#cybersecurity
#cybersecurity

22 minutes ago

Information security

Microsoft's massive Patch Tuesday: It's raining bugs

A spoofing vulnerability in Microsoft SharePoint Server was exploited before a fix was issued, allowing unauthorized access to sensitive information.

Information security

April Patch Tuesday brings zero-days in Defender, SharePoint Server | Computer Weekly

Microsoft's April Patch Tuesday update addresses over 160 issues, including two critical zero-day vulnerabilities, marking one of the largest updates in history.

22 minutes ago

Microsoft's massive Patch Tuesday: It's raining bugs

A spoofing vulnerability in Microsoft SharePoint Server was exploited before a fix was issued, allowing unauthorized access to sensitive information.

April Patch Tuesday brings zero-days in Defender, SharePoint Server | Computer Weekly

Microsoft's April Patch Tuesday update addresses over 160 issues, including two critical zero-day vulnerabilities, marking one of the largest updates in history.

more#microsoft

58 minutes ago

Senate committee approves quantum reauthorization bill with 7 amendments

The Senate Commerce Committee advanced the reauthorization of the National Quantum Initiative Act with several key amendments for technological advancement and cybersecurity.

In the Wake of Anthropic's Mythos, OpenAI Has a New Cybersecurity Model-and Strategy

OpenAI announced GPT-5.4-Cyber, emphasizing cybersecurity safeguards and the need for advanced protections in AI models.

fromAxios

OpenAI expands access to cyber AI as hacking risks grow

OpenAI is shifting to a model that emphasizes identity verification for access to sensitive cybersecurity tools while expanding availability.

OpenAI Impacted by North Korea-Linked Axios Supply Chain Hack

OpenAI was affected by a supply chain attack involving malicious Axios packages attributed to North Korean hackers.

OpenAI Revokes macOS App Certificate After Malicious Axios Supply Chain Incident

OpenAI's macOS apps were affected by a supply chain attack, but no user data or internal systems were compromised.

fromWIRED

In the Wake of Anthropic's Mythos, OpenAI Has a New Cybersecurity Model-and Strategy

OpenAI announced GPT-5.4-Cyber, emphasizing cybersecurity safeguards and the need for advanced protections in AI models.

fromAxios

OpenAI expands access to cyber AI as hacking risks grow

OpenAI is shifting to a model that emphasizes identity verification for access to sensitive cybersecurity tools while expanding availability.

OpenAI Impacted by North Korea-Linked Axios Supply Chain Hack

OpenAI was affected by a supply chain attack involving malicious Axios packages attributed to North Korean hackers.

OpenAI Revokes macOS App Certificate After Malicious Axios Supply Chain Incident

OpenAI's macOS apps were affected by a supply chain attack, but no user data or internal systems were compromised.

CISA cancels CyberCorps summer internship hiring amid DHS shutdown

CISA reversed its decision to onboard summer interns due to a funding lapse in the Department of Homeland Security.

fromArs Technica

UK gov's Mythos AI tests help separate cybersecurity threat from hype

Mythos outperformed previous models in TLO tests, showing capability in attacking vulnerable systems but still facing limitations in complex scenarios.

Cars

frominsideevs.com

'We Should Not Let Them Into Our Country': Ford CEO On Chinese EVs

Allowing Chinese EVs into the U.S. could devastate American manufacturing and pose cyber risks.

fromnews.bitcoin.com

Cow Protocol Halts Trading After Frontend Domain Hijack

Cow Swap paused its protocol after a DNS hijacking incident on April 14, 2026, with no confirmed contract-level losses reported.

Someone planted backdoors in dozens of WordPress plugins used in thousands of websites | TechCrunch

Dozens of WordPress plugins were compromised by a backdoor, distributing malicious code after a change in ownership of the plugin maker.

#ai

Artificial intelligence

Anthropic co-founder confirms the company briefed the Trump adminstration on Mythos | TechCrunch

'Mythos-Ready' Security: CSA Urges CISOs to Prepare for Accelerated AI Threats

Mythos from Anthropic poses a significant threat by accelerating the timeline between vulnerability detection and exploitation in cybersecurity.

from24/7 Wall St.

10 hours ago

Artificial intelligence

Jim Cramer Says Market Has It All Wrong on Cybersecurity and AI

Artificial intelligence

World needs to 'get ready' for more powerful AI, Anthropic co-founder says

Runtime security becomes critical as AI accelerates threats

Artificial intelligence accelerates innovation and cyber threats, necessitating a focus on runtime security for effective enterprise protection.

Anthropic caused panic that Mythos will expose cybersecurity weak spots, but one industry veteran says real problem is fixing, not finding, them | Fortune

Anthropic's Claude Mythos Preview AI model identifies cybersecurity vulnerabilities, but experts question its impact on fixing existing issues.

Anthropic co-founder confirms the company briefed the Trump adminstration on Mythos | TechCrunch

Anthropic's Mythos model is too dangerous for public release, prompting engagement with the Trump administration despite ongoing legal disputes.

'Mythos-Ready' Security: CSA Urges CISOs to Prepare for Accelerated AI Threats

Mythos from Anthropic poses a significant threat by accelerating the timeline between vulnerability detection and exploitation in cybersecurity.

from24/7 Wall St.

10 hours ago

Jim Cramer Says Market Has It All Wrong on Cybersecurity and AI

Cybersecurity stocks are misclassified with traditional software, which undermines their true value and growth potential, especially in the context of AI advancements.

World needs to 'get ready' for more powerful AI, Anthropic co-founder says

Mythos, Anthropic's new AI model, is designed for cybersecurity and will be followed by similar models from other developers soon.

Runtime security becomes critical as AI accelerates threats

Artificial intelligence accelerates innovation and cyber threats, necessitating a focus on runtime security for effective enterprise protection.

Anthropic caused panic that Mythos will expose cybersecurity weak spots, but one industry veteran says real problem is fixing, not finding, them | Fortune

Anthropic's Claude Mythos Preview AI model identifies cybersecurity vulnerabilities, but experts question its impact on fixing existing issues.

more#ai

#artificial-intelligence

fromwww.nytimes.com

3 hours ago

Artificial intelligence

Video: Why Is Everyone Spooked by Claude Mythos Preview?

Claude Mythos Preview by Anthropic can identify zero-day exploits in software faster than human teams, raising significant implications for cybersecurity.

AI companies make powerful tech but they're also savvy marketers

AI models like Anthropic's Claude Mythos could expose significant software vulnerabilities, raising concerns about cybersecurity risks and potential misuse.

fromwww.nytimes.com

3 hours ago

Video: Why Is Everyone Spooked by Claude Mythos Preview?

Claude Mythos Preview by Anthropic can identify zero-day exploits in software faster than human teams, raising significant implications for cybersecurity.

more#artificial-intelligence

AI companies make powerful tech but they're also savvy marketers

AI models like Anthropic's Claude Mythos could expose significant software vulnerabilities, raising concerns about cybersecurity risks and potential misuse.

fromSecuritymagazine

21 hours ago

Venice Hydraulic Pump System Hacked, Hackers Claim Power to Create Floods

A group has hacked the flood risk management system in Venice, claiming they can manipulate floodgates protecting Piazza San Marco.

Games

4 hours ago

How the rewards app Freecash scammed its way to the top of the app stores | TechCrunch

Freecash misled users by promoting itself as a money-making app while harvesting sensitive data.

fromSecuritymagazine

21 hours ago

Pro-Iranian Actor Claims L.A. Metro Cyberattack

L.A. Metro is recovering from a cyberattack attributed to the pro-Iranian group Ababil of Minab, which claims significant data destruction and exfiltration.

5 hours ago

AI-Driven Pushpaganda Scam Exploits Google Discover to Spread Scareware and Ad Fraud

A new ad fraud scheme uses SEO techniques and AI-generated content to deceive users into enabling browser notifications for scams.

fromThe Cipher Brief

6 hours ago

Avoiding Another 9/11: 3 Key Reasons to Reauthorize Section 702

Section 702 of the FISA is crucial for U.S. national security and should be reauthorized to prevent unnecessary risks.

Adobe fixes PDF zero-day security bug that hackers have exploited for months | TechCrunch

Adobe patched a critical vulnerability in Acrobat DC and Reader DC that allowed hackers to remotely install malware via malicious PDF files.

Adobe finally patches PDF pest after months of abuse

Adobe released a patch for a critical zero-day vulnerability in Acrobat and Reader that allowed arbitrary code execution via malicious PDFs.

Software development

fromComputerworld

Adobe Summit 2026: How Adobe hopes to redesign marketing and creativity with AI

Shantanu Narayen steps down as Adobe CEO after 18 years, continuing as chairman while a successor is sought.

Adobe Patches Reader Zero-Day Exploited for Months

Adobe released emergency patches for a critical zero-day vulnerability in Acrobat and Reader that has been exploited for several months.

6 hours ago

Adobe fixes PDF zero-day security bug that hackers have exploited for months | TechCrunch

Adobe patched a critical vulnerability in Acrobat DC and Reader DC that allowed hackers to remotely install malware via malicious PDF files.

Adobe finally patches PDF pest after months of abuse

Adobe released a patch for a critical zero-day vulnerability in Acrobat and Reader that allowed arbitrary code execution via malicious PDFs.

Software development

fromComputerworld

Adobe Summit 2026: How Adobe hopes to redesign marketing and creativity with AI

Shantanu Narayen steps down as Adobe CEO after 18 years, continuing as chairman while a successor is sought.

Adobe Patches Reader Zero-Day Exploited for Months

Adobe released emergency patches for a critical zero-day vulnerability in Acrobat and Reader that has been exploited for several months.

more#adobe

fromThe Cipher Brief

The Case for Reauthorizing Section 702

Section 702 is essential for national security, enabling the disruption of cyberattacks and tracking terrorist plots without targeting Americans.

0APT ransomware gang extorts Krybit amid doxxing threat

0APT threatens to expose Krybit members, highlighting the bizarre rivalry between ransomware gangs.

#data-breach

EU data protection

Europe's Largest Gym Chain Says Data Breach Impacts 1 Million Members

Privacy professionals

Nightclub Giant RCI Hospitality Reports Data Breach

fromTechRepublic

Privacy professionals

Booking.com Hack Exposes Customer Data, Sparks Travel Scam Fears

Privacy professionals

Booking.com confirms hackers accessed customers' data | TechCrunch

Information security

'Grand Theft Auto' publisher Rockstar hit by hackers again | Computer Weekly

Information security

Hack at Anodot leaves over a dozen breached companies facing extortion | TechCrunch

EU data protection

Europe's Largest Gym Chain Says Data Breach Impacts 1 Million Members

Basic-Fit experienced a data breach affecting personal information of approximately 1 million members across several European countries.

Nightclub Giant RCI Hospitality Reports Data Breach

RCI Hospitality Holdings reported a cybersecurity incident exposing sensitive personal information of independent contractors due to an IDOR vulnerability.

fromTechRepublic

Booking.com Hack Exposes Customer Data, Sparks Travel Scam Fears

Hackers breached Booking.com, exposing personal data of customers, including names, addresses, and booking details, raising concerns about privacy and security.

Booking.com confirms hackers accessed customers' data | TechCrunch

Hackers accessed Booking.com customers' personal data, including names, emails, and booking details, prompting notifications to affected users.

'Grand Theft Auto' publisher Rockstar hit by hackers again | Computer Weekly

Rockstar Games faces a cyber attack from ShinyHunters, threatening to release data after extortion demands were rejected.

Hack at Anodot leaves over a dozen breached companies facing extortion | TechCrunch

Hackers stole data from multiple companies after breaching Anodot, exposing customers to extortion and potential data publication.

3 Quantum Realities to Confront this World Quantum Day

World Quantum Day emphasizes the urgency for organizations to prepare for quantum risks and the importance of starting migration processes now.

9 hours ago

Mirax Android RAT Turns Devices into SOCKS5 Proxies, Reaching 220,000 via Meta Ads

Mirax integrates advanced Remote Access Trojan (RAT) capabilities, allowing threat actors to fully interact with compromised devices in real time, enhancing its operational value significantly.

Roam Research

Business

from24/7 Wall St.

9 hours ago

From Growth Stock to Blue Chip: Is CrowdStrike Ready for the Dow?

CrowdStrike is being considered for inclusion in the Dow Jones Industrial Average due to its strong financial profile and lack of cybersecurity representation.

#phishing

Information security

Attackers are targeting developers via Slack and Google Sites

Information security

FBI and Indonesian Police Dismantle W3LL Phishing Network Behind $20M Fraud Attempts

Attackers are targeting developers via Slack and Google Sites

A targeted phishing campaign exploits trust in the open-source community, tricking developers into providing credentials and installing malicious software.

FBI and Indonesian Police Dismantle W3LL Phishing Network Behind $20M Fraud Attempts

The FBI and Indonesian National Police dismantled a global phishing operation using the W3LL toolkit, preventing over $20 million in fraud.

Organizations Warned of Exploited Windows, Adobe Acrobat Vulnerabilities

CISA expanded its Known Exploited Vulnerabilities catalog with seven new vulnerabilities, including critical Windows and Adobe flaws.

108 Malicious Chrome Extensions Steal Google and Telegram Data, Affecting 20,000 Users

A cluster of 108 malicious Chrome extensions collects user data and injects ads, compromising browser security.

Fake Linux Foundation leader using Slack to phish devs

A malware campaign targets open source developers via Slack, impersonating a Linux Foundation official to steal credentials and compromise systems.

CPUID Hacked to Serve Trojanized CPU-Z and HWMonitor Downloads

The CPUID website was hacked, distributing malicious versions of popular hardware monitoring tools for approximately six hours.

Fake Claude Website Distributes PlugX RAT

A fake Anthropic Claude website distributed a remote access trojan disguised as a legitimate application download.

CPUID Breach Distributes STX RAT via Trojanized CPU-Z and HWMonitor Downloads

CPUID was compromised to distribute malicious executables and deploy STX RAT for less than 24 hours.

12 hours ago

108 Malicious Chrome Extensions Steal Google and Telegram Data, Affecting 20,000 Users

A cluster of 108 malicious Chrome extensions collects user data and injects ads, compromising browser security.

Fake Linux Foundation leader using Slack to phish devs

A malware campaign targets open source developers via Slack, impersonating a Linux Foundation official to steal credentials and compromise systems.

CPUID Hacked to Serve Trojanized CPU-Z and HWMonitor Downloads

The CPUID website was hacked, distributing malicious versions of popular hardware monitoring tools for approximately six hours.

Fake Claude Website Distributes PlugX RAT

A fake Anthropic Claude website distributed a remote access trojan disguised as a legitimate application download.

CPUID Breach Distributes STX RAT via Trojanized CPU-Z and HWMonitor Downloads

CPUID was compromised to distribute malicious executables and deploy STX RAT for less than 24 hours.

Information security

CISA Adds 6 Known Exploited Flaws in Fortinet, Microsoft, and Adobe Software

CISA added six security flaws to its KEV catalog due to evidence of active exploitation.

Anthropic's Mythos preview: why the human layer matters more, not less

Anthropic's Mythos Preview autonomously discovers and exploits high-severity vulnerabilities, achieving a 72.4% success rate in exploit chaining.

14 hours ago

CISA Adds 6 Known Exploited Flaws in Fortinet, Microsoft, and Adobe Software

CISA added six security flaws to its KEV catalog due to evidence of active exploitation.

Anthropic's Mythos preview: why the human layer matters more, not less

Anthropic's Mythos Preview autonomously discovers and exploits high-severity vulnerabilities, achieving a 72.4% success rate in exploit chaining.

more#vulnerabilities

Cars

16 hours ago

Ford's CEO said Chinese carmakers entering the US would be 'devastating'

Chinese automakers pose a significant threat to the US automotive industry, with concerns over economic impact and cybersecurity risks.

Why the Iran cyberattack everyone warned about hasn't really happened yet

Iran-linked hackers have conducted minor cyberattacks in the U.S. but have focused on other regions with more significant incursions.

First they went after medtech, then Kash Patel. Iranian hackers' next target is likely 'low-hanging fruit' in water, energy, and tourism, experts say | Fortune

Iran-linked hackers are targeting high-profile figures and critical infrastructure in the U.S. and Israel to sow disruption.

fromFast Company

23 hours ago

Why the Iran cyberattack everyone warned about hasn't really happened yet

Iran-linked hackers have conducted minor cyberattacks in the U.S. but have focused on other regions with more significant incursions.

First they went after medtech, then Kash Patel. Iranian hackers' next target is likely 'low-hanging fruit' in water, energy, and tourism, experts say | Fortune

Iran-linked hackers are targeting high-profile figures and critical infrastructure in the U.S. and Israel to sow disruption.

Ransomware scum, other crims exploit 4 old Microsoft bugs

Four Microsoft vulnerabilities are actively exploited, including one from 2012, prompting CISA to urge federal agencies to patch them within two weeks.

fromTNW | Anthropic

Trump administration blacklisted Anthropic - now tells banks to use its AI

Treasury Secretary and Fed Chair urge major banks to test Anthropic's Mythos AI for cybersecurity despite Pentagon's legal battle against the company.

Remote teams

OPM seeks cybersecurity talent to join Tech Force

The Office of Personnel Management is recruiting cybersecurity employees through the U.S. Tech Force to address workforce shortages in federal agencies.

JanelaRAT Malware Targets Latin American Banks with 14,739 Attacks in Brazil in 2025

JanelaRAT malware targets financial institutions in Latin America, stealing sensitive data and employing advanced infection techniques.

LinkedIn is quietly moving into the AI training business

LinkedIn is launching an AI labor marketplace for training chatbots, offering up to $150 an hour for various roles.

Cryptocurrency

fromnews.bitcoin.com

Kraken Targeted by Extortion Group Threatening to Leak Internal Support Videos

Kraken will not pay ransom demanded by a criminal group threatening to release internal support videos.

#goldman-sachs

Goldman Sachs chief hyper-aware' of risks from Anthropic's Mythos AI

Goldman Sachs is closely monitoring Anthropic's Mythos AI due to its cybersecurity risks and enhancing its own security measures.

Goldman CEO says bank is working with Anthropic on AI cyber risks after new model sparks concern

Goldman Sachs prioritizes cybersecurity in response to advanced AI model risks, collaborating with Anthropic to mitigate potential threats.

Goldman Sachs chief hyper-aware' of risks from Anthropic's Mythos AI

Goldman Sachs is closely monitoring Anthropic's Mythos AI due to its cybersecurity risks and enhancing its own security measures.

fromElectronic Frontier Foundation

Goldman CEO says bank is working with Anthropic on AI cyber risks after new model sparks concern

Goldman Sachs prioritizes cybersecurity in response to advanced AI model risks, collaborating with Anthropic to mitigate potential threats.

more#goldman-sachs

Social justice

Speaking Freely: Dr. Jean Linis-Dinco

Jean Linis-Dinco advocates for technology that prioritizes human rights and justice over corporate profit, shaped by her experiences with inequality and state violence.

FCC selects ioXt Alliance to lead cyber labeling program

ioXt Alliance will lead the FCC's Cyber Trust Mark cybersecurity labeling program for consumer smart devices.

fromMail Online

Warning to iPhone users over iCloud storage scam exposing bank details

A new email scam targets iPhone users, posing as iCloud notifications to steal personal and banking information.

BrowserGate: Claims of LinkedIn 'Spying' Clash With Security Research Findings

LinkedIn allegedly scans users' computers to collect data on browser extensions, raising concerns about corporate espionage.

Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and More

A critical zero-day vulnerability in Adobe Acrobat Reader is actively exploited, alongside state-sponsored cyber threats targeting U.S. infrastructure.

Your MTTD Looks Great. Your Post-Alert Gap Doesn't

Defenders are slow in responding to alerts, creating a significant gap in cybersecurity effectiveness against fast-moving threats.

EU data protection

fromInfoQ

How SBOMs and Engineering Discipline Can Help You Avoid Trivy's Compromise

SBOMs are essential for developers to enhance security and comply with new legislative requirements.

Silicon Valley

fromWIRED

The Dumbest Hack of the Year Exposed a Very Real Problem

A cyberattack in Silicon Valley exploited weak passwords to spoof crosswalk button recordings with voices of tech CEOs, raising security concerns.

GTA-maker Rockstar Games hacked again but downplays impact

Rockstar Games experienced a data breach by hackers demanding ransom, but the company claims it has no impact on its operations or players.

fromEngadget

3 days ago

Rockstar Games has confirmed it was hit by third-party data breach

ShinyHunters claims to have breached Rockstar Games' servers, demanding payment to prevent data leaks.

fromwww.bbc.com

GTA-maker Rockstar Games hacked again but downplays impact

Rockstar Games experienced a data breach by hackers demanding ransom, but the company claims it has no impact on its operations or players.

fromEngadget

3 days ago

Rockstar Games has confirmed it was hit by third-party data breach

ShinyHunters claims to have breached Rockstar Games' servers, demanding payment to prevent data leaks.

North Korea's APT37 Uses Facebook Social Engineering to Deliver RokRAT Malware

APT37 employs social engineering on Facebook to deliver RokRAT via a compromised PDF viewer.

Adobe patches vulnerability that steals data via PDFs

A sophisticated attack exploits a vulnerability in Adobe Reader via malicious PDF files to gather sensitive information and potentially execute arbitrary code.

Cisco aims to make AI agents safer with proposed acquisition of Astrix

Cisco is pursuing an acquisition of Astrix Security to enhance its AI security capabilities.

Privacy technologies

fromYahoo Tech

Hackers Are Using Your Home Router to Spy on Microsoft 365 Users

Russian spies exploited consumer routers to steal Microsoft 365 credentials from thousands of users, turning home devices into espionage tools.

Marketing

fromFast Company

Is a Formula One partnership worth it?

Brand alliances with Formula One teams require significant investment, but alignment with business goals and audience is crucial for success.

Privacy technologies

Your photos will be deleted': Apple users warned over nasty' iCloud storage scam

Scam emails impersonating Apple threaten users about full iCloud storage to steal personal and bank details.

3 days ago

Hungary officials used weak passwords exposed in breach dump

An investigation by Bellingcat has uncovered close to 800 Hungarian government email and password pairings circulating in breach dumps, cutting across nearly every major ministry, from defense and foreign affairs to finance.

Information security

fromIPWatchdog.com | Patents & Intellectual Property Law

4 years ago

Patent Filings Roundup: Heavy District Court Docket Sees Fortress Biotech ANDA Litigation; WePay Expands GUI Design Patent Assertion Against Major Online Payment Systems

Over 100 new patent complaints were filed in the district court, with significant activity in pharmaceutical and cybersecurity sectors.

fromZDNET

Your router may be vulnerable to Russian hackers, FBI warns: 5 steps to take now

FBI and NSA warn of Russian hackers targeting vulnerable routers, urging users to update firmware and strengthen passwords.

US push to counter hackers draws industry deeper into offensive cyber debate

The U.S. government seeks private sector involvement in cyber defense, but clarity on offensive roles remains uncertain.

Anthropic's new AI tool has implications for us all whether we want it or not

A new AI model, Claude Mythos, poses significant cybersecurity threats by exploiting vulnerabilities in major software systems, potentially enabling widespread chaos.

FCC foreign-router policy may snarl Wi-Fi 7 rollout

The US ban on foreign-made network routers is impractical, limiting consumer choice and delaying access to next-gen products like Wi-Fi 7.

Careers