> TODAY'S SUMMARY (68 articles)
Today's cybersecurity news highlights several critical threats and trends. Microsoft has issued a significant Patch Tuesday update, addressing 1,094 vulnerabilities, including a zero-day flaw in Outlook that could expose hashed NTLM credentials. Additionally, hackers are actively exploiting high-severity vulnerabilities in Cisco BroadWorks and Openwave systems, emphasizing the urgency for organizations to patch these flaws. New AI-related threats are emerging, with Microsoft researchers demonstrating how hidden backdoors can be implanted in AI models. Meanwhile, a new tool advertised by hackers claims to maintain Gmail access post-password resets, raising concerns over credential security. Lastly, the SANS Institute reports that incidents in operational technology (OT) environments are on the rise, with one-third of industrial organizations affected.
|
// AI-powered summary generated at 12:00
TL;DR Bloomberg reported on April 1, 2026 that Iran’s Islamic Revolutionary Guard Corps (IRGC) was already extracting transit tolls from…
The post Iran’s Strait of Hormuz Crypto Toll: An Evolution of Tehran’s Expanding Use of Digital Assets appeared first on Chainalysis.
Flashpoint analysts, working with partner financial institutions, have observed a growing number of PhaaS operations operating with a level of coordination and specialization more commonly associated with legitimate software platforms. These ecosystems bring together phishing kit developers, infrast...
At Wordfence, we run a bug bounty program that pays out mid-six figures per year to researchers in bug bounties for WordPress related vulnerabilities. Funding this research helps us improve security for the WordPress community overall, and helps us secure our customers by rolling out protection for...
La Cour administrative suprême a confirmé une décision de l'autorité polonaise de protection des données (UODO) ordonnant la suppression de données à l'encontre de BEST Société de fonds d'investissement S.A. et BEST III Fonds d'investissement non public, pour des manquements en lien avec la collecte...
We found a convincing fake site that installs a trojanized Claude app while quietly deploying PlugX malware.
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre de VODAFONE ESPAÑA, S.A.U. (comprenant le prononcé d'une amende de 250 000 €) pour des manquements en lien avec la réattribution erronée d'un numéro de téléphone ayant entraîné une violation de la conf...
L'Autorité britannique de protection des données (ICO) rappelle les obligations des partis politiques en matière d'utilisation des données personnelles dans le contexte des élections parlementaires et locales prévues en mai 2026.Le Commissaire à l'information a écrit aux partis politiques pour leur...
The attack surface targeted by Iranian-linked hackers in cyberattacks against U.S. critical infrastructure networks includes thousands of Internet-exposed programmable logic controllers (PLCs) manufactured by Rockwell Automation. [...]
The fraud landscape has been changed by AI and cryptocurrency in a way that should concern organisations and individuals alike.
Read more in my article on the Fortra blog.
Leading Through the Cyber Abyss
In Episode 019 of The Defender’s Log, host David Redekop sits down with Nim Nadarajah, CISO and Managing Partner of Critical Matrix, to explore the evolving landscape of cybersecurity leadership. From the “annual pilgrimage” of RSAC 2026 to the front lines of incident...
In this episode of The Talos Threat Perspective, we discuss how vulnerability exploitation is accelerating, and why attacker speed, AI, and exposed systems are affecting the patch window.
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 147.0.7727.55-1~deb12u1.
Posted by Jiacheng Lu, Software Engineer, Google Pixel Team
Google is continuously advancing the security of Pixel devices. We have been focusing on hardening the cellular baseband modem against exploitation. Recognizing the risks associated within the complex modem firmware, Pixel 9 shipped with m...
ClickFix campaigns have found a way around macOS Tahoe's warnings against pasting commands in the Terminal. They're using Script Editor instead.
Author, Creator & Presenter: Daniel Miessler, Founder, Unsupervised Learning
Our thanks to [un]prompted for publishing their Creators, Authors and Presenter’s outstanding [un]prompted 2026 AI Security Practitioner content on the Organizations' YouTube Channel.
Permalink
The post [un]prompted 2...
Other noteworthy stories that might have slipped under the radar: Jones Day hacked, Internet Bug Bounty program paused due to AI, new Mac stealer malware.
The post In Other News: Cyberattack Stings Stryker, Windows Zero-Day, China Supercomputer Hack appeared first on SecurityWeek.
German police have pinned a name to one of the world’s most notorious hackers. Danii Shchukin operated under the names of UNKN or Unknown and GandCrab and was, according to German police, the leader of one of the largest globally active ransomware groups, known as GandCrab/Rev...
France's move to ditch Windows for Linux is its latest effort to reduce its reliance on American tech giants.
Dutch healthcare IT firm ChipSoft suffered a ransomware attack, forcing services and its HiX platform offline, impacting hospitals and patients. ChipSoft, a major Dutch provider of EHR systems, was hit by a ransomware attack that forced it to take its website and digital services offline, disrupting...
Last week, the family of one of two victims in the attack announced it plans to sue OpenAI because the gunman allegedly constantly communicated with ChatGPT in the days leading to the shootings.