in Pypi.org

Attackers Can Take Over WordPress Sites Using Newly Released wp2shell Exploits

Pierluigi Paganini Securityaffairs.com

Your Period Tracker Is (Probably) Spying on You

Andy Greenberg, Dell Cameron, Lily Hay Newman Wired

Daxin: 13-Year-Old China-Linked Malware Found Still Active on Manufacturer’s Network

Pierluigi Paganini Securityaffairs.com

Cybercriminals are cashing in on the World Cup by selling stolen streaming accounts

Tatiana Sataua Yahoo Entertainment

TP-Link Kasa cameras leaked home GPS via unauthenticated UDP for 6 years

BadChemical Github.com

World's largest health organization threatens to jail or fire staff reading patient data 'without legal justification

Efosa Udinmwen TechRadar

This Week in Security: Another Record Patch Tuesday, LAME is More Secure, Secure Boot is Less Secure, and Milk Malware

Mike Kershaw Hackaday

My important files back themselves up now, and it took less than an hour to set up

Tashreef Shareef MakeUseOf

GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft

info@thehackernews.com (The Hacker News) Internet

Madison Square Garden Sued WIRED for Saying It Tracked Gay Celebrities. WIRED Says Msg’s Own Complaint Confirms It

Nadia Santiago Thoughtcatalog.com

CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV

info@thehackernews.com (The Hacker News) Internet

Show HN: ReasonGate- An explainable gate that blocks LLM prompt injection

cgrtml Github.com

ACR Stealer: Two observed intrusion chains amid increased threat activity

Microsoft Security Research and Balaji Venkatesh S Microsoft.com

'If you have something that you don't want anyone to know, maybe you shouldn't be doing it in the first place; — quote of the day by ex-Google CEO Eric Schmidt

Keumars Afifi-Sabet TechRadar

Grok CLI Secretly Uploaded Full User Directories and SSH Keys

Julian Horsey Geeky Gadgets

US Sanctions First VPN in Crackdown on Ransomware Criminals

Alex Valdes CNET

‘No company is going to go to jail for you’: Proton’s CTO on balancing privacy, policy, and trust

Nilay Patel The Verge

ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories

info@thehackernews.com (The Hacker News) Internet

20+ Hijacked Government Websites Became an Attack Channel

info@thehackernews.com (The Hacker News) Internet

‘Selfish Bravado’ Behind TfL Cyber-Attack, Judge Says as Pair Jailed

Kevin Poireault Infosecurity Magazine

Canvas Pauses Data Delivery Due to Potential 'Security Threat'

kathryn.palmer@insidehighered.com Inside Higher Ed

The Three-Second Theft: Why AI Voice Fraud Outruns Every Defence

SmarterArticles Smarterarticles.co.uk

Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware

info@thehackernews.com (The Hacker News) Internet

You have a strong password. Here’s why your online accounts are still at risk

Karandeep Singh Android Authority

California Steps Back From Dangerous Expansion of its Age-Gating Law

Rindala Alajaji EFF

The network perimeter is dead. Now what?

Alan Stewart-Brown TechRadar

Your travel habits can leak sensitive info about you. Here’s what to do instead

Alaina Yee PCWorld

Who's running all those tiny RPKI servers?

Ties Dirksen Apnic.net

I tricked Claude into leaking your deepest, darkest secrets

Ayush Paul Ayush.digital

AI used to help plan the break-in, now it’s doing the break-in

Anamarija Pogorelec Help Net Security

Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands

info@thehackernews.com (The Hacker News) Internet

Dossier : Antivirus PC : lequel choisir pour protéger son ordinateur en 2026 ?

L'équipe Services Les Numériques

Probe into claims Southport victims' NHS records accessed

https://www.facebook.com/bbcnews BBC News

Microsoft’s fix for RoguePlanet has its own new disk space bug

Mikael Markander PCWorld

CrashStealer malware masquerades as Apple’s crash report tool to raid your Mac

Anurag Chawake Cult of Mac

U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware Support

info@thehackernews.com (The Hacker News) Internet

Flock is falling out of favor with police departments

Katherine Li Business Insider

Just Let Me Write Digits

Guillaume Endignoux Gendx.dev

The Value of Continuous IT Infrastructure Monitoring for NJ Businesses

Chris Turn Socialmediaexplorer.com

WhatsApp now testing its encrypted cloud storage backup solution for iOS

Sagar GSMArena.com

Defending SaaS-based applications against ShinyHunters OAuth abuse

Microsoft Security Research and Microsoft Defender Security Research Team Microsoft.com

Zimbra patched a flaw that let hackers hijack accounts just by sending an email

Alfonso Maruccia TechSpot

The 6.9 Million People Whose Genetic Data Leaked from 23andme Are Finally Getting Paid, and the Total Is $46.75 Million

Chris Lavergne Thoughtcatalog.com

Stop looking for ironclad cybersecurity answers. They often don’t exist

Alaina Yee PCWorld

A Leak of San Francisco Police Drone Footage Exposes the New Reality of Urban Surveillance

Andy Greenberg, Dhruv Mehrotra Wired

I ditched Windows Firewall's confusing interface for this free alternative that actually makes sense

Oluwademilade Afolabi MakeUseOf

Border Cops Can Search Your Phone Whenever They Want, If You're Within 100 Miles of the Border

Elizabeth Nolan Brown Yahoo Entertainment

'Cryptomining can be a lucrative post-compromise activity in cloud environments': Experts warn AI gateways connected to Amazon Bedrock are being hijacked to steal crypto

Sead Fadilpašić TechRadar

Lessons Learned from CISA’s Recent GitHub Leak

BrianKrebs Krebs on Security

China, Russia and Others Seek To Inflame Debate Over AI Data Centers

BeauHD Slashdot.org

Lenovo denies using banned Chinese SSDs where they're not allowed

Simon Sharwood Theregister.com

99.9% of fixable AI vulnerabilities remain unpatched

Anamarija Pogorelec Help Net Security

Ryuk Ransomware Member Pleads Guilty Over Attacks on U.S. Organizations

Pierluigi Paganini Securityaffairs.com

Croc: Securely transfer files and folders between two computers

schollz Github.com

Grid War: How Geopolitics And Anxiety Drive Home Solar

Ken Silverstein, Senior Contributor, Ken Silverstein, Senior Contributor https://www.forbes.com/sites/kensilverstein/ Forbes

Ronald Reagan's Landmark Cybersecurity Policies Were Influenced By A Classic '80s Techno-Thriller

staff@bgr.com (Daniel Trock) BGR

Microsoft's patch for a Windows Defender 0-day may have created a new attack path

Alfonso Maruccia TechSpot

'I'm dying laughing' - what leaked messages tell us about global hacking gang

Geoff White - BBC Cyber Hack podcast BBC News

Week in review: Accenture data breach, great open-source cybersecurity tools

Help Net Security Help Net Security

'The false attributions were the direct product of Koi’s unsupervised reliance': Startup sues Koi Security after AI tool hallucinates and links it to a Chinese spying scam

Efosa Udinmwen TechRadar

Security Affairs newsletter Round 585 by Pierluigi Paganini – INTERNATIONAL EDITION

Pierluigi Paganini Securityaffairs.com

Los Angeles police pause Flock's surveillance of everyday life

Jason Weisberger Boing Boing

Can the government see us through our phone cameras?

Ava Reynolds Lifesciencesworld.com

Medical Technology Firm Confirms Data Breach That Impacted Data of 3,834,294 Americans

Daily Hodl Staff The Daily Hodl

TPM Device Not Detected in Windows 11: How to Fix It (2026)

Aseem Kishore Helpdeskgeek.com

A VPN Can Only Protect Your Privacy So Much. Here’s What to Consider

Krishi Chowdhary CNET

Hackers Weaponize Balochistan Police Portal in Multi-Group Espionage Campaigns

info@thehackernews.com (The Hacker News) Internet

This ransomware negotiator was paid to fight hackers, he was secretly working with them instead

Skye Jacobs TechSpot

Ford’s latest anti-theft measure stops thieves from starting your car

Jonathan Lamont MobileSyrup

3 Reasons Why Your Website Needs Regular Maintenance

Anthony Savino Entrepreneur

This Week in Security: Escaping Linux VMs, Vulnerable Solar, Confusing AI (Again), and Confusing NPM Malware

Mike Kershaw Hackaday

Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access

info@thehackernews.com (The Hacker News) Internet

NHS Warns Staff Over Unauthorized Access to Patient Data

Phil Muncaster Infosecurity Magazine

RoguePlanet let hackers take over your PC. Microsoft just patched it

Mikael Markander, Laura Pippig PCWorld

Hackers tried to backdoor Injective npm package to steal wallet keys

Cointelegraph by Martin Young Cointelegraph

World Cup Propels Surveillance To New Heights

Anne Toomey McKenna Techdirt

Injective SDK on npm infected with cryptocurrency wallet stealer

Bill Toulas BleepingComputer

Quote of the day by NSA Whistleblower Edward Snowden on the 'nothing to hide' argument: 'No different than saying you don't care about free speech because you have nothing to say'

Keumars Afifi-Sabet TechRadar

Browser Fingerprinting – How websites track you across internet –without cookies

MySysInfo Mysysinfo.com

Microsoft Warns of GigaWiper Backdoor Built to Destroy Windows PCs

The 4 Security Companies That Earn Highest Marks for Data Protection

Tyler Lacoma CNET

My burner email blocklist blocked me

Benjamin Piouffle Piouffle.com

DLSS Swapper creator issues malware warning over user-submitted DLL libraries

Alfonso Maruccia TechSpot

I finally tried Tailscale, and now I get the hype

Yadullah Abidi MakeUseOf

Is It Safe to Host HTML That Runs Its Own JavaScript?

ShareMyPage Sharemypage.app

Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodes

info@thehackernews.com (The Hacker News) Internet

This antivirus doesn’t slow your PC down — it quietly keeps it safe for $19.99

DealPost Team PCWorld

Google's new remote attestation scheme is every bit as terrible as its old remote attestation scheme

Cory Doctorow EFF

What's the best way to do authentication in modern applications

Neciu Dan Neciudan.dev

Ray-Ban Meta privacy problems go from bad to worse with nightmarish 'super sensing' feature

Andy Boxall Android Police

SCMBANKER Malware Uses ClickFix Lures to Target Mexican Banking Users

info@thehackernews.com (The Hacker News) Internet

I audited my Windows laptop on hotel Wi-Fi and was shocked by what it exposed

Gregory Gibson MakeUseOf

NATO taps Accenture and Leonardo to build a €200M secure cloud backbone

Ana-Maria Stanciuc The Next Web

Experts warn of the 'first documented case of agentic ransomware' — dangerous JADEPUFFER attack run entirely by an LLM

Christian Cawley TechRadar

Cybersecurity and the Gap Between Skill and Ability

Bruce Schneier Schneier.com

CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV

info@thehackernews.com (The Hacker News) Internet

Orbia CISO Miranda Ritchie on building security into sustainable infrastructure

Mirko Zorz Help Net Security

Bitdefender Identity Theft Protection review

Krishi Chowdhary TechRadar

Victims of 23andMe data breach to get $47m payout, judge rules

https://www.facebook.com/bbcnews BBC News

CISA Deploys Anthropic’s Mythos AI to Hunt Vulnerabilities in U.S. Government Code

Pierluigi Paganini Securityaffairs.com

7 Habits That Are More Important Than Using Antivirus on Your Phone

Marshall Gunnell CNET

Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities

info@thehackernews.com (The Hacker News) Internet

Cloud Storage Vs. Local Storage: Is One Safer For Your Personal Data?

staff@bgr.com (Kyle Schurman) BGR

How To Create a Multi-Layered Security Setup for All Your Devices

AndroidGuys AndroidGuys

Cybersecurity jobs available right now: July 7, 2026

Anamarija Pogorelec Help Net Security

Someone made an ESP32 passwordless fingerprint unlocker, and you can make one at home

Simon Batt XDA Developers

AI agent exploits Langflow in first fully autonomous ransomware attack

Duncan Riley SiliconANGLE News

India Proposes Stricter VPN Regulations Requiring Local Offices, Compliance Officers

Douglas Harrington Naturalnews.com

Complete Google Chrome Privacy Audit: Securing Passwords, Payments, and History

Dinsan Chromestory.com

Enhance your password security with up to 50% off Keeper plans — secure credential generation, storage, and autofill to help protect all your online accounts

benedict.collins@futurenet.com (Benedict Collins) , Benedict Collins TechRadar

Alleged Operators of HiAnime Piracy Ring Arrested in Vietnam with U.S. Support

Ernesto Van der Sar Torrentfreak.com

Planned obsolescence is now a Windows PC security nightmare

Alaina Yee PCWorld

New Java-Based QuimaRAT MaaS Built to Run on Windows, Linux, and macOS

info@thehackernews.com (The Hacker News) Internet

Researchers Claim First Fully Agentic Ransomware: JadePuffer

Phil Muncaster Infosecurity Magazine

When checking the URL isn’t enough: a Device Code Phishing attack via a Microsoft website

Roman Dedenok Securelist.com

The Threat Landscape Has Evolved to Target Your Data, Not Just Your Devices

Dianna Gunn CNET

Why DMARC's new "NP" tag can fail with DNSSEC

Matteo Dmarcwise.io

Prioritize GPS or Risk Losing Future Wars

Felix Miller Daily Signal

Fake Mac Clipboard App Delivers New Password-Stealing Malware

Jason Nelson Decrypt

Texas State Agency Breach Exposes Driver’s Licenses and Passports of 3 Million Residents

Daily Hodl Staff The Daily Hodl

VeraCrypt Portable 1.26.29 (free disk encryption) Released

John T. Haller Portableapps.com

Week in review: SimpleHelp vulnerability exploited, Oracle EBS Payments flaw under attack

Help Net Security Help Net Security

iPhone 18 Pro Leaks Reveal Apple’s Move to an Ultra-Efficient 2Nm Chip

Roland Hutchinson Geeky Gadgets

Tasmania moves to ban 'disgraceful' non-consensual sharing of sexual imagery

Crystal McKay ABC News (AU)

Alibaba Bans Claude Code: The Backdoor Scare Explained

Matt Mickiewicz SitePoint

‘You fix it by making the secure option just as fast and frictionless as the risky one’: Practical advice on addressing shadow AI

desire.athow@futurenet.com (Desire Athow) , Desire Athow TechRadar

Security Bite: A note on camera covers in 2026

Arin Waichulis 9to5Mac

BareMetal RAM Dumper – Bare-metal x86 tool for Cold Boot Attack experiments

pIat0n Github.com

North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign

info@thehackernews.com (The Hacker News) Internet

FBI: TeamPCP Compromised Dev Tools to Steal Cloud Credentials

Pierluigi Paganini Securityaffairs.com

Soatok's Informal Guide to Threat Models

View Archive → Soatok.blog

Cybersecurity in space: Protecting the next frontier of critical infrastructure

Dr. Tim Sandle Digital Journal

This Week in Security: Windows 10 Gets Another Year, SmartTV Botnets, Hiding Payloads, and LastPass Customer Leak

Mike Kershaw Hackaday

The most important file in my password manager isn't a password

Gavin Phillips MakeUseOf

North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets

info@thehackernews.com (The Hacker News) Internet

India plans VPN crackdown

Faster and further reaching — NordVPN quietly brings its obfuscated servers to its in-house censorship-resistant protocol

monicajwrites@gmail.com (Monica J. White) , Monica J. White TechRadar

EU Politicians Investigated Pegasus Spyware. Then It Ended Up on One of Their Phones

Lily Hay Newman, Matt Burgess Wired

EU lawmaker investigating surveillance hacked by Israeli spyware, report says

Erin Hale, John Power Al Jazeera English

Organizations struggle to prioritize known cyber risks

Anamarija Pogorelec Help Net Security

iOS 27 helps apps detect when a user may be getting scammed in real time

Marcus Mendes 9to5Mac

Malware found spreading through sponsored ads on X

Arin Waichulis 9to5Mac

I finally understand why Microsoft made TPM mandatory

Tashreef Shareef MakeUseOf

Incogni Review: Comprehensive and Transparent Data Removals

Zachary McAuliffe CNET

Cybersecurity Mission Creep in the US

Bruce Schneier Schneier.com

T-Mobile is about to eliminate a major vulnerability from its network

Aamir Siddiqui Android Authority

Alleged Scattered Spider Member Extradited to US

Phil Muncaster Infosecurity Magazine

Opera’s new Paste Protect feature blocks suspicious commands copied from websites

Marcus Mendes 9to5Mac

AI-Generated Browser Ransomware Abuses Chromium API on Windows and Android

info@thehackernews.com (The Hacker News) Internet

Apple Hide My Email Vulnerability Exposes Real Email Addresses

Hartley Charlton MacRumors

6 security settings every GitHub maintainer should enable this week

Natalie Guevara Github.blog

Ditch Email Attachments - Here's An Easier Way To Share Files

staff@bgr.com (Daniel Trock) BGR

OpenClaw: risks for agent users and how to mitigate them

Kaspersky Securelist.com

Apple Crackdown Suspected After iPhone 18 Pro Leak Videos Disappear

Tim Hardwick MacRumors

A critical exploit bypasses Microsoft Defender in Windows 11 and Windows 10 — so much for "everyday risk protection without additional software"

kevinokemwa@outlook.com (Kevin Okemwa) , Kevin Okemwa Windows Central

Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses

info@thehackernews.com (The Hacker News) Internet

Beyond Prompt Injection

Shania Rasheed Nalagath Oreilly.com

Please don't use the free movie hack that everyone's sharing

Gavin Phillips MakeUseOf

Hacking a Reverse Osmosis Water Filter Through its Smart Faucet

Maya Posch Hackaday

Apple iPhone 18 Pro secrets leaked in Tata Electronics hack: What we know

Marthe van der Wolf Al Jazeera English

mssPortable 1.453.345 (Microsoft Safety Scanner antivirus launcher) Released

John T. Haller Portableapps.com

Prediction markets paragraphs to ponder

Tyler Cowen Marginalrevolution.com

How And Why To Fight Back Against Social Media Bans

Molly Buckley Techdirt

Apple accelerates security updates in response to AI-powered hacking risks

Marcus Mendes 9to5Mac

ZachXBT Accuses KuCoin of Pressuring Hack Victim and Using Fake KYC Accounts

Nana K. Bitcoinfoundation.org

LGBT Q&A: What Data Are Companies in the UK Collecting When Verifying My Age?

Paige Collings, Erica Portnoy EFF

Linux isn't immune to malware — the AUR just proved it

Dipan Saha MakeUseOf

236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers

info@thehackernews.com (The Hacker News) Internet

Supreme Court restricts use of geofence warrants

Nina Totenberg NPR

Factoring RSA Keys with Many Zeros

Bruce Schneier Schneier.com

‘Free’ World Cup streams are spreading scams, not soccer

Alaina Yee PCWorld

Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer

info@thehackernews.com (The Hacker News) Internet

Boss Tracks Employees Using The Same App He Uses On His Kids, Threatens Them With Fines: “So So So Wrong”

Kotryna Br Boredpanda.com

Amazon S3 server access logs now deliver to Amazon CloudWatch Logs and Amazon S3 Tables

aws@amazon.com Amazon.com

Process Monitor Portable 4.04 (real-time file, registry and process monitor) Released

John T. Haller Portableapps.com

Telling internet platforms where to stick public service media will serve nobody. Turn it on its head

Rupert Goodwins Theregister.com

Watch out — that income tax form could actually be dangerous malware

Efosa Udinmwen TechRadar

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 103

Pierluigi Paganini Securityaffairs.com

RF Hacking A Ceiling Fan Via The Remote

Zoe Skyforest Hackaday

Data breach exposes up to 14.2 million email logins at six ISPs

Bill Toulas BleepingComputer

The biggest privacy leak in my living room was the TV itself

Pankil Shah MakeUseOf

Week in review: Fortibleed campaign’s impact on orgs, Cisco Unified CM flaw exploited

Help Net Security Help Net Security

Germany’s spy agency comes in from the cold

Sam Jones The Irish Times

How schools breach children’s data privacy: A snapshot

Pratishtha Bagai The Times of India

Security News This Week: LastPass Users Had Their Data Stolen—Again

Lily Hay Newman Wired

Clean GitHub repo tricks AI coding agents into running malware

Bill Toulas BleepingComputer

New FBI Alert: Russian Intelligence Uses Signal Recovery Keys to Access Messages

Pierluigi Paganini Securityaffairs.com

Five reasons why I use an email alias, and you should too

Dhruv Bhutani Android Authority

Job scams are getting more sophisticated, and they’re costing Americans millions

Jacqueline Munis Fortune

Chinese Framework Powers 200,000 Scam Sites

Ionut Arghire Securityweek.com

Stop cyber threats before they reach your PC with Bitdefender Antivirus Plus for $19.99

Stack Commerce Popular Science

Post-Mythos Cybersecurity: Keep calm and carry on

Morgan Hotonnier Cephalosec.com

Even the Secret Service won't use company-issued phones

Jessica Lyons Theregister.com

His Tinder Match Was Going Great — Then She Offered to Teach Him Crypto Trading and Something Felt Off

Jayne Elliott Twistedsifter.com

US bans imports of more Chinese technology goods

By David Shepardson Yahoo Entertainment

Cloudflare – China Digital Times and the Fight Against Censorship

CC Cloudflare.com

How Android privacy threats are evolving — and how Bitdefender helps keep control in your hands

tips@androidcentral.com (Sponsored) , Sponsored Android Central

Alan Turing’s Remarkable, Nearly-Forgotten Voice Encryption Device

Donald Papp Hackaday

Chinese-Speaking APT Deploys New TinyRCT Backdoor in Southeast Asia Campaign

info@thehackernews.com (The Hacker News) Internet

NAIC confirms data breach with ShinyHunters claiming 3.1TB of data stolen in Oracle zero-day attack

Sead Fadilpašić TechRadar

Captcha proves you're human. HATCHA proves you're not

mondaycom Github.com

Google Details Turla's New STOCKSTAY Backdoor Used in Ukraine Espionage Attacks

info@thehackernews.com (The Hacker News) Internet

ZeroTier Quantum RC2 brings post-quantum security closer to general availability

Industry News Help Net Security

The 'papers, please' era of the internet will decimate your privacy

Sarah McLaughlin Fire.org

Primed for Malware: Stop Selling Compromised Android Devices

Alexis Hancock EFF

Security boss thought MFA would be too much security

Simon Sharwood Theregister.com

Akrites: The Latest Attempt to Protect Open-Source From AI Attacks Has Arrived

Steven J. Vaughan-Nichols DevOps.com

ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More Stories

info@thehackernews.com (The Hacker News) Internet

'27 million stolen login credentials have been recovered': Global coordinated takedown hits SocGholish, Amadey, and StealC malware networks where it hurt

Sead Fadilpašić TechRadar

The FCC’s Spam Call Proposal Is Just a Data Collection Scheme

Chao Liu, Cooper Quintin EFF

Mitiga unveils Agentic Runtime Security for cloud, SaaS, identity, and AI protection

Industry News Help Net Security

New Mistic Backdoor Linked to KongTuke in ClickFix and ModeloRAT Campaigns

info@thehackernews.com (The Hacker News) Internet

Elite network says it was hacked after members’ personal data was left exposed

Danny Bradbury Malwarebytes.com

Stellar Cyber improves threat detection and data onboarding in new updates

Industry News Help Net Security

CRM compliance: What it is and how to nail It with your team & tech

rsukhraj@hubspot.com (Ramona Sukhraj) Hubspot.com

Amadey and StealC Malware Network Disrupted, 27M Stolen Credentials Recovered

info@thehackernews.com (The Hacker News) Internet

Exploiting vulnerabilities in Johnson and Johnson web apps

Eaton Eaton-works.com

Windows updated Secure Boot just in time. Here’s what happened

Joel Lee PCWorld

Another LastPass security breach traces back to a compromised vendor

Jay Bonggolto Android Authority

LastPass notifies users of yet another data breach

Marcus Mendes 9to5Mac

GitHub Is Becoming a Giant AI Code Dump

MAREF Engineering Maref.cc

PCI Compliance Isn’t a Checkbox: How to Secure Ecommerce Checkouts Before Attackers Arrive

Kyle Knight Sucuri.net

DigiCert brings independent trust validation to confidential computing environments

Industry News Help Net Security

There's a 30-second change that makes public Wi-Fi noticeably safer — and it costs nothing

Jorge Aguilar MakeUseOf

Agentic AI: The Weapon That No Longer Needs a Warrior

info@thehackernews.com (The Hacker News) Internet

Why I abandoned LastPass after moving my passwords to this Bitwarden setup

Rahul Naskar Android Police

Scattered Spider Hackers Plead Guilty on Day 1 of Trial

BrianKrebs Krebs on Security

Confidential Apple Files Leaked on Dark Web After Supplier Cyberattack

Tim Hardwick MacRumors

Your smart home may be whispering your secrets to strangers

Alaina Yee PCWorld

How 100 Romanian hospitals switched to pen and paper to defeat a national cyber-attack

Joe Tidy - Cyber Correspondent, World Service BBC News

Here's What 'Military-Grade' Encryption Really Means

staff@bgr.com (Alan Bradley) BGR

Free, no-signup World Cup streams serve scams instead of football

Sinisa Markovic Help Net Security

Rickrolling the World Cup

Navarre Bartz Hackaday

New OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealer

info@thehackernews.com (The Hacker News) Internet

FTC Warning: Crypto ATM Scams Up 1,000%—How To Protect Yourself

Steve Weisman, Contributor, Steve Weisman, Contributor https://www.forbes.com/sites/steveweisman/ Forbes

Microsoft scrambles to patch a Defender security flaw called RoguePlanet

Mikael Markander, Hans-Christian Dirscherl PCWorld

WhatsApp's "End-to-End Encryption" Is the Biggest Lie in Tech History

Adrian Găitan Medium

AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network

info@thehackernews.com (The Hacker News) Internet

Encrypted DNS still tells an eavesdropper where to look

Mirko Zorz Help Net Security

4,300+ Outdated Routers Hijacked in Stealthy Spy Infrastructure by AryStinger malware

Pierluigi Paganini Securityaffairs.com

Security Affairs newsletter Round 582 by Pierluigi Paganini – INTERNATIONAL EDITION

Pierluigi Paganini Securityaffairs.com

AryStinger botnet infected thousands of D-Link routers worldwide

Bill Toulas BleepingComputer

I benchmarked Quad9, NextDNS, and Cloudflare, and the winner wasn't the big name

Gavin Phillips MakeUseOf

Study Reveals Exploit That Lets Your Browsing History Be Spied On Using Your SSD

staff@bgr.com (Aaron Greenbaum) BGR

A Critical Deadline Is Approaching for Windows and Linux Security

Dan Goodin, Ars Technica Wired

Malware Has Gotten Smarter. Here's How Your Antivirus Has, Too

Marshall Gunnell CNET

Week in review: 74k Fortinet firewall credentials stolen, Splunk Enterprise RCE under active attack

Help Net Security Help Net Security

Deal Days has a 15-device VPN for less than $30

Boing Boing's Shop Boing Boing

These AI Scams All Have Red Flags. Here's How to Spot Them

Dianna Gunn CNET

As an Android expert, here are 5 popular apps I don’t recommend downloading

Pankil Shah Android Authority

Nintendo confirms data stolen via third-party cyberattack — but sadly no big secrets were revealed

Sead Fadilpašić TechRadar

Optimizing Microsoft Defender Antivirus update delivery and fallback order

IT News 4sysops.com

Investigation Into Alleged Kate Middleton Medical Records Sale Scheme Ends In “Formal Caution”

Valentine Ulgu-Servant Vanity Fair

Lithuanian startup launches open-source network to detect Shahed-type drones

LRT.lt Www.lrt.lt

CISA Warns of Active Exploitation Following FortiBleed Leak

Pierluigi Paganini Securityaffairs.com

This Week in Security: Arch AUR, Steam Marketplace, WordPress All Face Issues, Taco-Themed Coding, and Mythos Makes National News

Mike Kershaw Hackaday

Everything's bigger and better in Texas – even data breaches

Connor Jones Theregister.com

From Assistive to Agentic: The AI Shift That's Redefining Threat Management

info@thehackernews.com (The Hacker News) Internet

The Most Dangerous Surveillance Bill You’ve Probably Never Heard Of

Geeks are Sexy Geeksaresexy.net

4 security upgrades in Android 17 you didn’t know about, but will be glad to have

Robert Triggs Android Authority

Canada Is Forging Ahead with Its Dangerous Surveillance Bill

Thorin Klosowski EFF

Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data

info@thehackernews.com (The Hacker News) Internet

The Steam Workshop Is Being Used To Spread Malware To Thousands Of Users

staff@bgr.com (Aaron Greenbaum) BGR

Your browser tab could become encrypted storage for someone else’s files

Mirko Zorz Help Net Security

100 days after the Iran war started — Tehran-backed group breaches California Water Service but claims they 'chose not to disrupt water access'

Efosa Udinmwen TechRadar

I found 10k GitHub repositories distributing Trojan malware

Orchid Orchidfiles.com

‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm

BrianKrebs Krebs on Security

The Scripts on Your Checkout Page Are Now a PCI DSS Problem

info@thehackernews.com (The Hacker News) Internet

'This creates a misleading impression of safety': Experts warn of hackers hijacking legitimate news websites and reviews to drum up publicity

Sead Fadilpašić TechRadar

Securing the Future of AI Agents

Rohin Shah, Four Flynn Deepmind.google

Embedding Forbidden Text in Spyware to Discourage AI Analysis

Bruce Schneier Schneier.com

The enemy within: how to stop a simple Teams message taking down your business

Andrea Sivieri TechRadar

Cybercrime Surges in APAC as Digitalization Takes Hold

Phil Muncaster Infosecurity Magazine

Crypto Clipper uses Tor and worm-like propagation for persistence and control

Microsoft Defender Security Research Team and Microsoft Defender Experts Microsoft.com

How security teams are getting credential visibility into developer endpoints

Help Net Security Help Net Security

Microsoft Confirms RoguePlanet Zero-Day in Defender, Patch Under Development

Pierluigi Paganini Securityaffairs.com

124 million passwords added to breach database. Yours may be in there, too

Viviane Osswald PCWorld

Gamers beware — experts flag Steam Workshop is being abused to spread malware via Wallpaper Engine app

Sead Fadilpašić TechRadar

Nintendo Acknowledges Employee Data at Risk After Third-Party Service Breach

Tom Phillips IGN

How Did the Feds Get Into Anti-ICE Activists’ Signal Messages?

Nikita Mazurov The Intercept

Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats

info@thehackernews.com (The Hacker News) Internet

Surfshark VPN review: Affordable protection with solid performance

Tyler Cooper Salon

Python Software Foundation: Everything Security at PyCon US 2026

Seth Michael Larson Blogspot.com

AMD silently removes memory encryption from consumer Ryzen CPUs, leaving users unaware that they may be vulnerable — security feature vanishes after newer AGESA firmware, AMD engineers go radio silent when pressed about the change

Etiido Uko Tom's Hardware UK

Russian Spam and Profanities Are Now Plaguing the Arch Linux AUR

BeauHD Slashdot.org

ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures

info@thehackernews.com (The Hacker News) Internet

Apple Details Terminal Anti-Scam Warning in macOS

Tim Hardwick MacRumors

US Limits on Anthropic Fable AI Could Hurt Cybersecurity

Chris Stokel-Walker Scientific American

The UK’s Most Unpopular Government on Record Just Went All-In On Digital Surveillance, Censorship and Control

Nick Corbishley Nakedcapitalism.com

The FBI says it’s already seized 13 drones in Atlanta near World Cup stadiums — and pilots could face fines up to $100,000 if they don’t follow these new rules

Sam Kieldsen TechRadar

What Can Hackers Do With Your Phone Number? What To Know

Joe McKendrick, Senior Contributor, Joe McKendrick, Senior Contributor https://www.forbes.com/sites/joemckendrick/ Forbes

Chinese Hackers Abused Google Workspace Rules to Steal Research and Defense Emails

info@thehackernews.com (The Hacker News) Internet

DOGE whistleblower's brake line was cut after Musk posted about him on X: Timeline of what we know

Taija PerryCook Snopes.com

Why your help desk is still your biggest security risk

Greg Nelson TechRadar

2021 Honda Civic infotainment system can be jailbroken via USB — flaw uses public Android test keys to install unauthorized apps, enables for 'EvilValet' attacks

editors@tomshardware.com (Jowi Morales) , Jowi Morales Tom's Hardware UK

Crown alleges man accessed $5.7m dark web bitcoin to buy home

Jacinta Counihan ABC News (AU)

152 Chrome Wallpaper Extensions with 105K Installs Linked to Adware and Fake Traffic

info@thehackernews.com (The Hacker News) Internet

Modat enhances Magnify with Passive DNS for faster threat hunting and infrastructure analysis

Industry News Help Net Security

What If It All Came Out?

Bridget Read New York Magazine

FBI disrupts massive AI-powered phishing service using a million URLs

Bill Toulas BleepingComputer

Upcoming Speaking Engagements

B. Schneier Schneier.com

Privacy as a Fundamental Right? The Government’s Terrible Privacy Track Record Suggests Virtue Signalling Over a Genuine Commitment

Michael Geist Michaelgeist.ca

‘Nothing works’: Russians react as intelligence services shut down the internet

Anastasia Stognei and Max Seddon The Irish Times

Week in review: Exploited Check Point VPN zero-day, Oracle PeopleSoft servers under attack

Anamarija Pogorelec Help Net Security

10th Gen Honda Civic Updates Are Signed with AOSP Test Keys

Eric McDonald Juniperspring.org

Ukrainian Extradited from Ireland Pleads Guilty Over Role in Conti Ransomware Scheme

Pierluigi Paganini Securityaffairs.com

How To Avoid Text Scams And Spot Red Flags Early

Anisha Sircar, Contributor, Anisha Sircar, Contributor https://www.forbes.com/sites/anishasircar/ Forbes

4 security features I always set up on every new Android phone, and you should too

Pankil Shah Android Authority

Chinese hackers hijack auth flow, spy on isolated network for a decade

Bill Toulas BleepingComputer

'WhatsApp Gold' is real scam, but 'Martinelli' video allegedly spreading hoax doesn't exist

Megan Loe Snopes.com

Iran-Linked Handala Breached a California Water Utility. It Could Have Done Worse, and It Knows That.

Pierluigi Paganini Securityaffairs.com

Arch Linux Now Believes Malware Incident Under Control: More Than 1,500 Affected Packages

Michael Larabel Phoronix

This Week in Security: Microsoft on Microsoft, Register Your Domains, Linux on ARM, and FreeBSD Joins the File Cache Club

Mike Kershaw Hackaday

Hades malware campaign tricks AI scanners with fake nuclear weapon prompts — malicious code triggers safety failsafes so scanners skip the payload

editors@tomshardware.com (Bruno Ferreira) , Bruno Ferreira Tom's Hardware UK

How the gaming and gambling industry can strengthen their cyber defenses

Sam Peters TechRadar

LangGraph Flaw Chain Exposes Self-Hosted AI Agents to Remote Code Execution

info@thehackernews.com (The Hacker News) Internet

Comcast Business SecurityEdge Preferred strengthens security for small businesses

Industry News Help Net Security

Digital Sovereignty Becomes an Imperative as the US Reads Dutch Emails

Kevin Korte Korte.co

Android apps track you by default — this free app tells you how bad it really is

Gavin Phillips MakeUseOf

Pokémon GO scan controversy resurfaces after Niantic Spatial defense partnership

Paul McNally The Escapist

INTERPOL Operation Takes Down Sniper Dz Phishing Platform, Arrests Administrator

info@thehackernews.com (The Hacker News) Internet

UGH! Here Comes Another New ‘Free iPhone’ Scam

Chris Hauk Mactrast.com

UpdraftPlus WordPress Vulnerability Puts 3 Million Sites At Risk via @sejournal, @martinibuster

Roger Montti Search Engine Journal

Signal Alums Reveal ‘Encrypted Spaces,’ a System for Making Private Collaboration Apps

Andy Greenberg Wired

AI Broke Vulnerability Management. That's Why CISOs Are Moving Budget to BAS.

info@thehackernews.com (The Hacker News) Internet

Hackers are using TikTok videos offering 'free Spotify Premium' to spread malware and steal passwords

Craig Hale TechRadar

What Does Encrypted Mean on iMessage?

Eden Gordon Mental Floss

Your browser is too nosy. Change these 5 settings now

Steffen Zellfelder PCWorld

How the UK is tackling industrialized crypto fraud

Jordan Wain TechRadar

Threat actors are recruiting the people who hold cloud logins

Anamarija Pogorelec Help Net Security

JDY Botnet Evolves After KV Takedown, Targets Military Networks

Pierluigi Paganini Securityaffairs.com

South Korea fines Coupang $408m over biggest data leak in country’s history

Al Jazeera Al Jazeera English

The iPad was on Tailscale: a WebRTC debugging story

p2claw P2claw.com

Your router's most questionable setting is probably still enabled, exposing your Wi-Fi to hackers

Tanveer Singh XDA Developers

The quantum clock is ticking: it's Bitcoin's problem, not Ethereum's

Samir Tabar CoinDesk

Hackers used Meta AI to expose over 34,000 Instagram accounts, but Meta isn’t slowing down

Shimul Sood Android Authority

I replaced Pi-hole with Unbound for a week, and the privacy upgrade wasn't the only win

Shekhar Vaidya XDA Developers

Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs

info@thehackernews.com (The Hacker News) Internet

Pros and cons of using a VPN

Jared Howe Salon

Apple's AI Can Now Change Your Passwords. What Could Possibly Go Wrong?

Kyle Reddoch Kylereddoch.me

Windscribe now accepts cash for VPN subscriptions — but admits the process is 'the slowest, riskiest way to pay'

Rene Millman TechRadar

This paint app didn't own the domain that matches its name for 22 years

Simon Batt XDA Developers

North Korean Hackers—Posing As Fake IT Workers—Behind Nearly Half Of All Tech Firm Attacks, Report Says

Ty Roush, Forbes Staff, Ty Roush, Forbes Staff https://www.forbes.com/sites/tylerroush/ Forbes

This New Computer Virus Is Disguising Itself As A Popular Video Game

staff@bgr.com (Aaron Greenbaum) BGR

Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer

info@thehackernews.com (The Hacker News) Internet

Voice is the next cybersecurity battleground, and AI is accelerating the risk

Mark Himelfarb TechRadar

Python Bytes: #483 Thanks Brian

Michael Kennedy (@mkennedy) Pythonbytes.fm

There’s a devious new free phone scam, to add to the lengthy list

Ben Lovejoy 9to5Mac

Meta Blocks NSO Group's New WhatsApp Phishing Attack, Files Contempt Order

info@thehackernews.com (The Hacker News) Internet

UNC3753 Used Vishing and Physical Intrusions in U.S. Data Theft Extortion Campaign

info@thehackernews.com (The Hacker News) Internet

Black Market Tinkerers on Facebook Marketplace Offer to Hide 'Recording Lights' on Meta Smartglasses

EditorDavid Slashdot.org

When attacks spread too far: Lessons from real cyber attack case studies

Help Net Security Help Net Security

Fighting Spyware: An Update From WhatsApp

Facebook Fb.com

Why sovereignty has become the new measure of cyber resilience

Warren O’Driscoll TechRadar

Security Affairs newsletter Round 580 by Pierluigi Paganini – INTERNATIONAL EDITION

Pierluigi Paganini Securityaffairs.com

Week in review: Cisco SD-WAN 0-day exploited, Patch Tuesday forecast

Help Net Security Help Net Security

PSA: Incognito Mode Doesn't Totally Hide Your Online Activity

Nelson Aguilar CNET

Why Autonomous Robot Dogs Are Becoming a National Security Threat

Julian Horsey Geeky Gadgets

The Clock Is Already Ticking: Why Post-Quantum Cryptography Can’t Wait

Michael Wright Imperva.com

U.S. Treasury Sanctions Iran’s Nobitex Crypto Exchange Amid Regional Conflict

Sterling Ashworth Naturalnews.com

The Smart TV in Your LivingRoom Is a Node in the AIScraping Economy

buchodi Includesecurity.com

Meta confirms 1000s of Instagram accounts were hacked by abusing its AI chatbot

Zack Whittaker Weekinsecurity.com

Apple @ Work: How zero-touch enrollment killed the market for stolen corporate devices

Bradley C 9to5Mac

Critical Everest Forms Pro flaw exploited to take over WordPress sites

Bill Toulas BleepingComputer

Free Apps Are Quietly Turning Smart TVs Into Web-Scraping Proxies for AI

info@thehackernews.com (The Hacker News) Internet

The US Military Quietly Turned GPS Into a Global 'Numbers Station,' Evidence Suggests

BeauHD Slashdot.org

[2606.03811] AI Agents Enable Adaptive Computer Worms

pythoneer Arxiv.org

Claude Opus Found a Four-Year-Old Hole in Zcash’s Privacy Layer. Nobody Knows If Someone Already Used It.

Pierluigi Paganini Securityaffairs.com

ChatGPT just gave Free users a powerful defense against prompt injection attacks

Simon Batt XDA Developers

Researchers build autonomous AI worm that can reason and adapt

Alissa Irei Techtarget.com

The Empty Field That Wasn't: GPS, OTAD and Two Decades of Encrypted Broadcasts

Steven J. Murdoch Benthamsgaze.org

What happens when your phone is confiscated at the airport

Gaby Del Valle The Verge

U.S. Military Turned GPS into a Global "Numbers Station"

Becky Ferreira 404media.co

IronWorm and New Miasma Worm Variant Hit npm in Supply Chain Attacks

info@thehackernews.com (The Hacker News) Internet

Your Google Pixel Is Getting Smarter At Detecting Scam Calls

staff@bgr.com (Alan Bradley) BGR

Mantine-datatable (and others) compromised – owner account suspended

icflorescu Github.com

Canada’s Bill C-22: Why Signal, Apple, and top VPNs are fighting the 'surveillance' law

chiara.castro@futurenet.com (Chiara Castro) , Chiara Castro TechRadar

Unocoin Bitcoin theft case: Karnataka Police SIT names Congress MLA N A Haris’s son in chargesheet

Express News Service The Indian Express

"2,000 to 3,000 new hits every single day": Dangerous malware "WeedHack" hides in Minecraft mods, gives attackers webcam access, Steam and Discord passwords, and more

lowryb3865@gmail.com (Brendan Lowry) , Brendan Lowry Windows Central

The safest password is the one you never type

Gavin Phillips MakeUseOf

No data breach: IIT Roorkee rubbishes claims of privacy violation affecting JEE Advanced 2026 students

Education Desk The Indian Express

PCPJack Hijacks 230 AWS, Google Cloud, and Azure Servers for Covert SMTP Relay Network

info@thehackernews.com (The Hacker News) Internet

FBI Claims Google Employee Won Over $1M On Polymarket Bets Using Company Data

staff@bgr.com (Alec Hively) BGR

Amazon Cognito unlocks advanced capabilities with next-generation infrastructure

Howie Li Amazon.com

LinkedIn China Spying Threat Prompts Warning From US, Allies

BeauHD Slashdot.org

Infosecurity Europe: How Proton Fights Against Cybercriminals Using Its Services

Kevin Poireault Infosecurity Magazine

Anemoi Leak Caused by VisualArts Server Breach

Kite Stenbuck Siliconera

Nobody needs Mythos or 0-days to build a chaos-causing computer worm – free open source models work just fine

Jessica Lyons Theregister.com

The waitlist is not the control: Why frontier cyber AI needs business-side guardrails

Nik Kale TechRadar

Fake Sites Mimicking Open-Source Tools Rank High on Google to Deliver Malware via TDS

info@thehackernews.com (The Hacker News) Internet

This new AI-powered worm spreads itself and adapts in real time — here's how to stop it

Sara Heritage MakeUseOf

Infosecurity Europe: Raise Security Concerns with Procurement Now, Because Quantum Can’t Wait

Phil Muncaster Infosecurity Magazine

The modern-day business can learn a lot about risk from this year’s mega events

Help Net Security Help Net Security

Travel scams are everywhere. Here’s how to avoid them

Pieter Arntz Malwarebytes.com

Hacking Meta’s AI Chatbot

Bruce Schneier Schneier.com

Show HN: Rscrypto, pure-Rust crypto with industry leading public benches

loadingalias Github.com

Scientists just built a powerful AI computer worm that learns as it spreads

Jackie Flynn Mogensen Scientific American

Ultrahuman says recent security breach didn’t affect passwords or credit cards

Andrew Romero 9to5google.com

New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare

info@thehackernews.com (The Hacker News) Internet

Android Gets Fake Call Detection That Uses RCS

BeauHD Slashdot.org

Weedhack malware campaign infects 116,000 mod-hungry Minecraft players systems through SEO poisoning and YouTube

Sead Fadilpašić TechRadar

Argamal: Malware hidden in hentai games

Mikhail Reznichenko Securelist.com

Capstone – multi-platform, multi-architecture disassembly framework

Capstone Capstone-engine.org

One Step Forward, Two Steps Back: CA’s AB 1856 Exempts Open Source But Expands Age-Gating

Molly Buckley Techdirt

Huge Botnet Linked To Russia Infected Over 10 Million Devices Before Being Shut Down

staff@bgr.com (Alec Hively) BGR

Preinstall to persistence: Inside the Red Hat npm Miasma credential-stealing campaign

Microsoft Defender Security Research Team Microsoft.com

Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against Ukraine

info@thehackernews.com (The Hacker News) Internet

The Intersection of Encryption and AI

Bruce Schneier Schneier.com

Best VPN services for 2026

Tyler Cooper Salon

I can tell when my ISP is throttling my connection — here's the test

Jorge Aguilar MakeUseOf

The cyber risk framework protecting your organization wasn't built for this adversary

Jerry Caponera TechRadar

U.S. Midterms Have a Cyber Problem, but It's Not at the Ballot Box

lizwu@checkpoint.com Checkpoint.com

Attackers Hijack Red Hat npm Scope to Steal Cloud Secrets

Alessandro Mascellino Infosecurity Magazine

Sophos uncovers AI-powered malware lab built for EDR evasion

Sinisa Markovic Help Net Security

Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm

BeauHD Slashdot.org

⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AI-Powered Attacks, OAuth Phishing and More

info@thehackernews.com (The Hacker News) Internet

The biggest cyber threats businesses face in 2026

Phil Lees TechRadar

Your antivirus could replace your VPN, password manager, and backup app

Chris Hoffman PCWorld

Security Bite Q1 Review: May 2026

Arin Waichulis 9to5Mac

Stop managing vulnerabilities and start managing scanner assumptions

Lexi Selldorff TechRadar

OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack

info@thehackernews.com (The Hacker News) Internet

What Is Social Engineering? How Hackers Exploit People, Not Systems

An Jay Smashingapps.com

Attackers Abuse ChatGPT Share Links to Host Fake Outage Pages That Deliver Malware

Arthur Kay Ghacks Technology News

Data discovery gaps that catch enterprises off guard

Mirko Zorz Help Net Security

US, Australia, and UK Plan New Unmanned Vehicles to Protect Undersea Data Cables

EditorDavid Slashdot.org

I designed cybersecurity content for a bank. I still almost got roped into two scams when job hunting.

Sarah E. Needleman Business Insider

Week in review: Infostealer dropped via FortiClient EMS flaw, exploited Trend Micro Apex One flaw

Help Net Security Help Net Security

Dutch Authorities Dismantle Botnet Linked to 17 Million Infected Devices

info@thehackernews.com (The Hacker News) Internet

Iran reinstates some internet access but restrictions remain for most

Maziar Motamedi Al Jazeera English

Security Affairs newsletter Round 579 by Pierluigi Paganini – INTERNATIONAL EDITION

Pierluigi Paganini Securityaffairs.com

Cybercrime Crew Claims It Hacked Mike Lindell’s MyPillow

Lily Hay Newman, Dell Cameron, Matt Burgess Wired

Your VPN is probably doing way more than you need it to — here's what actually matters

Jorge Aguilar MakeUseOf

U.S. says it seized about $1 billion in Iranian crypto as pressure campaign expands

Francisco Rodrigues, AI Boost CoinDesk

This cybersecurity course library includes over 90 classes for $50

Boing Boing's Shop Boing Boing

New Report Suggests Age Verification Service Used By PlayStation And Meta Is A Privacy Mess

Lewis Parker Kotaku

‘The moment infrastructure moves to orbit, that assumption disappears’: Layered access control, physical redundancy and rapid component replacement are major orbital challenges

desire.athow@futurenet.com (Desire Athow) , Desire Athow TechRadar

PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation

info@thehackernews.com (The Hacker News) Internet

Bitcoin’s biggest quantum risk may not be wallet keys. An early investor fears something bigger

Shaurya Malwa CoinDesk

Malicious npm packages abuse dependency confusion to profile developer environments

Microsoft Defender Security Research Team Microsoft.com

This Week in Security: Ubiquiti Fixes, and FreeBSD Joins the Club you Don’t Want to Join

Mike Kershaw Hackaday

Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets

info@thehackernews.com (The Hacker News) Internet

23andMe accused of failing to protect user data in new lawsuit

Katie Kindelan, Vera Drymon Abcnews.com

Microsoft warns GPU mining malware is being spread to users through SEO poisoning and AI chatbots — cryptojacking campaign targets gamers and high-end PC users with downloads disguised as popular PC utilities

Etiido Uko Tom's Hardware UK

Your Android phone has a hidden dashboard that shows which apps are spying on you

Megan Ellis XDA Developers

US troops are reportedly being targeted using location data, Pentagon says

Raphael Satter, Reuters Military Times

Closing the security blind spots that are a prime entry point for attacks

Yaz Bekkar TechRadar

Protestware for Coding Agents

Andrew Nesbitt Nesbitt.io

Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code Tunnels

info@thehackernews.com (The Hacker News) Internet

What’s in the container? Analyzing vulnerabilities, risks and protection with Kaspersky Container Security and the KIRA AI assistant

Yaroslav Shmelev, Anton Kivva, Denis Parinov, Vladimir Kuskov, Yanina Balandyuk-Opalinskaya Securelist.com

Canada vows to amend Bill C-22's encryption and metadata rules amid massive tech backlash

Rene Millman TechRadar

Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer

info@thehackernews.com (The Hacker News) Internet

Users report phishing emails coming from Microsoft’s system, and the company is digging in

kevinokemwa@outlook.com (Kevin Okemwa) , Kevin Okemwa Windows Central

Carnival confirms ShinyHunters cruised off with 6M customer records after April breach

Connor Jones Theregister.com

You Should Not Update Your Dependencies

Olivier Gambier Mendral.com

Google Security Engineer Arrested in Million-Dollar Polymarket Trading Scheme

Kate Knibbs Wired

JINX-0164 Targets Cryptocurrency Firms with Fake Recruiter Lures and macOS Malware

info@thehackernews.com (The Hacker News) Internet

These are the 5 popular apps I switched to this year

Mitja Rutnik Android Authority

Pirates in the crosshairs: how one cybercrime gang has been infecting book, movie, and TV show fans for years

Konstantin Krasilnikov, Valery Akulenko, Artem Snegirev Securelist.com

GCHQ Chief Urges Action as AI Reshapes Cyber Threats

Alessandro Mascellino Infosecurity Magazine

I'm Getting into Mesh Networks (Meshtastic, MeshCore, and Reticulum)

Jonah Aragon Jonaharagon.com

Researchers find all big-name bots bomb EU compliance tests

Dan Robinson Theregister.com

GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructure

info@thehackernews.com (The Hacker News) Internet

Warnings about removed or unsupported Play Store apps could head to Android

nickodiaz@sbcglobal.net (Nickolas Diaz) , Nickolas Diaz Android Central

Charter Communications confirms data breach — ShinyHunters blamed after threat to leak user info online

Sead Fadilpašić TechRadar

AI Chatbot Recommendations Redirect Users to Cryptojacking Malware Sites

info@thehackernews.com (The Hacker News) Internet

Your PC’s trust in Windows has an expiration date

Hans-Christian Dirscherl PCWorld

'Underminr' CDN Vulnerability Hides Malicious Traffic Behind Trusted Domains

EditorDavid Slashdot.org

ExpressVPN is the cheapest way to ensure you're secure no matter where you celebrate Memorial Day 2026 — here's the best way to pick up a plan for yourself

Rob Dunne TechRadar

Week in review: GitHub breached via poisoned VS Code extension, critical NGINX flaw exploited

Help Net Security Help Net Security

Meta sued for ‘misleading’ Texans over WhatsApp privacy

The FBI Wants ‘Near Real-Time’ Access to US License Plate Readers

Matt Burgess, Dell Cameron, Andrew Couts Wired

Apple @ Work: Why the ClickFix campaign means it is time to kill the 90 day update deferral

Bradley C 9to5Mac

Why pure extortion is replacing traditional ransomware

Pierluigi Paganini Securityaffairs.com

5 Easy Ways To Make Your Router More Secure

staff@bgr.com (Chifundo Kasiya) BGR

Oura says it gets government demands for user data. Will it share how many?

Zack Whittaker Weekinsecurity.com

Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Software

info@thehackernews.com (The Hacker News) Internet

Apple shares iPhone and Mac post-quantum cryptography code on GitHub

Marcus Mendes 9to5Mac

The sandworm malware strikes: How a hacker group stole 4,000 GitHub repositories and exposed the rot at the core of modern software security

Patrick Lewis Naturalnews.com

Trump Mobile Just Acknowledged The T1 Phone Database Leak Issue In The Worst Way Possible: Customers Still Not Notified

Rohail Saleem Wccftech

Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV

info@thehackernews.com (The Hacker News) Internet

This Week in Security: AI Generated Reports, More AI Generated Reports, GitHub Chaos, and More Linux Vulnerabilities

Mike Kershaw Hackaday

Xfinity Customers Still Have Time to Claim a Part of Comcast's $117.5M Data Breach Settlement

Tyler Graham CNET

These 5 Android permissions are basically a backdoor — never grant them to apps you don't trust

Rob LeFebvre MakeUseOf

Avoid price discrimination with this 3-year VPN subscription for $68

Boing Boing's Shop Boing Boing

WordPress 7.0 Faces Security Concerns Over AI API Keys via @sejournal, @martinibuster

Roger Montti Search Engine Journal

Lawmakers Demand Answers as CISA Tries to Contain Data Leak

BrianKrebs Krebs on Security

Megalodon GitHub Attack Targets 5,561 Repos with Malicious CI/CD Workflows

info@thehackernews.com (The Hacker News) Internet

'No-logs architecture and encryption are non-negotiable' — ExpressVPN joins the backlash against Canada's controversial Bill C-22

Rene Millman TechRadar

Cisco used AI to write security incident reports, with mixed results

Simon Sharwood Theregister.com

One Telecom Provider Hosted Most of the Middle East ’s Active C2 Infrastructure

Pierluigi Paganini Securityaffairs.com

Your smart TV is tracking everything you watch — here's why and how to stop it

Chris Hachey MakeUseOf

Amazon, Facebook, FBI have access to a private intelligence-sharing network

Glen Stellmacher Prismreports.org

Microsoft Warns of Two Actively Exploited Defender Vulnerabilities

info@thehackernews.com (The Hacker News) Internet

Lose your laptop, not your data: 7 Windows settings to enable now

Chris Hoffman PCWorld

Here are the most costly travel scams to watch out for this summer

Michelle Couch-Friedman The Points Guy

The next election could be less secure

Scott Shackelford Salon

GitHub confirms breach — thousands of internal repositories hit after employee installs malicious VS Code extension

Sead Fadilpašić TechRadar

Patch window is officially dead as AI finds bugs faster than humans can squash them

Shane Fry TechRadar

Virtru centers file collaboration around data-level protection

Industry News Help Net Security

Grafana Labs Says Code Breach Stemmed from TanStack Attack

Phil Muncaster Infosecurity Magazine

Discord adds end-to-end encryption to voice and video calls by default

Pierluigi Paganini Securityaffairs.com

QIZ Security teams up with Google Cloud to help enterprises brace for the quantum cryptography threat

Darius Popa The Next Web

Discord now uses end-to-end encryption for all voice and video calls by default

Ben Lovejoy 9to5Mac

On AI Security

Bruce Schneier Schneier.com

I switched away from Cloudflare and Quad9 after finding this alternative

Pankil Shah MakeUseOf

Discord Voice and Video Calls Now End-to-End Encrypted by Default

Tim Hardwick MacRumors

What’s keeping IT leaders up at night in the AI era?

Michael Curry TechRadar

Webworm Deploys EchoCreep and GraphWorm Backdoors Using Discord and MS Graph API

info@thehackernews.com (The Hacker News) Internet

GitHub Investigating TeamPCP Claimed Breach of ~4,000 Internal Repositories

info@thehackernews.com (The Hacker News) Internet

Discord's voice and video calls just got much more secure, but it's still leaving text messages exposed

Simon Batt XDA Developers

ZTE releases Sustainability Report 2025: driving a new chapter in sustainable development through AI

ZTE null Theregister.com

Verizon DBIR: Vulnerability Exploits Overtake Credentials as Top Access Vector

Phil Muncaster Infosecurity Magazine

7 hard truths security pros should know: 2026 DevOps Threats Report

Help Net Security Help Net Security

How an image could compromise your Mac: understanding an ExifTool vulnerability (CVE-2026-3102)

Lucas Tay Securelist.com

Trapdoor Android Ad Fraud Scheme Hit 659 Million Daily Bid Requests Using 455 Apps

info@thehackernews.com (The Hacker News) Internet

Mac users beware — this devious new infostealer malware disguises itself as official Apple tools to lure in victims

Sead Fadilpašić TechRadar

Mexican government breached by solo user with Claude, 150 GB exfiltrated

Konstantin Tkachuk Konstantintkachuk.com

Hackers Bypass Security Tools to Target Users Directly

Phil Muncaster Infosecurity Magazine

Google could fix the absolute worst thing about passkeys on Android

techkritiko@gmail.com (Jay Bonggolto) , Jay Bonggolto Android Central

Canonical launches Ubuntu Core 26

Canonical (Canonical) Canonical.com

The Windows security feature most people ignore is the one I check first on every PC

Manuviraj Godara MakeUseOf

Poland shifts away from Signal following cyberattacks on officials’ accounts

Pierluigi Paganini Securityaffairs.com

Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account

info@thehackernews.com (The Hacker News) Internet

The Lines We Thought Machines Wouldn’t Cross

Mac Slavo Shtfplan.com

This Week in Security: Android Exposes ADB, ShinyHunters Get Paid, Robot Dogs, and More

Mike Kershaw Hackaday

Grafana says hackers hit its GitHub environment, demand ransom to prevent codebase release — but it's refusing to pay

Sead Fadilpašić TechRadar

TanStack weighs invitation-only pull requests after supply chain attack

Tim Anderson Theregister.com

After fixing a family friend’s phone, I realized Google Play Protect is not doing enough

Megan Ellis Android Authority

Microsoft backtracks on Edge storing your passwords in plaintext RAM

Laura Pippig PCWorld

How to better protect your growing business in an AI-powered world

Alym Rayani Microsoft.com

A sentimental tour of late 1990s and early 2000s hacking tools

Andrea Fortuna Andreafortuna.org

Apple Project Files Allegedly Stolen in Foxconn Ransomware Attack

Tim Hardwick MacRumors

New BitLocker vulnerability exposes Windows 11 users to system breach

Quentyn Kennemer MakeUseOf

VLAN isolation sounds great until you forget the firewall rules that actually make it work

Rich Edmonds XDA Developers

European governments: 3.000 tracking sites, 1.000 phpMyAdmins, and 99% poorly

Internet Cleanup Foundation Internetcleanup.foundation

Apple supplier Foxconn confirms ransomware attack affected North American factories

Marcus Mendes 9to5Mac

GemStuffer Abuses 150+ RubyGems to Exfiltrate Scraped U.K. Council Portal Data

info@thehackernews.com (The Hacker News) Internet

NHS Expands Palantir Access To Identifiable Patient Data

Paulo Montenegro Ubergizmo

Broken Promises: RIP Instagram’s End-to-End Encrypted DMs

Thorin Klosowski EFF

Agentic SOC startup Exaforce closes $125M round at reported $725M valuation

Duncan Riley SiliconANGLE News

Is your internet provider quietly slowing down your Netflix streams? Here’s how to check (and stop it)

Rene Millman TechRadar

Downloaded Cemu for Linux recently? You may have malware

Joey Sneddon Omgubuntu.co.uk

Your Android security and privacy got huge upgrades—The Android Show reveals all

nickodiaz@sbcglobal.net (Nickolas Diaz) , Nickolas Diaz Android Central

AirBit crypto Ponzi victims can now claim slice of $400M asset haul

Connor Jones Theregister.com

The Ethereum Foundation unveils new 'Clear Signing' standard to stop users from approving malicious crypto transactions

Margaux Nijkerk CoinDesk

New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution

info@thehackernews.com (The Hacker News) Internet

12 new security features coming to Android phones in 2026

Adamya Sharma Android Authority

Patch Tuesday, May 2026 Edition

BrianKrebs Krebs on Security

Meta Can Now Read Your Instagram DMs – Here's How To Protect Yourself

staff@bgr.com (Alan Bradley) BGR

"What an insane screw up": Xbox itself leaks 'Forza Horizon 6' PC files in full a week before launch — and pirates already cracked it

jez@windowscentral.com (Jez Corden) , Jez Corden Windows Central

Obsidian plugin was abused to deploy a remote access trojan

CyberNetSec.io Netsecops.io

The rise of shadow AI

Amanda Hoover Business Insider

Taiwan's train cyber-trauma reveals a global system that’s coming off the tracks

Rupert Goodwins Theregister.com

Debian's next release just made it near-impossible for tampered binaries to sneak onto your PC

Simon Batt XDA Developers

Instagram removed end-to-end encryption for DMs. What should users do?

Pierluigi Paganini Securityaffairs.com

Windows 11 Pro has a disposable PC hidden inside it, and I wish I’d used it sooner

Pankil Shah MakeUseOf

Ollama Out-of-Bounds Read Vulnerability Allows Remote Process Memory Leak

info@thehackernews.com (The Hacker News) Internet

'People use smartphones more but invest less in their security': New report claims McAfee and Norton remain the most loved antivirus brands as users ditch lesser-known security products for free tools like Microsoft Defender or Apple Xprotect

Efosa Udinmwen TechRadar

Meta Discontinues End-to-End Encryption For Instagram Direct Messages

Paulo Montenegro Ubergizmo

5 Steps the FBI Wants You to Take to Secure Your Router Right Now

Security Affairs newsletter Round 576 by Pierluigi Paganini – INTERNATIONAL EDITION

Pierluigi Paganini Securityaffairs.com

possible malware

ticklemepink BleepingComputer

What Is the Instructure Canvas Breach? Impact, Risks, and What Institutions Should Do

Johnny Hand Trendmicro.com

This Hidden Router Setting Might Help Your Older Devices, But There's A Catch

staff@bgr.com (Alan Bradley) BGR

The EU becomes the latest authority to signal that VPNs are next, after launching its age verification app — here's how VPNs went from a necessity security tool to circumvention software that needs to be restricted

chiara.castro@futurenet.com (Chiara Castro) , Chiara Castro TechRadar

Quasar Linux RAT (QLNX): A Fileless Linux Implant Built for Stealth and Persistence

Pierluigi Paganini Securityaffairs.com

FCC reverses course, allows software updates for foreign-made drones and routers until 2029 — agency says blocking security patches could create cybersecurity risks

Etiido Uko Tom's Hardware UK

Fake OpenAI repository on Hugging Face pushes infostealer malware

Bill Toulas BleepingComputer

Fake macOS Troubleshooting Sites Used to Steal iCloud Data in ClickFix Scam

Deeba Ahmed HackRead

Universities Suspend Final Exams After Canvas Hack

Ryan Quinn Inside Higher Ed

EU calls VPNs "a loophole that needs closing" in age verification push

Alex Lekander Cyberinsider.com

Non-determinism is an issue with patching CVEs

Flox Team Flox.dev

OpenAI introduces GPT‑5.5‑Cyber for high-impact cybersecurity research

Maria Deutscher SiliconANGLE News

With Denuvo Completely Defeated, 2K Turns To Annoying Online Check In Requirement

Timothy Geigner Techdirt

This Week in Security: Another Linux Exploit, Ubuntu Knocked Offline, Finals Interrupted, and Backdoored Tools

Mike Kershaw Hackaday

Meta can see your Instagram messages now, and it's time to stop using it

sanujb6@gmail.com (Sanuj Bhatia) , Sanuj Bhatia Android Central

The Canvas Hack Is a New Kind of Ransomware Debacle

BeauHD Slashdot.org

TCLBANKER Banking Trojan Targets Financial Platforms via WhatsApp and Outlook Worms

info@thehackernews.com (The Hacker News) Internet

How to Make a Strong Password You Can Actually Remember

An Jay Smashingapps.com

Nation-state actors exploit Palo Alto PAN-OS zero-day for weeks

Pierluigi Paganini Securityaffairs.com

PCPJack Credential Stealer Exploits 5 CVEs to Spread Worm-Like Across Cloud Systems

info@thehackernews.com (The Hacker News) Internet

IMF Warns New AI Models Risk 'Systemic' Shock To Finance

BeauHD Slashdot.org

Canvas Breach Disrupts Schools & Colleges Nationwide

BrianKrebs Krebs on Security

Chrome 148 patches 100+ vulnerabilities, including 3 critical flaws

Frank Ziemann PCWorld

Apple pushes back against Canadian bill that could force companies to weaken encryption

Marcus Mendes 9to5Mac

A look ahead: Making it easier and faster to publish safer apps

Android Developers Googleblog.com

'What started as someone potentially trying to remove the background from a selfie ended with a custom .NET stealer rifling through their browser passwords': Experts warn that free image editor tool could actually be dangerous malware

Sead Fadilpašić TechRadar

Milestone 1.0.0 Release of APK Downloader `apkeep` Powers Research on Android Apps

Bill Budington EFF

What Is Encryption? How It Protects Your Data

An Jay Smashingapps.com

ADT says customer data stolen in cyber intrusion

Jonathan Greig Therecord.media

Mirai-Based xlabs_v1 Botnet Exploits ADB to Hijack IoT Devices for DDoS Attacks

info@thehackernews.com (The Hacker News) Internet

Google Cloud fraud defense, the next evolution of reCAPTCHA

Jian Zhen Google News

Microsoft Edge will load all your passwords into memory in plaintext, but Microsoft says it's not a security concern

zac.bowden@futurenet.com (Zac Bowden) , Zac Bowden Windows Central

After Friday, Meta can read your Instagram DMs again

Ellsworth Toohey Boing Boing

‘PAY OR LEAK’: Hackers Target Big Higher Ed Vendor

kathryn.palmer@insidehighered.com Inside Higher Ed

India orders infosec red alert in case Mythos sparks crime spree

Simon Sharwood Theregister.com

Instructure hacker claims data theft from 8,800 schools, universities

Lawrence Abrams BleepingComputer

Eliminate pop-ups, autoplay ads, and tracking on the web for just $30

Boing Boing's Shop Boing Boing

DarkSword Malware

Bruce Schneier Schneier.com

ScarCruft Hacks Gaming Platform to Deploy BirdCall Malware on Android and Windows

info@thehackernews.com (The Hacker News) Internet

iPhone’s next big update will finally secure Android RCS chats

Rajesh Pandey Android Police

Microsoft Details Phishing Campaign Targeting 35,000 Users Across 26 Countries

info@thehackernews.com (The Hacker News) Internet

iPhone-Android RCS messaging finally gets the security upgrade we’ve been waiting for

Aamir Siddiqui Android Authority

Ripple to share North Korean threat intelligence with crypto firms

Shaurya Malwa CoinDesk

Singapore boffins get diverse SIEMs singing in harmony with agentic rule translation

Simon Sharwood Theregister.com

Protect every device you own with one VPN for $40

Boing Boing's Shop Boing Boing

Alberta voter list leak is a potential public safety disaster

Charles Rusnell Global News

Phishing Campaign Hits 80+ Orgs Using SimpleHelp and ScreenConnect RMM Tools

info@thehackernews.com (The Hacker News) Internet

AI agents create new risks requiring continuous monitoring and oversight

Nik Kairinos TechRadar

Your work apps are quietly handing 19 data points to someone

Mirko Zorz Help Net Security

NymVPN's new 'Pay as You Go' option ditches accounts and subscriptions for true anonymity

monicajwrites@gmail.com (Monica J. White) , Monica J. White TechRadar

Salt Typhoon breach IBM subsidiary in Italy: a warning for Europe’s digital defenses

Pierluigi Paganini Securityaffairs.com

Why Apple cannot unlock your deceased relative’s iPhone

Ed Hardy Cult of Mac

Something Nefarious Is Happening in Your Living Room Every Time You Watch TV

Nitish Pahwa Slate Magazine

3 easy-to-miss cybersecurity risks for small businesses

Malwarebytes Labs Malwarebytes.com

U.S. CISA adds a flaw in WebPros cPanel to its Known Exploited Vulnerabilities catalog

Pierluigi Paganini Securityaffairs.com

Week in review: High-severity LPE vulnerability in the Linux kernel, cPanel 0-day exploited for months

Help Net Security Help Net Security

Critrical cPanel flaw mass-exploited in "Sorry" ransomware attacks

Lawrence Abrams BleepingComputer

US CISA adds ‘insane’ Linux Copy Fail flaw to watch list

Cointelegraph by Ciaran Lyons Cointelegraph

Your Windows PC's security foundation could expire in 8 weeks — Here's how to check if you're eligible for a new Secure Boot certificate

c.cale.hunt@gmail.com (Cale Hunt) , Cale Hunt Windows Central

I'm a VPN expert, and I've been using this $2 per month VPN deal for over two years to protect my phone, computer, and TV, as well as protect my devices from viruses and data breaches — here's how you can claim it yourself

Rob Dunne TechRadar

New Deep#Door RAT uses stealth and persistence to target Windows

Pierluigi Paganini Securityaffairs.com

'Beyond the financial risk, there are real public safety implications': Hackers crawled Canadian streets with SMS blasters, attacking every target in sight — causing 13 million network disruptions and hacking thousands of devices

Efosa Udinmwen TechRadar

Security posture improvement in the AI era

Celeste Bishop Amazon.com

Does Your AI Agent Need a VPN? The Company Behind Norton and Avast Thinks So

Ajay Kumar CNET

揺らぐバイオバンクUK？

nakamurayusuke Agora-web.jp

CVE-2026-31431: Copy Fail vulnerability enables Linux root privilege escalation across cloud environments

Microsoft Defender Security Research Team Microsoft.com

Fear And Opportunity: Immigration Scams Surged As Trump’s Sweeps Lured Desperate People To Eager Defrauders

Naisha Roy, Francesca D’Annunzio, and J. David McSwane Techdirt

This Week in Security: State Malware, State Hardware Bans, and Stuxnet before Stuxnet was Cool

Mike Kershaw Hackaday

Report Links Piracy to Drugs, Weapons, and the Mafia; Calls for U.S. Site-Blocking

Ernesto Van der Sar Torrentfreak.com

Actively exploited cPanel bug exposes millions of websites to takeover

Pieter Arntz Malwarebytes.com

How the US Army is readying for a cyberspace fight against enemy AI hackers

Chris Panella Business Insider

China-Linked Hackers Target Asian Governments, NATO State, Journalists, and Activists

info@thehackernews.com (The Hacker News) Internet

Criminal IP and Securonix ThreatQ Collaborate to Enhance Threat Intelligence Operations

cybernewswire Next Big Future

Your Biggest Vulnerability is your Shitty Compensation

Stegosaur Spacedino.net

'Zombie Tech continues to haunt UK networks': Decade-old vulnerabilities fuel 67 million attacks, exposing outdated, insecure systems across organisations nationwide

Efosa Udinmwen TechRadar

The never-ending supply chain attacks worm into SAP npm packages, other dev tools

Jessica Lyons Theregister.com

Cybersecurity’s A.I. Problem Isn’t Technology. It’s Human.

Judith Borts, Judith Borts Observer

Exposed Data Illustrates the Nightmare Scenario for a Stalkerware Victim

Matt Burgess, Lily Hay Newman Wired

French prosecutors link 15-year-old to mega-breach at state’s secure document agency

Connor Jones Theregister.com

PyTorch Lightning Compromised in PyPI Supply Chain Attack to Steal Credentials

info@thehackernews.com (The Hacker News) Internet

Anti-DDoS Firm Heaped Attacks on Brazilian ISPs

BrianKrebs Krebs on Security

World Cup 2026: how mobile networks can avoid cybersecurity chaos at kick-off

H. Khuong Nguyen Quan TechRadar

Ukrainian Police Arrest Three Hackers Who Compromised 610,000 Roblox Accounts and Sold Them for $225,000

Arthur Kay Ghacks Technology News

Smashing Security podcast #465: This developer wanted to cheat at Roblox. It cost millions

Graham Cluley Graham Cluley Security News

'Chaining vulnerabilities is the hallmark of a sophisticated attack': 750,000 websites must be patched as Microsoft's popular open source Dotnetnuke CMS hit by an XSS flaw that allows attackers to hijack admin sessions and take over entire web servers

Efosa Udinmwen TechRadar

Silver Fox uses the new ABCDoor backdoor to target organizations in Russia and India

Anton Kargin, Vladimir Gursky, Victoria Vlasova, Anna Lazaricheva Securelist.com

Built on patterns: How Susan Chang’s econometrics roots drive machine learning for security and her minimalist workspace

Elastic Culture Elastic.co

The Race Is on to Keep AI Agents From Running Wild With Your Credit Cards

Lily Hay Newman Wired

Investment scams just cost Americans $2.1 billion — here are 4 tips to avoid them

Sara Heritage MakeUseOf

Have I Been Pwned claims Pitney Bowes hit by 8.2M email address leak

Connor Jones Theregister.com

After Mythos: New Playbooks For a Zero-Window Era

info@thehackernews.com (The Hacker News) Internet

What Anthropic’s Mythos Means for the Future of Cybersecurity

Bruce Schneier Schneier.com

mssPortable 1.449.334 (Microsoft Safety Scanner antivirus launcher) Released

John T. Haller Portableapps.com

Italy extradites alleged Chinese cyber-espionage suspect to US

John Power Al Jazeera English

Ongoing supply-chain attack 'explicitly targeting' security, dev tools

Jessica Lyons Theregister.com

Medtronic Hack Confirmed After ShinyHunters Threatens Data Leak

Eduard Kovacs Securityweek.com

Elon Musk’s XChat App Is More Like Facebook’s Messenger Than Signal

Reece Rogers Wired

Utility giant Itron confirms cyberattack, says internal systems were accessed

Sead Fadilpašić TechRadar

Windows 11 debloat tools promise speed, but here's what actually happens

Joe Rice-Jones XDA Developers

4TB of voice samples just stolen from 40k AI contractors at Mercor

ORAVYS, ORAVYS Oravys.com

Burglar alarm biz burgled: ADT confirms cyber intrusion after ShinyHunters extortion attempt

Carly Page Theregister.com

Fast16: The Cyberweapon That Predates Stuxnet by Five Years

Bulls Eye Hackingpassion.com

Fake CAPTCHA IRSF Scam and 120 Keitaro Campaigns Drive Global SMS, Crypto Fraud

info@thehackernews.com (The Hacker News) Internet

U.S. utility giant Itron discloses a security breach

Pierluigi Paganini Securityaffairs.com

Your ISP has been watching your browsing this whole time — here's the Windows 11 fix

Oluwademilade Afolabi MakeUseOf

Chernobyl virus turned 27 today, and it could brick your PC in ways modern malware can't by overwriting BIOS firmware

Luke James Tom's Hardware UK

As phishing attacks hit Germany – how secure is Signal messenging app?

The Local The Local Germany

Security Affairs newsletter Round 574 by Pierluigi Paganini – INTERNATIONAL EDITION

Pierluigi Paganini Securityaffairs.com

A popular VPN just dropped a 5-year subscription for $40 (it was $359.40)

Stack Commerce Popular Science

Crime crew impersonates help desk, abuses Microsoft Teams to steal your data

Jessica Lyons Theregister.com

North Korean IT workers are stealing remote jobs and raking in billions—and Americans are helping them do it

Amanda Gerut Yahoo Entertainment

Apple @ Work: Is Safari the biggest shadow IT blind spot in your enterprise?

Bradley C 9to5Mac

My Website Is Hosting a Phishing Page – Now What?

Sucuri Sucuri.net

Act Now to Stop California’s Paternalistic and Privacy-Destroying Social Media Ban

Molly Buckley EFF

CISA reports persistent FIRESTARTER backdoor on Cisco ASA device in federal network

Pierluigi Paganini Securityaffairs.com

CISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal Deadline

info@thehackernews.com (The Hacker News) Internet

This New HDMI Gadget Can Block Malware From Reaching Your Computer

staff@bgr.com (Briley Kenney) BGR

This Week in Security: Annoyed Researchers, Dangling DNS, and Hacks that Could Have Been Worse

Mike Kershaw Hackaday

26 FakeWallet Apps Found on Apple App Store Targeting Crypto Seed Phrases

info@thehackernews.com (The Hacker News) Internet

Google wants to protect me from myself, but I'm not sure I want it to

Irene Okpanachi Android Police

If malware via monitor cables is a matter of national security, this might be the gadget for you

Connor Jones Theregister.com

UNC6692 Impersonates IT Helpdesk via Microsoft Teams to Deploy SNOW Malware

info@thehackernews.com (The Hacker News) Internet

Former national cyber director: Anthropic’s ‘Mythos’ AI can hack nearly anything and we aren’t ready

Tristan Bove, Kemba Walden Yahoo Entertainment

Vercel identifies more accounts 'with evidence of prior compromise' exposed during security incident

Sead Fadilpašić TechRadar

Mosyle identifies two new macOS threats invisible to antivirus engines

Arin Waichulis 9to5Mac

Self-Propagating Supply Chain Worm Hijacks npm Packages to Steal Developer Tokens

info@thehackernews.com (The Hacker News) Internet

Microsoft says Windows 11’s built-in 'Defender' antivirus is "usually sufficient" for most PC users: "I haven't used a 3rd party antivirus since XP"

kevinokemwa@outlook.com (Kevin Okemwa) , Kevin Okemwa Windows Central

Default BitLocker configuration isn’t enough: Defending endpoints against physical attacks

Ian Pratt TechRadar

ED searches on sons of Karnataka Congress MLA casts spotlight on 2017 Unocoin crypto exchange hacking probe

Express News Service The Indian Express

macOS ClickFix attacks deliver AppleScript stealers to snarf credentials, wallets

Jessica Lyons Theregister.com

Stop Paying for a VPN: Firefox Just Built One Right Into Your Browser

Omar Gallaga CNET

5 Places where Mature SOCs Keep MTTR Fast and Others Waste Time

info@thehackernews.com (The Hacker News) Internet

Even trusted apps can infect your PC with malware now

Alaina Yee PCWorld

I set up Bitwarden on my own server for free and my passwords are now completely under my control

Afam Onyimadu MakeUseOf

‘Scattered Spider’ Member ‘Tylerb’ Pleads Guilty

BrianKrebs Krebs on Security

'88% Confident 90% Misled': Government & critical infrastructure leaders fundamentally misunderstand the security of the apps they use

Sead Fadilpašić TechRadar

SCAMMERS IN STRAIT

Reuters Yahoo Entertainment

Unionised Build a Rocket Boy staff take legal action against MindsEye studio, accusing management of breaking the law with "invasive" surveillance software

Mark Warren Rock Paper Shotgun

Claude Desktop changes app access settings for browsers you don't even have installed yet

Thomas Claburn Theregister.com

Employee Yelled At An IT Specialist And Threatened His Job, So He Recorded Her Abusive Calls And Got Her In Trouble

Sarrah Murtaza Twistedsifter.com

Cybersecurity jobs available right now: April 21, 2026

Anamarija Pogorelec Help Net Security

France’s ANTS ID System website hit by cyberattack, possible data breach

Pierluigi Paganini Securityaffairs.com

⚡ Weekly Recap: Vercel Hack, Push Fraud, QEMU Abused, New Android RATs Emerge & More

info@thehackernews.com (The Hacker News) Internet

'We've identified a security incident': Vercel breach confirmed after hackers claim stolen data for sale online

Sead Fadilpašić TechRadar

Anthropic installs spyware when you install Claude Desktop

Alexander Hanff Thatprivacyguy.com

SmokedMeat: Open-source tool shows what attackers do inside CI/CD pipelines

Mirko Zorz Help Net Security

Lock Down Your Life: The Ultimate Guide to Securing Your Home Wi-Fi

David Anders CNET

Inside the rise of wrench attacks against crypto holders and how France has become the focus

Olivier Acuna CoinDesk

Airline worker arrested after sharing photos of bomb damage in WhatsApp group

Issy Clarke LBC

Vercel just confirmed an internal breach, and your non-sensitive env vars may be exposed

Simon Batt XDA Developers

Security Affairs newsletter Round 573 by Pierluigi Paganini – INTERNATIONAL EDITION

Pierluigi Paganini Securityaffairs.com

Week in review: Acrobat Reader flaw exploited, Claude Mythos offensive capabilities and limits

Help Net Security Help Net Security

Chrome Remote Desktop is an okay TeamViewer alternative, this free, open-source tool is better than both

Parth Shah XDA Developers

Shutting Down SlackBITS After Impersonation-Based Malware Attack

Adam Engst TidBITS

School restricts kids' photos on social media, prompting calls for others to follow

Lottie Twyford ABC News (AU)

Kelp restaking platform exploited, $293M drained in attack

Cointelegraph by Vince Quill Cointelegraph

Security Bite: ClickFix malware authors already bypassing Apple’s new Terminal paste warning

Arin Waichulis 9to5Mac

$13.74M Hack Shuts Down Sanctioned Grinex Exchange After Intelligence Claims

info@thehackernews.com (The Hacker News) Internet

Best Free Password Manager in 2026 – That Are Actually Secure

An Jay Smashingapps.com

'Update immediately': 60,000 WordPress websites at risk after experts discover flaw that allows hackers to create hidden admin accounts

Efosa Udinmwen TechRadar

Cross‑tenant helpdesk impersonation to data exfiltration: A human-operated intrusion playbook

Microsoft Defender Security Research Team Microsoft.com

Techie buys fake Ledger Nano S+ hardware crypto wallet and almost falls for phishing — a convincing clone would have caught newbies unaware

editors@tomshardware.com (Bruno Ferreira) , Bruno Ferreira Tom's Hardware UK

This Week in Security: Docker Auth, Windows Tools, and a Very Full Patch Tuesday

Mike Kershaw Hackaday

NIST gives up enriching most CVEs

Catalin Cimpanu Risky.biz

We Reproduced Anthropic's Mythos Findings with Public Models

Dawid Moczadło, Klaudia Kloc, Marek Lewandowski, Amadeusz Lisiecki, Jakub Sienkiewicz, Mikołaj Palkiewicz Vidocsecurity.com

Inside ZionSiphon: politically driven malware aims at Israeli water systems

Pierluigi Paganini Securityaffairs.com

Anthropic won't own MCP 'design flaw' putting 200K servers at risk, researcher says

Jessica Lyons Theregister.com

Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation

info@thehackernews.com (The Hacker News) Internet

Talk Python to Me: #545: OWASP Top 10 (2025 List) for Python Devs

Michael Kennedy Talkpython.fm

Rockstar On Latest Potential Hack & Information Leak: Meh, We Don’t Care

Timothy Geigner Techdirt

New infosec products of the week: April 17, 2026

Anamarija Pogorelec Help Net Security

The only way to fight deepfakes is by making deepfakes

Gaby Del Valle The Verge

New Hacking Threat Could Steal Your Accounts And Passwords - Even Through 2FA

staff@bgr.com (Briley Kenney) BGR

What to know about 'ship spoofing' by Iran-linked vessel to breach the US blockade

Bill Hutchinson Abcnews.com

ThreatsDay Bulletin: Defender 0-Day, SonicWall Brute-Force, 17-Year-Old Excel RCE and 15 More Stories

info@thehackernews.com (The Hacker News) Internet

How Push Notifications Can Betray Your Privacy (and What to Do About It)

Thorin Klosowski EFF

'Towards a full private digital workspace': Tuta debuts quantum-resistant cloud storage ahead of Google Drive, OneDrive

Efosa Udinmwen TechRadar

UAC-0247 Targets Ukrainian Clinics and Government in Data-Theft Malware Campaign

info@thehackernews.com (The Hacker News) Internet

Does Gas Town 'steal' usage from users' LLM credits to improve itself?

gastownhall Github.com

'We are currently being extorted' — crypto giant Kraken says it is facing extortion attack, here's what we know

Sead Fadilpašić TechRadar

Automotive data biz Autovista blames ransomware for service disruption

Connor Jones Theregister.com

Microsoft's latest Windows update now confirms if your PC is Secure Boot-protected - how it works

Lance Whitney ZDNet

Over 100 Malicious Chrome Extensions Steal Google Tokens, Hijack Telegram Sessions, and Inject Ads

Arthur Kay Ghacks Technology News

A Tale of Cheap Hard Drives and Expensive Lessons

Tom Nardi Hackaday

Google Is About to Punish Websites for That Annoying Browser Back Button Trick

Tyler Graham CNET

Microsoft ends desktop detour for sensitivity labels in Office web apps

Sinisa Markovic Help Net Security

Stuck on a sketchy site? Google is finally putting a stop to it

techkritiko@gmail.com (Jay Bonggolto) , Jay Bonggolto Android Central

Audit Finds Google, Microsoft, and Meta Still Tracking Users After Opt-Out

BeauHD Slashdot.org

Dependency cooldowns turn you into a free-rider

Cal Paterson Calpaterson.com

G. Love Loses Reported $424,000 in Crypto Account Hack

Travis Bland Consequence.net

DNA-Level Encryption Developed by Researchers to Protect the Secrets of Bioengineered Cells

EditorDavid Slashdot.org

Week in review: Windows zero-day exploit leaked, Patch Tuesday forecast

Help Net Security Help Net Security

Pig-butchering: Southeast Asia's scam hubs

theweekonlineeditorsuk@futurenet.com (The Week UK) , The Week UK The Week Magazine

CPUID Breach Distributes STX RAT via Trojanized CPU-Z and HWMonitor Downloads

info@thehackernews.com (The Hacker News) Internet

CPU-Z and HWMonitor official download links hijacked, malware included

Petteri Pyyny Afterdawn.com

What’s in the new DNA encryption for cells? #science

AllToc Alltoc.com

Uncovering Webloc: An Analysis of Penlink’s Ad-based Geolocation Surveillance Tech - The Citizen Lab

jk Citizenlab.ca

How AI is getting better at finding security holes

Huo Jingnan NPR

How Should We Prepare for the Looming Quantum Encryption Apocalypse?

Gayoung Lee Gizmodo.com

RapidIPTV Kingpin ‘Dash the Iranian’ Gets Two Years Prison Under Spanish Plea Deal

Ernesto Van der Sar Torrentfreak.com

Rockstar Games Reportedly Hacked, Team Behind It Threaten A Massive Data Leak If Not Paid Ransom

Zack Zwiezen Kotaku

Authenticate SSH with Your TPM

Al Williams Hackaday

Microsoft terminated accounts tied to VeraCrypt, WireGuard, and Windscribe — developers push back

kevinokemwa@outlook.com (Kevin Okemwa) , Kevin Okemwa Windows Central

Two different attackers poisoned popular open source tools - and showed us the future of supply chain compromise

Jessica Lyons Theregister.com

Adobe Reader Zero-Day Exploit Uses Fake PDF Files To Steal User Data

Paulo Montenegro Ubergizmo

Installing Every* Firefox Extension

Jack.cab Jack.cab

Encrypted Emails Are Now Available for Some Gmail Phone App Enterprise Customers

Alex Valdes CNET

ShinyHunters Claims Rockstar Games Snowflake Breach via Anodot

Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of Disclosure

info@thehackernews.com (The Hacker News) Internet

The FCC says foreign routers are a security risk, but still allows firmware updates to the ones you already own

Adam Conway XDA Developers

"Not every 'WTF micro$oft' moment is a slam dunk": Microsoft terminated developer accounts for VeraCrypt, WireGuard, and Windscribe — What really happened?

kevinokemwa@outlook.com (Kevin Okemwa) , Kevin Okemwa Windows Central

‘It’s a potential national security threat’: Proton study finds over 3,500 US legislators’ official emails leaked and exposed on the dark web

benedict.collins@futurenet.com (Benedict Collins) , Benedict Collins TechRadar

What’s new in security for Ubuntu 26.04 LTS?

ijlal-loutfi (ijlal-loutfi) Ubuntu.com

Britain seeks views before it drops the hammer on signal jammers

Connor Jones Theregister.com

Eurail data breach impacted 308,777 people

Pierluigi Paganini Securityaffairs.com

OpenAI: Hey, We Also Have a New Tool That Is So Scarily Powerful We Can’t Release It

AJ Dellinger Gizmodo.com

Healthcare IT solutions provider ChipSoft hit by ransomware attack

Bill Toulas BleepingComputer

Backdoored Smart Slider 3 Pro Update Distributed via Compromised Nextend Servers

info@thehackernews.com (The Hacker News) Internet

Yikes, Encryption’s Y2K Moment is Coming Years Early

Erica Portnoy EFF

The Nazis’ Most Notoriously Complex Cryptographic Machine Is Now Available Online

Tom Hawking Gizmodo.com

'Several dozen' high-value corporations hit by new extortion crew in helpdesk phishing spree

Jessica Lyons Theregister.com

8 phishing red flags hidden in everyday emails

Jon Martindale PCWorld

Bitter-Linked Hack-for-Hire Campaign Targets Journalists Across MENA Region

info@thehackernews.com (The Hacker News) Internet

I switched from Gmail to Proton Mail, and not just because of privacy

Mitja Rutnik Android Authority

Mac users beware — experts say this attack 'stood out immediately' by making a major change to try spread malware

Sead Fadilpašić TechRadar

7 Ways to Boost the Privacy of Your Home and Gadgets

Tyler Lacoma CNET

Criminal wannabes even more dangerous than the pros, says ex-FBI cyber chief

Jessica Lyons Theregister.com

Banning New Foreign Routers Mistargets Products to Fix Real Problem

Bill Budington EFF

Crypto Scams and Senior Fraud Drive $21 Billion in 2025 Cyber Theft, FBI Reports

Jeff Carlson CNET

Microsoft Abruptly Terminates VeraCrypt Account, Halting Windows Updates

BeauHD Slashdot.org

Ex-Facebook Employee Investigated for Downloading 30,000 Private Photos

Pesala Bandara PetaPixel

APT28 Deploys PRISMEX Malware in Campaign Targeting Ukraine and NATO Allies

info@thehackernews.com (The Hacker News) Internet

FBI says cyber fraud cost Americans $21B last year – here’s what you need to know

Ben Lovejoy 9to5Mac

Digital Hopes, Real Power: How the Arab Spring Fueled a Global Surveillance Boom

Sarah Hamid EFF

I replaced my paid VPN app with a feature Windows already had — and it works perfectly

Tashreef Shareef MakeUseOf

Snowflake customers suffer data theft attacks after third-party issue, company confirms 'unusual activity'

Sead Fadilpašić TechRadar

ICE acknowledges it is using powerful spyware

Jude Joffe-Block NPR

Pro-Iran Hackers Target Critical U.S. Energy and Water Infrastructure

Matt Novak Gizmodo.com

Mercor hit with 5 contractor lawsuits in a week over data breach

Jack Newsham Business Insider

Iran-Linked Hackers Are Sabotaging US Energy and Water Infrastructure

Andy Greenberg Wired

EU Parliament Blocks Mass-Scanning of Our Chats—What's Next?

Christoph Schmon EFF

'Stolen session cookies render MFA irrelevant': How $900-per-month turnkey malware is putting enterprise-grade account hijacking in the hands of rookie hackers

Efosa Udinmwen TechRadar

What managing partners should ask AI vendors before signing any contract

Mirko Zorz Help Net Security

Russia's Fancy Bear still attacking routers to boost fake sites, NCSC warns

Connor Jones Theregister.com

Crypto Project Details Alleged 6-Month North Korean Intel Op Behind $285 Million Hack

Kyle Torpey Gizmodo.com

Russia Hacked Routers to Steal Microsoft Office Tokens

BrianKrebs Krebs on Security

Breaking the console: a brief history of video game security

Sergio Prado Sergioprado.blog

Over 1,000 Exposed ComfyUI Instances Targeted in Cryptomining Botnet Campaign

info@thehackernews.com (The Hacker News) Internet

'Your login credentials may already be slipping into the hands of a cybercriminal': Hackers target LinkedIn accounts with devious new phishing attacks — here's how to stay safe

Efosa Udinmwen TechRadar

How Mimecast brings enterprise-grade email protection to API deployment

Help Net Security Help Net Security

Phishing LNK files and GitHub C2 power new DPRK cyber attacks

Pierluigi Paganini Securityaffairs.com

Trump Administration Bans Chinese Routers. Phones and Cameras Could Follow

Tyler Graham CNET

Windows 10 is still better than Windows 11—here's how to keep it safe past 2026

Jorge A. Aguilar How-To Geek

Security Bite: Trojan malware dominates Mac, now half of all detections, says Jamf

Arin Waichulis 9to5Mac

Wisconsin Remains a Gooning Sanctuary State After Governor Rejects Age Verification Bill

AJ Dellinger Gizmodo.com

Iran-Linked Password-Spraying Campaign Targets 300+ Israeli Microsoft 365 Organizations

info@thehackernews.com (The Hacker News) Internet

Backups won’t save you from this version of ransomware

Josh Taylor TechRadar

Attackers exploited this critical FortiClient EMS bug as a 0-day

Jessica Lyons Theregister.com

Germany Doxes “UNKN,” Head of RU Ransomware Gangs REvil, GandCrab

BrianKrebs Krebs on Security

A simple explainer on what quantum computing actually is, and why it is terrifying for bitcoin

Shaurya Malwa CoinDesk

Product showcase: Proton Authenticator is an end-to-end encrypted, open source 2FA app

Anamarija Pogorelec Help Net Security

Malwarebytes just proved its no-logs VPN policy is the real deal

Rene Millman TechRadar

Crypto attorney says Drift incident may qualify as 'civil negligence'

Cointelegraph by Vince Quill Cointelegraph

Iran threatens “annihilation” of $30B AI data center, escalating tech infrastructure warfare

Willow Tohi Naturalnews.com

Researchers didn’t want to glamorize cybercrims. So they roasted them

Jessica Lyons Theregister.com

Russia Allegedly Swung at VPNs but Accidentally Hit Its Own Banking Sector Instead

Mike Pearl Gizmodo.com

Ditch Your Passwords And Start Using This More Secure Method

staff@bgr.com (Faith Leroux) BGR

My Expert Advice: Don’t Buy a Router Until We Know More About the FCC's Ban

I stopped using Event Viewer to check failed logins after discovering this PowerShell trick

Pankil Shah MakeUseOf

$285 Million Drift Hack Traced to Six-Month DPRK Social Engineering Operation

info@thehackernews.com (The Hacker News) Internet

Week in review: Axios npm supply chain compromise, critical FortiClient EMS bugs exploited

Help Net Security Help Net Security

How did attackers steal $270M via Drift? #tech

AllToc Alltoc.com

36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants

info@thehackernews.com (The Hacker News) Internet

Drift Protocol $280M exploit took 'months of deliberate preparation'

Cointelegraph by Ciaran Lyons Cointelegraph

ESP32-S3 gets post-quantum encryption with Aethyr Edge Node open-source firmware

Jean-Luc Aufranc (CNXSoft) CNX Software

Bitcoin's $1.3 trillion security race: Key initiatives aimed at quantum-proofing the world's largest blockchain

Omkar Godbole, AI Boost CoinDesk

Axios npm hack used fake Teams error fix to hijack maintainer account

Lawrence Abrams BleepingComputer

Strava runs are continuing to leak sensitive military information, with over 500 UK soldiers the latest to be exposed

David Nield TechRadar

The FCC’s Router Ban Is About to Become a 'Mess.' Here's What It Means for Your Home Network

Your router is probably end-of-life and you don't even know it

Yadullah Abidi MakeUseOf

Delve sets the record straight on anonymous attacks

Karun Kaushik Delve.co

Supply Chain Attacks Surge in March 2026

ThreatLabz (Zscaler) Zscaler.com

Claude Code Found a Linux Vulnerability Hidden for 23 Years

Michael Lynch Mtlynch.io

Show HN: Mtproto.zig – High-performance Telegram proxy with DPI evasion

sleep3r Github.com

I ran Nvidia's NemoClaw to see if OpenClaw is finally safe, but it still has the same problems

Adam Conway XDA Developers

2.3 Million Users Affected by New Android Malware Hid in 50 Google Play Apps

Tyler Lee Android Headlines

Avast Premium Isn’t Flashy — But It Might Be the Smartest Cheap Antivirus Right Now

C2s Gizmodo.com

This Week in Security: The Supply Chain Has Problems

Mike Kershaw Hackaday

Solana Drift Protocol drained of $285M via fake token and governance hijack

Artem Safonov Anonhaven.com

Why I Use Additional Antivirus Protection on Top of Microsoft Defender

Marshall Gunnell CNET

Senators Ask Tulsi Gabbard To Tell Americans That VPN Use Might Subject Them To Domestic Surveillance

Tim Cushing Techdirt

Post Mortem: axios NPM supply chain compromise

axios Github.com

‘Uncanny Valley’: Iran’s Threats on US Tech, Trump’s Plans for Midterms, and Polymarket’s Pop-up Flop

Brian Barrett, Zoë Schiffer, Leah Feiger, Makena Kelly, Kate Knibbs Wired

Trivy supply chain attack enabled European Commission cloud breach

Zeljka Zorz Help Net Security

This new 'laughing rat' malware will steal your data and hack your systems — and then laugh at you while doing it

Sead Fadilpašić TechRadar

CERT-EU: European Commission hack exposes data of 30 EU entities

Sergiu Gatlan BleepingComputer

Hit List: Iran Threatens US and Israeli Corporations

Kurt Nimmo Globalresearch.ca

The company's biggest security hole lived in the breakroom

Avram Piltch Theregister.com

WhatsApp Alerts 200 Users After Fake iOS App Installed Spyware; Italian Firm Faces Action

info@thehackernews.com (The Hacker News) Internet

'No Need to Panic': Binance Founder Says Crypto Can Survive Quantum Computing Threat by Upgrading

John Potter Yahoo Entertainment

This lifetime VPN and password manager bundle is on sale for $40

DealPost Team PCWorld

AI recruiting biz Mercor says it was 'one of thousands' hit in LiteLLM supply-chain attack

Jessica Lyons Theregister.com

Obfuscation is not security – AI can deobfuscate any minified JavaScript code

Nikita Savchenko Afterpack.dev

WhatsApp's former security chief is 'not done fighting' after his lawsuit got dismissed

Charles Rollet Business Insider

Iran Threatens to Strike US Tech Companies in the Middle East

Omar Gallaga CNET

Securing the open source supply chain across GitHub

Zachary Steindler Github.blog

This iOS 18 patch could protect your device from a vicious malware strain — here’s why you need it now

alexblake.techradar@gmail.com (Alex Blake) , Alex Blake TechRadar

Federal Cyber Experts Thought Microsoft’s Cloud Was “A Pile Of Shit.” They Approved It Anyway.

Renee Dudley Techdirt

3 Reasons Attackers Are Using Your Trusted Tools Against You (And Why You Don’t See It Coming)

info@thehackernews.com (The Hacker News) Internet

Code Breaker: Meet the Man Who Cracked the C8 Corvette's Encrypted Brain

Alex Kierstein RoadandTrack.com

The LastPass breach settlement is real. Here’s what you should know

Alaina Yee PCWorld

ExpressVPN vs. NordVPN: Which VPN service is better?

Marc Dahan Salon

North Korean hackers bug software used by thousands of US companies in potential crypto heist attempt

Sean Lyngaas, CNN CNN

Iran Threatens to Start Attacking Major US Tech Firms on April 1

Dell Cameron, Louise Matsakis Wired

DHS needs to get funded to 'ensure' a safe World Cup, official says

Luke Barr Abcnews.com

IT Expert Freaked Out Because His Computer Started Acting Weird, But Then He Found Out His Receptionist Was Behind The System Failure

Sarrah Murtaza Twistedsifter.com

Malware detectors trained on one dataset often stumble on another

Anamarija Pogorelec Help Net Security

The FCC Just Banned All New Foreign-Made Routers. Everything You Need to Know to Keep Your Network Safe

Don't open that WhatsApp message, Microsoft warns

Jessica Lyons Theregister.com

Is “Hackback” Official US Cybersecurity Strategy?

Bruce Schneier Schneier.com

Supply chain blast: Top npm package backdoored to drop dirty RAT on dev machines

Carly Page Theregister.com

TrueConf Zero-Day Exploited in Attacks on Southeast Asian Government Networks

info@thehackernews.com (The Hacker News) Internet

Healthcare tech firm CareCloud admits data breach, says hackers accessed patient info — here's what we know

Sead Fadilpašić TechRadar

Game Pirates Beat Denuvo with Hypervisor Bypasses — Irdeto Promises Countermeasure

Ernesto Van der Sar Torrentfreak.com

How physicists proved that quantum weirdness is a feature, not a bug

Joseph Howlett Scientific American

Employee Data Breaches Surge to Seven-Year High

Phil Muncaster Infosecurity Magazine

Trump’s New White House App Is Mildly Concerning and Weird for a Lot of Reasons

Ece Yildirim Gizmodo.com

Incident March 30th, 2026 – Accidental CDN Caching

Jacob Cooper Railway.com

Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account

info@thehackernews.com (The Hacker News) Internet

Why I’m done calling humans the weakest link

Help Net Security Help Net Security

Welcome, Daily Show Viewers! Learn More About EFF and Privacy's Defender

Jason Kelley EFF

'DarkSword' Attack Is Now Targeting Vulnerable iPhones Via Phishing Emails

Michael Kan PCMag.com

FBI Chief Kash Patel's Emails Leaked by Iran-Linked Hackers in Recent Breach

Ty Pendlebury CNET

How Does Offline Bitcoin Signing Work Step by Step

Frozen Security Frozensecurity.com

Spy Tech: Conflicts Bring a New Number Station

Al Williams Hackaday

OpenAI patches ChatGPT flaw that smuggled data over DNS

Thomas Claburn Theregister.com

Android developer verification: Rolling out to all developers on Play Console and Android Developer Console

Android Developers Googleblog.com

I thought I needed a password manager app until I tried Android’s built-in one

Digvijay Kumar MakeUseOf

Apple’s Camera Indicator Lights

Bruce Schneier Schneier.com

New Company Hopes to Build Age-Verification Tech into Vape Cartridges

EditorDavid Slashdot.org

Philly courts will ban all smart eyeglasses starting next week

Nate File The Philadelphia Inquirer

European Commission admits attackers broke into public web systems, but says little else

Carly Page Theregister.com

If Google is serious about Android scams, there’s a bigger problem than sideloading

Megan Ellis Android Authority

The State of Secrets Sprawl 2026: 9 Takeaways for CISOs

info@thehackernews.com (The Hacker News) Internet

European Commission confirms platform data breach — admits 'data have been taken' from official websites

Sead Fadilpašić TechRadar

FBI Issues Dangerous Streaming Hack Warning For Hundreds Of Millions

Davey Winder, Senior Contributor Forbes

ChatGPT Won't Let You Type Until Cloudflare Reads Your React State

Buchodi Buchodi.com

FBI confirms hack of Director Patel's personal email inbox

Ionut Ilascu BleepingComputer

Iran and US have been fighting a silent war without bombs or bullets for over a decade

Trending Desk The Times of India

The latest Instagram and Facebook scams to watch out for

Dr. Tim Sandle Digital Journal

If You Buy a New Router, It Might ‘Turn Into a Pumpkin’ Next Year

Week in review: NIST updates DNS security guidance, compromised LiteLLM PyPI packages

Help Net Security Help Net Security

Hacked hospitals, hidden spyware: Iran conflict shows how digital fight is ingrained in warfare

DAVID KLEPPER Associated Press Abcnews.com

Turning Tesla Model 3’s Computer Into a Desktop PC

Maya Posch Hackaday

Iran-Linked Hackers Breach FBI Director’s Personal Email, Hit Stryker With Wiper Attack

info@thehackernews.com (The Hacker News) Internet

ShinyHunters claims the hack of the European Commission

Pierluigi Paganini Securityaffairs.com

This tax season is a key time to delete your personal data from the internet

Sponsored Post 9to5Mac

Last call: Exclusive NordVPN 4-month bonus + Amazon gift card ends today

Rob Dunne TechRadar

TA446 Deploys Leaked DarkSword iOS Exploit Kit in Targeted Spear-Phishing Campaign

info@thehackernews.com (The Hacker News) Internet

Attackers are exploiting RCE vulnerability in BIG-IP APM systems (CVE-2025-53521)

Zeljka Zorz Help Net Security

Iran-linked group Handala hacked FBI Director Kash Patel’s personal email account

Pierluigi Paganini Securityaffairs.com

Don't YOLO your file system

Unknown Stanford.edu

TeamPCP Supply Chain Campaign: Update 002 - Telnyx PyPI Compromise, Vect Ransomware Mass Affiliate Program, and First Named Victim Claim, (Fri, Mar 27th)

Unknown Sans.edu

'This is a final warning': Hackers say they'll leak "several terabytes" of ZenBusiness data

Sead Fadilpašić TechRadar

Open VSX Bug Let Malicious VS Code Extensions Bypass Pre-Publish Security Checks

info@thehackernews.com (The Hacker News) Internet

DarkSword leak puts millions of iPhone users at risk

Unknown Fox News

We Are At War

info@thehackernews.com (The Hacker News) Internet

Surfshark vs NordVPN: Which VPN service is better?

Jared Howe Salon

Iran war drives urgent need to counter underwater attack drones

Dan Robinson Theregister.com

Ajax data breach exposed season tickets, supporter bans open to tampering

Sinisa Markovic Help Net Security

Prevent agentic identity theft

Phoebe Sajor Stackoverflow.blog

U.S. CISA adds an Aquasecurity Trivy flaw to its Known Exploited Vulnerabilities catalog

Pierluigi Paganini Securityaffairs.com

Web Shells: Types, Mitigation & Removal

Cesar Anjos Sucuri.net

Ajax suffers major own goal as data breach hits personal info of 300,000 fans

Sead Fadilpašić TechRadar

Security Bite: What stands out in the iOS 26.4 security release notes

Arin Waichulis 9to5Mac

Mikael Barbero: Don't become the next Trivy: how to make your releases, tags, and automation resistant to compromise

mikael.barbero@eclipse-foundation.org (Mikaël Barbero) Barbero.tech

WebRTC Skimmer Bypasses CSP to Steal Payment Data from E-Commerce Sites

info@thehackernews.com (The Hacker News) Internet

Millions possibly affected by data breach at dermatology giant QualDerm

Sead Fadilpašić TechRadar

The Most Secure, Modern Computer Might Be A Mac

Bryan Cockfield Hackaday

GlassWorm Malware Uses Solana Dead Drops to Deliver RAT and Steal Browser, Crypto Data

info@thehackernews.com (The Hacker News) Internet

Jen Easterly, cybersecurity's 'relentless optimist,' hopes feds come back to RSAC next year

Jessica Lyons Theregister.com

Crunchyroll Responds to Claims of Data Breach

Kourtnee Jackson CNET

Hackers Use Fake Resumes to Steal Enterprise Credentials and Deploy Crypto Miner

info@thehackernews.com (The Hacker News) Internet

QualDerm Partners December 2025 data breach impacts over 3 Million people

Pierluigi Paganini Securityaffairs.com

A US judge dismisses a lawsuit against Meta by Attaullah Baig, former head of cybersecurity at WhatsApp, who alleged Meta ignored critical security flaws (Carly Nairn/Courthouse News Service)

Unknown Techmeme.com

DocuSign email scam targets healthcare workers

Unknown Fox News

HackerOne slams supplier for delayed breach notice after staff data exposed

Carly Page Theregister.com

'Traces of unauthorized access': Mazda confirms data breach exposing employee and partner data — here's what we know

Sead Fadilpašić TechRadar

Your wireless router is now banned from sale in the US, but you can still use it

Ben Lovejoy 9to5Mac

Tuskira replaces centralized detection model with real-time, distributed approach

Industry News Help Net Security

Buying a router in the US is about to get complicated

Dave Schafer MakeUseOf

Flipper Zero, Everyone’s Favorite Legally Dubious Hacker Tool, Gets an AI Upgrade

AJ Dellinger Gizmodo.com

Why CISOs must link cyber to an organization's profit and loss

Thom Langford TechRadar

Lightning-fast exploits make it essential to patch fast, ask questions later

Brandon Vigliarolo Theregister.com

ATM jackpotting attacks surge across the US

Unknown Fox News

Attacker Exploits Crypto Stablecoin for a $25 Million Payday

Kyle Torpey Gizmodo.com

⚡ Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & More

info@thehackernews.com (The Hacker News) Internet

The visibility gap holding back the agentic SOC

Jamie Moles TechRadar