> TODAY'S SUMMARY (13 articles)
Today's cybersecurity landscape reveals significant threats and trends. Bitdefender has identified preinstalled Android malware, "Midnight Mimosa," affecting cheap MediaTek devices in 150 countries, which engages in click fraud and botnet activities. Additionally, a malware incident at Nippon Columbia has compromised 8.7 million records of karaoke enthusiasts, showcasing the ongoing risks of data breaches. In infrastructure security, AI systems are increasingly being recognized for their potential to execute sophisticated attacks, raising alarms about preparedness. U.S. CISA has updated its Known Exploited Vulnerabilities catalog with critical flaws in several applications, emphasizing the need for timely patching. Meanwhile, new insights into facial recognition vulnerabilities reveal risks even when individuals are partially obscured.
|
// AI-powered summary generated at 16:01
Une vulnérabilité a été découverte dans Mattermost Server. Elle permet à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Thales named a 2026 Google Partner of the Year – Infrastructure Modernization: Sovereign Cloud Category
josh.pearson@t…
Wed, 04/22/2026 - 23:56
Thales was recognized with a 2026 Google Cloud Partner of the Year award in the Infrastructure Modernization: Sovereign Cloud category. This award highlig...
Plus, the payload references 'TeamPCP/LiteLLM method' Yet another npm supply-chain attack is worming its way through compromised packages, stealing secrets and sensitive data as it moves through developers' environments, and it shares significant overlap with the open source infections attributed to...
A company that ran anonymous tip lines for 35,000 American schools - handling reports of bullying, weapons, and self-harm - boasted on its website that it had suffered zero security breaches in over 20 years. A hacker called Internet Yiff Machine thought that sounded like a challenge, with predictab...
And that unauthorized access? 'A nothing burger,' hacking startup CEO tells El Reg Anthropic's Mythos model is purportedly so good at finding vulnerabilities that the Claude-maker is afraid to make it available to the general public for fear that criminals will take advantage. But early analysis sho...
Apple has released out-of-band security updates for iPhone and iPad devices to fix a Notification Services flaw that could allow notifications marked for deletion to remain stored on the device. [...]
Researchers said the group stole up to $12 million in cryptocurrency in the first three months of 2026 through malware attacks on personal devices.
Plankey had been waiting for more than a year, prompting the request to withdraw him as the one tapped to lead an agency now in further upheaval.
The post CISA director pick Sean Plankey withdraws his nomination appeared first on CyberScoop.
Experts say the federal legislation takes inspiration from states laws in Virginia and Kentucky, but a lack of bipartisan support could spell trouble.Â
The post House Republicans roll out national privacy bill appeared first on CyberScoop.
IntroductionOn March 12, 2026, Zscaler ThreatLabz discovered a malicious ZIP archive containing military-themed document lures targeting Chinese-speaking individuals. Our analysis of this sample uncovered a campaign leveraging a multi-stage attack chain where a trojanized SumatraPDF reader deploys a...
A new Mirai-based malware campaign is actively exploiting CVE-2025-29635, a high-severity command-injection vulnerability affecting D-Link DIR-823X routers, to enlist devices into the botnet. [...]
Security and data governance are among the key considerations in Google’s latest AI update, which introduces Workspace Intelligence within Google Workspace. Google describes the feature as “a secure, dynamic system that inherently understands complex semantic relationships within your Workspace apps...
The French government agency that issues and manages national IDs, passports, and other documents, announced that hackers stole the personal information of an unspecified number of citizens.
The iPhone and iPad bug allowed law enforcement using forensic tools to read messages that had long been deleted by the Signal app.
Qualys discovered that several vulnerabilities existed in the AppArmor
Linux kernel Security Module (LSM). An unprivileged local attacker could
use these issues to load, replace, and remove arbitrary AppArmor profiles
causing denial of service, exposure of sensitive information (kernel
memory), loca...
Hackers deployed a previously unknown wiper malware against Venezuela’s energy and utilities sector in an attack that appears to have been designed to destroy systems.
Author, Creator & Presenter: Olivia Gallucci, Security Engineer, Datadog
Our thanks to [un]prompted for publishing their Creators, Authors and Presenter’s outstanding [un]prompted 2026 AI Security Practitioner content on the Organizations' YouTube Channel.
Permalink
The post [un]prompted 2026...
In the first video of our Witness Protection series, find out how one anonymous activist infiltrated some of the most dangerous militias in the US.
In March 2026, Trivy, one of the most widely used open-source vulnerability scanners in the Kubernetes ecosystem, was weaponized against the very organizations that relied on it for security. Attackers compromised the Aqua Security repository, force-pushed malicious binaries, and poisoned 75 o...
In today's security landscape, some of the most dangerous vulnerabilities aren't flagged by automated scanners at all. These are the business logic flaws: subtle mistakes in an application's design or workflow that malicious actors can exploit by doing the unexpected. As a result, companies ca...