> TODAY'S SUMMARY (68 articles)
Today's cybersecurity landscape highlights several critical threats and developments. The new Hirudo Android malware is particularly concerning, as it replaces legitimate banking apps to steal credentials while evading security measures. Additionally, Microsoft's October Patch Tuesday saw a record 1,413 vulnerabilities addressed, including a zero-day actively exploited in the wild. Researchers also demonstrated the potential dangers of AI, with one team creating a full-chain Chrome exploit in just six days using public AI models. Meanwhile, fake "Meta Careers" pages are being used to phish Facebook and Google logins, emphasizing the ongoing risk of credential theft. Lastly, a crackdown on North Korean IT farms highlights the geopolitical dimensions of cyber threats.
|
// AI-powered summary generated at 12:01
Introduction Building on recent research identifying DNS-based exfiltration risks in Sandbox mode AgentCore Code Interpreters, I identified global S3 access as another Command & Control channel for sandboxed code interpreters. Unlike DNS-based exfiltration, which has since been fully mitigated,...
One group of hackers used AI for everything from vibe coding their malware to creating fake company websites—and stole as much as $12 million in three months.
Agencies Ignored EFF’s Public-Records Requests Regarding Unlawful Efforts to Locate People Who Criticized the Government or Attended Protests.SAN FRANCISCO – The Electronic Frontier Foundation (EFF) sued the Department of Homeland Security (DHS) and Immigration and Customs Enforcement (ICE) today de...
The cosmetics retailer, which counts 41 million customers in its membership data, declined to provide an accurate total number of customers affected.
What's New in CyberStrong
We're excited to share everything that's new in the latest CyberStrong releases. From expanded questionnaire capabilities to smarter risk reporting and a more intuitive personal work view, this cycle is packed with updates designed to help you work faster and manage r...
Age verification is expanding from laws to platforms and operating systems, reshaping the internet. Here’s what it means for privacy and access.
French authorities have arrested a suspected hacker believed to be behind dozens of data breaches targeting public institutions, sports federations and private organizations across the country.
The threat actor known as Harvester has been attributed to a new Linux version of its GoGra backdoor deployed as part of attacks likely targeting entities in South Asia.
"The malware uses the legitimate Microsoft Graph API and Outlook mailboxes as a covert command-and-control (C2) channel, allowing...
Read the latest DFIR news – Cyincore’s Emil Opachevsky calls for auditable AI in DFIR, ALEAPP 3.4.1 adds new mobile parsers, Tailscale research highlights Windows 11 artifacts, and more.
I've attended over 100 tech conferences in the past decade, and I've paid for maybe five of them. The rest? Free tickets through speaking engagements, partnerships, volunteering, and strategic relationships. Here's exactly how to do it.
The post How to Attend Tech Conferences and Events for Free: Th...
The Spanish police have dismantled the largest Spanish-language manga piracy platform, operating since 2014, with millions of monthly users from around the globe. [...]
Author, Creator & Presenter: Sergej Epp, CISO At Sysdig
Our thanks to [un]prompted for publishing their Creators, Authors and Presenter’s outstanding [un]prompted 2026 AI Security Practitioner content on the Organizations' YouTube Channel.
Permalink
The post [un]prompted 2026 – 8 Minutes to Adm...
The UK’s cybersecurity agency said the devices will be available for purchase by organizations around the world
NEW YORK, Apr. 21, 2026, CyberNewswire—BreachLock, a global leader in offensive security, today announced it has been named a representative vendor in the 2026 Gartner Market Guide for Adversarial Exposure Validation.
This recognition marks the first time … (more…)
The post News alert: BreachLock’s...
Here Is What That Looks Like From an Investigator’s Perspective. The DPRK remote IT worker scheme is not a cybersecurity problem. It is an identity fraud problem at state scale. The tools that can detect and attribute it are the same tools built for investigating threat actors, not screening job app...
Key Takeaways We identified an exposed server that provided unusual visibility into a large-scale, multi-victim exploitation and collection operation. Artifacts on the host showed that Claude Code and OpenClaw were embedded in the operator’s day-to-day workflow, supporting troubleshooting, orchestra...
The Mozilla Foundation tested Claude Mythos, an Anthropic AI model that has stirred debate in the cybersecurity community. Before granting access to Mythos, Mozilla scanned Firefox using Opus 4.6, which led to fixes for 22 security-sensitive bugs in Firefox 148. For instance, Mythos identified 271 v...
The DDoS attack caused a major outage, but Mastodon mitigated it within a few hours.
The post After Bluesky, Mastodon Targeted in DDoS Attack appeared first on SecurityWeek.
UK unveils £90m cybersecurity funding at CYBERUK to boost SME resilience, promote Cyber Essentials and a new Cyber Resilience Pledge, sparking industry debate
The U.K.'s cybersecurity chief warned that U.K. businesses and critical infrastructure are underestimating the threat from spyware attacks and other cyberthreats, with more governments having access to the powerful surveillance technology than ever.