April 2026

Mustang Panda’s New LOTUSLITE Variant Targets India Banks, South Korea Policy Circles 2026-04-22 at 11:49 By Cybersecurity researchers have discovered a new variant of a known malware called LOTUSLITE that’s distributed via a theme related to India’s banking sector. “The backdoor communicates with a dynamic DNS-based command-and-control server over HTTPS and supports remote shell access,

Cohere AI Terrarium Sandbox Flaw Enables Root Code Execution, Container Escape 2026-04-22 at 11:49 By A critical security vulnerability has been disclosed in a Python-based sandbox called Terrarium that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-5752, is rated 9.3 on the CVSS scoring system. “Sandbox escape vulnerability in Terrarium allows arbitrary

The Security Metric That’s Failing You 2026-04-22 at 09:07 By Security teams have measured patch rates for so long that somewhere along the way, the metric became the strategy. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Mythos found 271 Firefox flaws – but none a human couldn’t spot 2026-04-22 at 08:33 By Simon Sharwood Mozilla CTO says AI means developers finally have a chance to get on top of security The Mozilla Foundation has revealed it tested Anthropic’s bug-finding “Mythos” AI model and feels the results it experienced represent a watershed

The Privacy–Security Partnership: How We Bend Risk in a Resource Crunch 2026-04-22 at 08:33 By The partnership between cybersecurity and privacy matters now more than ever. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Magnificent irony as Meta staff unhappy about running surveillance software on work PCs 2026-04-22 at 06:04 By Simon Sharwood Zuck reportedly needs to capture workers’ keystrokes to build AI Meta, the company built on watching everything its billions of users do online so it can keep them clicking on ragebait and targeted ads, is reportedly

Anthropic tests how devs react to yanking Claude Code from Pro plan 2026-04-22 at 03:42 By Thomas Claburn Unannounced change apparently aimed at two percent of users but hit documentation for everyone Anthropic has removed Claude Code from its Pro subscription plan, according to some of its public-facing web pages, but the company says it’s

Apple has an opportunity to rediscover humanity in its push toward AI 2026-04-22 at 01:49 By Thomas Claburn John Ternus can remake Apple the way it should have been OPINION  Apple’s pending leadership transition affords the company a rare opportunity to return to its roots and once again serve as a source of inspiration instead

Nation-states want to cause harm, not just steal cash – stop handing your cyber defenses to the cheapest contractor 2026-04-22 at 01:06 By Connor Jones NCSC boss says China’s whole-of-state cyber machine has become Britain’s peer competitor in cyberspace State-sponsored cyberattacks from Chinese intelligence and military agencies display “an eye-watering level of sophistication,” UK National