Privacy/Governance Feed
Triad Nexus scales $200m scams, uses infrastructure laundering, localized fraud and US-access blocks – Read More –
Attack Feeds
Threat actors have been observed weaponizing n8n, a popular artificial intelligence (AI) workflow automation platform, to facilitate sophisticated phishing campaigns and deliver malicious payloads or fingerprint devices by sending automated emails. “By leveraging trusted infrastructure, these attackers bypass traditional security filters, turning productivity tools into delivery – Read More – The Hacker News
Privacy/Governance Feed
OpenAI’s new frontier model focused on cybersecurity comes following Anthropic’s launch of Claude Mythos Preview and Project Glasswing – Read More –
Privacy/Governance Feed
108 malicious Chrome extensions steal sessions, Google data, inject ads via single C2 infrastructure – Read More –
Privacy/Governance Feed
Huntress uncovers adware deploying AV-killing payloads via signed updates across 23,000 endpoints – Read More –
Privacy/Governance Feed
The EU cybersecurity agency looks to become the third Top-Level Root CVE Numbering Authority, alongside CISA and MITRE – Read More –
Attack Feeds
OpenAI said it is expanding its Trusted Access for Cyber program to “thousands of individuals and organizations,” who will use the company’s technology to root out bugs and vulnerabilities in their products. The program will also incorporate GPT 5.4 Cyber, a new variant of ChatGPT that OpenAI says is specifically optimized for cybersecurity tasks. OpenAI’s … Read More “OpenAI expands Trusted Access for Cyber program with new GPT 5.4 Cyber model – CyberScoop” »
Privacy/Governance Feed
Critical nginx-ui MCP authentication bypass CVE-2026-33032 actively exploited with CVSS 9.8 – Read More –
Attack Feeds
ShinyHunters hackers leak 7.54 GB of Rockstar Games data from Snowflake analytics systems, confirming no player records or personal information were exposed. – Read More – Hackread – Cybersecurity News, Data Breaches, AI and More
Attack Feeds
A number of critical vulnerabilities impacting products from Adobe, Fortinet, Microsoft, and SAP have taken center stage in April’s Patch Tuesday releases. Topping the list is an SQL injection vulnerability impacting SAP Business Planning and Consolidation and SAP Business Warehouse (CVE-2026-27681, CVSS score: 9.9) that could result in the execution of arbitrary database – Read More – The … Read More “April Patch Tuesday Fixes Critical Flaws Across SAP, Adobe, Microsoft, Fortinet, and More – The Hacker News” »
Attack Feeds
A recently disclosed critical security flaw impacting nginx-ui, an open-source, web-based Nginx management tool, has come under active exploitation in the wild. The vulnerability in question is CVE-2026-33032 (CVSS score: 9.8), an authentication bypass vulnerability that enables threat actors to seize control of the Nginx service. It has been codenamed MCPwn by Pluto Security. ” – Read More … Read More “Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover – The Hacker News” »
Attack Feeds
Few technologies have moved from experimentation to boardroom mandate as quickly as AI. Across industries, leadership teams have embraced its broader potential, and boards, investors, and executives are already pushing organizations to adopt it across operational and security functions. Pentera’s AI Security and Exposure Report 2026 reflects that momentum: every CISO surveyed – Read More – The Hacker News
Gov/ISAC Feeds
A step change in frontier AI models’ capabilities to find vulnerabilities in code can ultimately be a good thing for our cyber security. – Read More – All Feed
Attack Feeds
Cybersecurity researchers have revealed that 108 malicious Google Chrome extensions have been quietly stealing user credentials, hijacking Telegram sessions, and injecting unwanted ads and scripts into browsers – all reporting back to the same central point. Read more in my article on the Hot for Security blog. – Read More – GRAHAM CLULEY
Attack Feeds
Active HanGhost Loader campaign targets enterprise payment and logistics workflows with fileless attacks, multi-stage execution, and stealthy malware delivery. – Read More – Hackread – Cybersecurity News, Data Breaches, AI and More
Attack Feeds
A new Qrator Labs report reveals that the largest DDoS botnet has grown to 13.5 million devices, and… – Read More – Hackread – Cybersecurity News, Data Breaches, AI and More
Attack Feeds
Last year, Nvidia CEO Jensen Huang repeatedly denied that China was obtaining America’s most advanced chips. ‘There’s no evidence of any AI chip diversion,’ he said, dismissing such reports on another occasion as ‘tall tales.’ Federal prosecutors would beg to differ. They’ve charged six men over the past three weeks with smuggling billions of dollars’ … Read More “We’re only seeing the tip of the chip-smuggling iceberg – CyberScoop” »
Privacy/Governance Feed
Barracuda says 88% of brute-force attempts in Q1 were from the region – Read More –
Privacy/Governance Feed
At VulnCon, Lindsey Cerkovnik, head of vulnerability management at CISA, said AI companies should play a bigger role in vulnerability disclosures in the future – Read More –
Microsoft Issues Patches for SharePoint Zero-Day and 168 Other New Vulnerabilities – The Hacker News
Attack Feeds
Microsoft on Tuesday released updates to address a record 169 security flaws across its product portfolio, including one vulnerability that has been actively exploited in the wild. Of these 169 vulnerabilities, 157 are rated Important, eight are rated Critical, three are rated Moderate, and one is rated Low in severity. Ninety-three of the flaws are – Read More – The Hacker News
Privacy/Governance Feed
Microsoft has patched two zero-day flaws and over 160 others – Read More –
Privacy/Governance Feed
The PCI DSS 4.0 embodies a paradigm shift on payment data security- that of compliance checklists to on-going, risk-based… The post PCI DSS 4.0 roadmap for DPOs using vault appeared first on JISA Softech Pvt Ltd. – Read More – JISA Softech Pvt Ltd
Attack Feeds
OpenAI on Tuesday unveiled GPT-5.4-Cyber, a variant of its latest flagship model, GPT‑5.4, that’s specifically optimized for defensive cybersecurity use cases, days after rival Anthropic unveiled its own frontier model, Mythos. “The progressive use of AI accelerates defenders – those responsible for keeping systems, data, and users safe – enabling them to find and fix problems – Read … Read More “OpenAI Launches GPT-5.4-Cyber with Expanded Access for Security Teams – The Hacker News” »
Gov/ISAC Feeds
Multiple vulnerabilities have been discovered in Adobe products, the most severe of which could allow for arbitrary code execution. Adobe Acrobat Reader is a free, widely used software application from Adobe that allows users to view, print, sign, share, and annotate PDF documents. Adobe InDesign is desktop publishing software used to create, pre-flight, and publish … Read More “Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution – Cyber Security Advisories – MS-ISAC” »
Gov/ISAC Feeds
Multiple vulnerabilities have been discovered in Fortinet products, the most severe of which could allow for arbitrary code execution. FortiAnalyzer is a unified security operations platform that consolidates telemetry across networks, endpoints, and cloud environments. FortiClientEMS is a centralized management platform for deploying, configuring, monitoring, and enforcing security policies across numerous endpoints (computers) running the … Read More “Multiple Vulnerabilities in Fortinet Products Could Allow for Arbitrary Code Execution – Cyber Security Advisories – MS-ISAC” »
Critical Patches Issued for Microsoft Products, April 14, 2026 – Cyber Security Advisories – MS-ISAC
Gov/ISAC Feeds
Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for remote code execution. Successful exploitation of the most severe of these vulnerabilities could result in an attacker gaining the same privileges as the logged-on user. Depending on the privileges associated with the user, an attacker could then install programs; … Read More “Critical Patches Issued for Microsoft Products, April 14, 2026 – Cyber Security Advisories – MS-ISAC” »
Attack Feeds
The Cybersecurity and Infrastructure Security Agency has informed participants of the federal government’s Scholarship for Service program that it has canceled this year’s summer internship programs due to the current funding issues at the Department of Homeland Security. Emails from CISA obtained by CyberScoop recently informed applicants that the agency will not bring any CyberCorps: … Read More “CISA cancels summer internships for cyber scholarship students amid DHS funding lapse – CyberScoop” »
Attack Feeds
Digital Annotations replace paper markups in business, enabling real time collaboration, version control, and secure document workflows across teams. – Read More – Hackread – Cybersecurity News, Data Breaches, AI and More
Attack Feeds
Microsoft today pushed software updates to fix a staggering 167 security vulnerabilities in its Windows operating systems and related software, including a SharePoint Server zero-day and a publicly disclosed weakness in Windows Defender dubbed “BlueHammer.” Separately, Google Chrome fixed its fourth zero-day of 2026, and an emergency update for Adobe Reader nixes an actively exploited … Read More “Patch Tuesday, April 2026 Edition – Krebs on Security” »
Attack Feeds
Microsoft addressed 165 vulnerabilities affecting its various products and underlying systems, including one actively exploited vulnerability in Microsoft Office SharePoint, in this month’s Patch Tuesday update. “By my count, this is the second-largest monthly release in Microsoft’s history,” Dustin Childs, head of threat awareness at Trend Micro’s Zero Day Initiative, wrote in a blog post … Read More “Microsoft drops its second-largest monthly batch of defects on record – CyberScoop” »
Attack Feeds
A malicious Ledger Live app for macOS available from Apple’s App Store has drained approximately $9.5 million in cryptocurrency from 50 victims in just a few days this month. […] – Read More – BleepingComputer
Attack Feeds
Today is Microsoft’s April 2026 Patch Tuesday with security updates for 167 flaws, including 2 zero-day vulnerabilities. […] – Read More – BleepingComputer
Attack Feeds
Microsoft has released Windows 11 KB5083769 and KB5082052 cumulative updates for versions 25H2/24H2 and 23H2 to fix security vulnerabilities, bugs, and add new features. […] – Read More – BleepingComputer
Attack Feeds
Education company McGraw-Hill has confirmed in a statement to BleepingComputer that hackers exploited a Salesforce misconfiguration and accessed its internal data. […] – Read More – BleepingComputer
Attack Feeds
Microsoft has released the Windows 10 KB5082200 extended security update to fix the April 2026 Patch Tuesday vulnerabilities, including 2 zero-days. […] – Read More – BleepingComputer
Attack Feeds
Seth Whitworth, who is both acting Associate Deputy Chief of Space Operations for Cyber and Data and acting chief information security officer, said he believes AI tools are shifting the way defenders review cyber risk, both for individual systems and more holistically throughout an enterprise. In particular, Large Language Models can be used to systematically … Read More “Space Force official touts AI’s impact on cyber compliance – CyberScoop” »
Attack Feeds
Philadelphia, United States / Pennsylvania, 14th April 2026, CyberNewswire – Read More – Hackread – Cybersecurity News, Data Breaches, AI and More
Attack Feeds
Critical wolfSSL flaw CVE-2026-5194 allows digital ID forgery across billions of devices, update to version 5.9.1 to fix the issue and reduce risk. – Read More – Hackread – Cybersecurity News, Data Breaches, AI and More
Attack Feeds
It’s time once again for Patch Tuesday, and this one is huge. We’ve also got multiple exploits in the wild, which adds another layer of urgency to this month’s release. Take a break from your regularly scheduled activities, and let’s take a look at the latest security patches from Adobe and Microsoft. If you’d rather … Read More “The April 2026 Security Update Review – Zero Day Initiative – Blog” »
Alert Feeds
Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Apr 14 SEC Consult Vulnerability Lab Security Advisory < 20260414-0 > ======================================================================= title: Improper Enforcement of Locked Accounts in WebUI (SSO) product: Kiuwan SAST on-premise (KOP) & cloud/SaaS vulnerable version: <2.8.2509.4 fixed version: 2.8.2509.4 … Read More “SEC Consult SA-20260414-0 :: Improper Enforcement of Locked Accounts in WebUI (SSO) in Kiuwan SAST on-premise (KOP) & cloud/SaaS – Full Disclosure” »
Alert Feeds
Posted by Thomas Weber | CyberDanube via Fulldisclosure on Apr 14 CyberDanube Security Research 20260408-0 ——————————————————————————- title| Remote Operation Denial of Service product| Siemens SICAM A8000 CP-8050/CP-8031/CP-8010/CP-8012 vulnerable version| <=V25.30 fixed version| V26.10 CVE number| CVE-2026-27663 impact| Medium homepage| https://siemens.com/… – Read More – Full Disclosure
Alert Feeds
Posted by Thomas Weber | CyberDanube via Fulldisclosure on Apr 14 CyberDanube Security Research 20260408-1 ——————————————————————————- title| Multiple Vulnerabilities product| Siemens SICAM A8000 CP-8050/CP-8031/CP-8010/CP-8012 vulnerable version| <=V25.30 fixed version| V26.10 CVE number| CVE-2026-27664 impact| High homepage| https://siemens.com/ found|… – Read More – Full Disclosure
Attack Feeds
Two high-severity security vulnerabilities have been disclosed in Composer, a package manager for PHP, that, if successfully exploited, could result in arbitrary command execution. The vulnerabilities have been described as command injection flaws affecting the Perforce VCS (version control software) driver. Details of the two flaws are below – CVE-2026-40176 (CVSS – Read More – The Hacker News
Attack Feeds
Kraken exchange faces extortion after a staff member misused access to record internal systems, about 2,000 accounts affected, no funds or systems breached. – Read More – Hackread – Cybersecurity News, Data Breaches, AI and More
Attack Feeds
A small group of former Black Basta affiliates have targeted more than 100 employees across dozens of organizations to intrude network systems for potential data theft, ransomware deployment and extortion, according to ReliaQuest. The social engineering campaign, which involves mass email bombing and Microsoft Teams help desk impersonation, surged last month and dates back to … Read More “Black Basta’s playbook lives on as former affiliates launch fast-scale intrusion campaign – CyberScoop” »
Attack Feeds
Cybersecurity researchers have unmasked a novel ad fraud scheme that has been found to leverage search engine poisoning (SEO) techniques and artificial intelligence (AI)-generated content to push deceptive news stories into Google’s Discover feed and trick users into enabling persistent browser notifications that lead to scareware and financial scams. The campaign, which has been – Read More – … Read More “AI-Driven Pushpaganda Scam Exploits Google Discover to Spread Scareware and Ad Fraud – The Hacker News” »
Privacy/Governance Feed
A new IANS report claims just 34% of cybersecurity professionals plan to stay put in the next 12 months – Read More –
Attack Feeds
Google has announced the integration of a Rust-based Domain Name System (DNS) parser into the modem firmware as part of its ongoing efforts to beef up the security of Pixel devices and push memory-safe code at a more foundational level. “The new Rust-based DNS parser significantly reduces our security risk by mitigating an entire class of … Read More “Google Adds Rust-Based DNS Parser into Pixel 10 Modem to Enhance Security – The Hacker News” »
Attack Feeds
ViperTunnel is a Python-based backdoor linked to DragonForce ransomware that targets businesses using Windows servers across the US and the UK. – Read More – Hackread – Cybersecurity News, Data Breaches, AI and More
Attack Feeds
Booking.com confirms a data breach exposing customer details to hackers. No payment data accessed, but users face risk of targeted phishing scams now! – Read More – Hackread – Cybersecurity News, Data Breaches, AI and More