The social engineering campaign spiked last month and has targeted dozens of organizations since May 2025, according to ReliaQuest. The post Black Basta’s playbook lives on as former affiliates...
This is a current list of where and when I am scheduled to speak: I’m speaking at DemocracyXChange 2026 in Toronto, Ontario, Canada, on April 18, 2026. I’m speaking at the SANS AI Cybersecurity...
A nascent Android remote access trojan called Mirax has been observed actively targeting Spanish-speaking countries, with campaigns reaching more than 220,000 accounts on Facebook, Instagram,...
OX Security recently analyzed 216 million security findings across 250 organizations over a 90-day period. The primary takeaway: while raw alert volume grew by 52% year-over-year, prioritized...
Internal emails obtained by WIRED reveal how a conservative legal group with a direct line into FCC chairman Brendan Carr’s office built the case against Jimmy Kimmel and his employees.
During his two years as the chief information security officer for the Department of Homeland Security, Hemant Baidwan said he has a lot to be proud of. He led the development of a DHS...
Cybersecurity is an increasingly important component of public health preparedness as state cybersecurity policy intersects with public health agency responsibilities. Public health agencies rely...
Last July, OpenAI CEO Sam Altman told viral podcaster Theo Von that it’s “screwed up” that conversations with an AI helper aren’t afforded the same legal protections as conversations with a human...
SAP security advisory – April 2026 monthly rollup (AV26-349)
Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for remote code execution. Successful exploitation of the most severe of these...
Drawing on lessons from the Iran war, a study shows how Russia could force Lithuania into capitulation in 90 days with no soldiers crossing the border. Drafted by the Baltic Defense Initiative, a...
Microsoft has released the Windows 10 KB5082200 extended security update to fix the April 2026 Patch Tuesday vulnerabilities, including 2 zero-days. [...]
Education company McGraw-Hill has confirmed in a statement to BleepingComputer that hackers exploited a Salesforce misconfiguration and accessed its internal data. [...]
Why didn’t China’s rise trigger containment sooner? For three decades, Beijing’s economic weight expanded dramatically, its military modernized at speed, and its diplomatic footprint widened...
Cybersecurity researchers have discovered a new campaign in which a cluster of 108 Google Chrome extensions has been found to communicate with the same command-and-control (C2) infrastructure with...
AI isn’t creating new classes of vulnerabilities, according to research from Wiz – but it is expanding the range of where well-known risks can appear. Analysis from the cloud security firm found...
[Control systems] Siemens security advisory (AV26-347)
Samsung mobile security advisory (AV26-348)
OpenAI is requiring all macOS users to update their OpenAI apps after a supply chain attack compromised a third-party developer library and exposed certificates used to verify the authenticity of...
8Critical154Important1Moderate0LowMicrosoft addresses 163 CVEs in the April 2026 Patch Tuesday release, including two zero-day vulnerabilities, one of which was exploited in the wild.Microsoft...
A look at 2025 state-sponsored threats, exploring how actors linked to China, Russia, North Korea, and Iran use vulnerabilities, identity, and trusted access paths to achieve their goals.
A proposed federal class action lawsuit alleges two California healthcare organizations violated patient privacy laws in their use of an artificial intelligence-enabled tool that records,...
Microsoft has released Windows 11 KB5083769 and KB5082052 cumulative updates for versions 25H2/24H2 and 23H2 to fix security vulnerabilities, bugs, and add new features. [...]
Multiple vulnerabilities have been discovered in Fortinet products, the most severe of which could allow for arbitrary code execution.FortiAnalyzer is a unified security operations platform that...
Today is Microsoft's April 2026 Patch Tuesday with security updates for 167 flaws, including 2 zero-day vulnerabilities. [...]
Spring Lake Park Schools has cancelled all classes for a second straight day as it works to restore critical systems following a suspected ransomware attack. According to an initial release from...
New data from Black & Veatch-Takepoint Research finds a persistent execution gap in the manner cybersecurity is integrated... The post Black & Veatch-Takepoint Research finds fragmented ownership...
Videos circulating on dark web forums have pulled crypto exchange Kraken into an extortion attempt, but the exchange says no systems were compromised and client funds remain secure. The firm...
Multiple vulnerabilities have been discovered in Adobe products, the most severe of which could allow for arbitrary code execution.Adobe Acrobat Reader is a free, widely used software application...
Vaccines are at risk from Chinese hackers who can break into internet-connected refrigerators, a cross-party group of MPs and experts has warned. The Coalition on Secure Technology, the...