April 2026

Chevin pulls the handbrake on FleetWave software after security scare

Chevin pulls the handbrake on FleetWave software after security scare 2026-04-09 at 20:09 By Carly Page UK and US customers stuck waiting after fleet management SaaS vendor took affected environments offline A cybersecurity incident has knocked FleetWave into a “major outage” across the UK and US after Chevin Fleet Solutions pulled parts of its SaaS

Chevin pulls the handbrake on FleetWave software after security scare Read More »

UAT-10362 Targets Taiwanese NGOs with LucidRook Malware in Spear-Phishing Campaigns

UAT-10362 Targets Taiwanese NGOs with LucidRook Malware in Spear-Phishing Campaigns 2026-04-09 at 20:09 By A previously undocumented threat cluster dubbed UAT-10362 has been attributed to spear-phishing campaigns targeting Taiwanese non-governmental organizations (NGOs) and suspected universities to deploy a new Lua-based malware called LucidRook. “LucidRook is a sophisticated stager that embeds a Lua interpreter and Rust-compiled libraries

UAT-10362 Targets Taiwanese NGOs with LucidRook Malware in Spear-Phishing Campaigns Read More »

OpenAI puts Stargate UK on ice, blames energy costs and red tape

OpenAI puts Stargate UK on ice, blames energy costs and red tape 2026-04-09 at 18:07 By Dan Robinson Sam Altman’s datacenter dreams hit a wall of watts and wonkery, cooling Britain’s AI ambitions OpenAI is pausing its planned Stargate datacenter project in the UK just months after announcing it, citing the regulatory environment and cost

OpenAI puts Stargate UK on ice, blames energy costs and red tape Read More »

Months-old Adobe Reader zero-day uses PDFs to size up targets

Months-old Adobe Reader zero-day uses PDFs to size up targets 2026-04-09 at 17:32 By Carly Page Malicious PDFs abuse legit features to harvest system data and decide which victims get a 2nd-stage payload Hackers have been quietly exploiting what appears to be a zero-day in Adobe Acrobat Reader for months, using booby-trapped PDFs to profile

Months-old Adobe Reader zero-day uses PDFs to size up targets Read More »

Microsoft locks out VeraCrypt and WireGuard devs, blames verification process

Microsoft locks out VeraCrypt and WireGuard devs, blames verification process 2026-04-09 at 17:32 By Connor Jones No emails, no warnings, no humans – just bots, catch-22s, and a 60-day appeals queue Microsoft says that it will work on how it communicates with developers after two leading open source figures were suddenly locked out of their

Microsoft locks out VeraCrypt and WireGuard devs, blames verification process Read More »

Peace President’s Iran war piles more pain on already battered PC market

Peace President’s Iran war piles more pain on already battered PC market 2026-04-09 at 17:32 By Dan Robinson Memory costs were already through the roof – now freight’s spiking too, and budget systems face extinction America’s war with Iran is jacking up the pressure on computing markets already struggling with memory shortages and component cost

Peace President’s Iran war piles more pain on already battered PC market Read More »

Claude Managed Agents bring execution and control to AI agent workflows

Claude Managed Agents bring execution and control to AI agent workflows 2026-04-09 at 17:32 By Anamarija Pogorelec Anthropic’s Claude Managed Agents are a suite of composable APIs for building and deploying cloud-hosted agents at scale, handling sandboxed code execution, checkpointing, credential management, scoped permissions, and end-to-end tracing for you. Developers can define tasks, tools, and

Claude Managed Agents bring execution and control to AI agent workflows Read More »

113,000 explicit prompts from AI girlfriend platform exposed, many linked to user IDs

113,000 explicit prompts from AI girlfriend platform exposed, many linked to user IDs 2026-04-09 at 17:32 By Sinisa Markovic MyLovely.AI, an AI girlfriend platform, suffered a data breach that exposed over 100,000 users. MyLovely.AI allows people to create personalized not safe for work (NSFW) content and engage in real-time conversations with AI-generated companions, often involving

113,000 explicit prompts from AI girlfriend platform exposed, many linked to user IDs Read More »

Apple Intelligence AI Guardrails Bypassed in New Attack

Apple Intelligence AI Guardrails Bypassed in New Attack 2026-04-09 at 17:32 By Eduard Kovacs RSAC researchers hacked Apple Intelligence using the Neural Exect method and Unicode manipulation. The post Apple Intelligence AI Guardrails Bypassed in New Attack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Apple Intelligence AI Guardrails Bypassed in New Attack Read More »

ThreatsDay Bulletin: Hybrid P2P Botnet, 13-Year-Old Apache RCE and 18 More Stories

ThreatsDay Bulletin: Hybrid P2P Botnet, 13-Year-Old Apache RCE and 18 More Stories 2026-04-09 at 17:32 By Thursday. Another week, another batch of things that probably should’ve been caught sooner but weren’t. This one’s got some range — old vulnerabilities getting new life, a few “why was that even possible” moments, attackers leaning on platforms and tools you’d

ThreatsDay Bulletin: Hybrid P2P Botnet, 13-Year-Old Apache RCE and 18 More Stories Read More »

Security researchers tricked Apple Intelligence into cursing at users. It could have been a lot worse

Security researchers tricked Apple Intelligence into cursing at users. It could have been a lot worse 2026-04-09 at 16:17 By Jessica Lyons Wash your mouth out with digital soap Apple Intelligence, the personal AI system integrated into newer Macs, iPhones, and other iThings, can be hijacked using prompt injection, forcing the model into producing an

Security researchers tricked Apple Intelligence into cursing at users. It could have been a lot worse Read More »

Err-Hiding and Seek: How ErrTraffic v3 Leverages EtherHiding in ClickFix Campaign

Err-Hiding and Seek: How ErrTraffic v3 Leverages EtherHiding in ClickFix Campaign 2026-04-09 at 16:17 By King Orande and Cris Tomboc TLP: AMBER+STRICT The LevelBlue SpiderLabs team examined the latest version of ErrTraffic, which emerged in early 2026. In a recently observed campaign, the team found that ErrTraffic primarily targets WordPress websites by deploying a PHP backdoor script

Err-Hiding and Seek: How ErrTraffic v3 Leverages EtherHiding in ClickFix Campaign Read More »

Claude helps researcher dig up decade-old Apache ActiveMQ RCE vulnerability (CVE-2026-34197)

Claude helps researcher dig up decade-old Apache ActiveMQ RCE vulnerability (CVE-2026-34197) 2026-04-09 at 16:17 By Zeljka Zorz In the latest demonstration of how AI assistants can help with bug hunting, Horizon3.ai researcher Naveen Sunkavally used Claude to unearth CVE-2026-34197, a remote code execution vulnerability in Apache ActiveMQ that’s been introduced in the codebase 13 years

Claude helps researcher dig up decade-old Apache ActiveMQ RCE vulnerability (CVE-2026-34197) Read More »

Mallory brings contextual threat intelligence to security operations

Mallory brings contextual threat intelligence to security operations 2026-04-09 at 16:16 By Industry News Mallory is launching an AI-native threat intelligence platform, purpose-built to answer the questions CISOs and their teams are asking every day: What are the real threat vectors for our organization? What’s actually exploitable in our environment right now? What should we

Mallory brings contextual threat intelligence to security operations Read More »

Bitcoin Depot discloses $3.7M BTC theft in cybersecurity breach

Bitcoin Depot discloses $3.7M BTC theft in cybersecurity breach 2026-04-09 at 15:44 By Cointelegraph by Amin Haqshanas Bitcoin Depot said a hacker stole 50.9 BTC, worth about $3.7 million, after gaining access to internal systems linked to corporate wallets. This article is an excerpt from Cointelegraph.com News View Original Source

Bitcoin Depot discloses $3.7M BTC theft in cybersecurity breach Read More »

Crypto exchanges chase TradFi commodities market as pricing gaps persist

Crypto exchanges chase TradFi commodities market as pricing gaps persist 2026-04-09 at 15:44 By Cointelegraph by Zoltan Vardai Crypto exchanges are racing to capture the market share of TradFi trading venues, but tokenized commodities adoption remains limited by pricing and liquidity concerns. This article is an excerpt from Cointelegraph.com News View Original Source

Crypto exchanges chase TradFi commodities market as pricing gaps persist Read More »

Gold, silver and oil drive 65,000% jump in commodity perpetuals

Gold, silver and oil drive 65,000% jump in commodity perpetuals 2026-04-09 at 15:44 By Cointelegraph by Zoltan Vardai BitMEX said commodity perpetual swaps volume jumped from $38.1 million to $25 billion in Q1 as traders flocked to 24/7 gold, silver and oil exposure. This article is an excerpt from Cointelegraph.com News View Original Source

Gold, silver and oil drive 65,000% jump in commodity perpetuals Read More »

Scroll to Top