[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (1 articles)

|

// AI-powered summary generated at 00:00

> A core infrastructure engineer pleads guilty to federal charges in insider attack
When Daniel Rhyne pleaded guilty on April 1 to having launched an insider extortion attack against his then-employer, authorities enumerated the techniques he used, including unauthorized remote desktop sessions, deletion of network administrator accounts, changing of password...
> EU cyber agency attributes major data breach to TeamPCP hacking group
The European Union’s cybersecurity agency said the hacking group TeamPCP was behind a massive recent data breach at the European Commission.
> Everything I Learned About Harness Engineering and AI Factories in San Francisco (April 2026)
I spent the last week The post Everything I Learned About Harness Engineering and AI Factories in San Francisco (April 2026) appeared first on Security Boulevard.
> Everything I Learned About Harness Engineering and AI Factories in San Francisco (April 2026)
I spent the last week The post Everything I Learned About Harness Engineering and AI Factories in San Francisco (April 2026) appeared first on Security Boulevard.
> Hims & Hers warns of data breach after Zendesk support ticket breach
Telehealth giant Hims & Hers Health is warning that it suffered a data breach after support tickets were stolen from a third-party customer service platform. [...]
> Tech Nonprofits to Feds: Don’t Weaponize Procurement to Undermine AI Trust and Safety
While the very public fight continues between the Department of Defense and Anthropic over whether the government can punish a company for refusing to allow its technology to be used for mass surveillance, another branch of the U.S. government is quietly working to ensure that this dispute will neve...
> China-Linked TA416 Targets European Governments with PlugX and OAuth-Based Phishing
A China-aligned threat actor has set its sights on European government and diplomatic organizations since mid-2025, following a two-year period of minimal targeting in the region. The campaign has been attributed to TA416, a cluster of activity that overlaps with DarkPeony, RedDelta, Red Lich, SmugX...
> Do not get high(jacked) off your own supply (chain)
In the span of just a few weeks, we have observed a dizzying array of major supply chain attacks. If we are all building on such shaky foundation, what can we do to keep safe?
> Google patches fourth Chrome zero-day so far this year
Google has patched another zero-day vulnerability in Chrome, its fourth this year. In patching the vulnerability, tracked as CVE-2026-5281, the company acknowledged that an exploit for it already exists in the wild. According to the report in NIST’s National Vulnerability D...
> Internet Bug Bounty program hits pause on payouts
Researchers who identify and report bugs in open-source software will no longer be rewarded by the Internet Bug Bounty team. HackerOne, which administers the program, has said that it is “pausing submissions” while it contemplates ways in which open source security can be hand...
> Randall Munroe’s XKCD ‘Amperage’
via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink The post Randall Munroe’s XKCD ‘Amperage’ appeared first on Security Boulevard.
> Axois NPM Supply Chain Incident
Overview of the recent Axios NPM supply chain incident including details of the payloads delivered from actor-controlled infrastructure.
> Claude Code is still vulnerable to an attack Anthropic has already fixed
The leak of Claude Code’s source is already having consequences for the tool’s security. Researchers have spotted a vulnerability documented in the code. The vulnerability, revealed by AI security company Adversa, is that if Claude Code is presented with a command composed...
> Slackware 15.0 Krita Urgent Memory Vulnerability Resolution SSA-2026-093-03
New krita packages are available for Slackware 15.0 to fix a security issue.
> Slackware 15.0 Info-Zip Null Reference Issue Resolution SSA-2026-093-01
New infozip packages are available for Slackware 15.0 and -current to fix security issues.
> Die Linke German political party confirms data stolen by Qilin ransomware
The Qilin ransomware group has claimed responsibility for an attack against Die Linke ('The Left'), forcing an IT systems outage at the political party, and threatening sensitive data leak. [...]
> Trump budget proposal would cut hundreds of millions more from CISA
A top congressional Democrat criticized both the scope and nature of the proposed reduction. The post Trump budget proposal would cut hundreds of millions more from CISA appeared first on CyberScoop.
> Wyden warns Social Security chief: Trump’s voter database is ‘blatant voter suppression’
The Senate Democrat said that the SSA following Trump’s executive order would indicate “willing participation” in the administration’s midterm elections scheme. The post Wyden warns Social Security chief: Trump’s voter database is ‘blatant voter suppression’ appeared first on CyberScoop.
> Meet Vespasian. It Sees What Static Analysis Can’t.
Praetorian is excited to announce the release of Vespasian, a probabilistic API endpoint discovery, enumeration, and analysis tool. Vespasian watches real HTTP traffic from a headless browser or your existing proxy captures and turns it into API specifications (OpenAPI, GraphQL SDL, WSDL). We built...
> Managing open-source vulnerabilities | Kaspersky official blog
How to enrich data, fine-tune AI-powered systems, and update corporate policies to mitigate open-source supply chain risks.