2026

Russian State-Linked APT28 Exploits SOHO Routers in Global DNS Hijacking Campaign

Russian State-Linked APT28 Exploits SOHO Routers in Global DNS Hijacking Campaign 2026-04-07 at 21:53 By The Russia-linked threat actor known as APT28 (aka Forest Blizzard) has been linked to a new campaign that has compromised insecure MikroTik and TP-Link routers and modified their settings to turn them into malicious infrastructure under their control as part of […]

Russian State-Linked APT28 Exploits SOHO Routers in Global DNS Hijacking Campaign Read More »

[Webinar] How to Close Identity Gaps in 2026 Before AI Exploits Enterprise Risk

[Webinar] How to Close Identity Gaps in 2026 Before AI Exploits Enterprise Risk 2026-04-07 at 21:53 By In the rapid evolution of the 2026 threat landscape, a frustrating paradox has emerged for CISOs and security leaders: Identity programs are maturing, yet the risk is actually increasing. According to new research from the Ponemon Institute, hundreds of applications within the typical

[Webinar] How to Close Identity Gaps in 2026 Before AI Exploits Enterprise Risk Read More »

Only 28% of AI infrastructure projects fully pay off, survey finds

Only 28% of AI infrastructure projects fully pay off, survey finds 2026-04-07 at 20:32 By Lindsay Clark ITSM the area most likely to offer wins, according to Gartner research Tech leaders hoping AI might help save money and improve efficiency in IT infrastructure should know that only 28 percent of use cases fully succeed and

Only 28% of AI infrastructure projects fully pay off, survey finds Read More »

Claude Code Packaging Error Remains a Lure in an Active Campaign: What Defenders Should Do

Claude Code Packaging Error Remains a Lure in an Active Campaign: What Defenders Should Do 2026-04-07 at 20:32 By Threat actors leveraged Anthropic’s Claude Code npm release packaging error to distribute Vidar, GhostSocks, and PureLog Stealer. This blog details immediate steps organizations can take and best practices to prevent further risk. This article is an excerpt from

Claude Code Packaging Error Remains a Lure in an Active Campaign: What Defenders Should Do Read More »

LevelBlue Resilience Retainer Named 2026 SC Media Awards Europe Finalist for Best Incident Response Solution

LevelBlue Resilience Retainer Named 2026 SC Media Awards Europe Finalist for Best Incident Response Solution 2026-04-07 at 20:32 By LevelBlue is proud to share that we’ve been shortlisted as a finalist for the2026 SC Media Awards Europe for our recently launchedResilience Retainer, recognized in the Best Incident Response Solution category. This article is an excerpt from

LevelBlue Resilience Retainer Named 2026 SC Media Awards Europe Finalist for Best Incident Response Solution Read More »

Acronis MDR by TRU brings 24/7 managed detection and response to MSPs

Acronis MDR by TRU brings 24/7 managed detection and response to MSPs 2026-04-07 at 20:32 By Industry News Acronis has announced the launch of Acronis MDR by Acronis TRU, a globally available 24/7/365 managed detection and response (MDR) service. Built specifically for managed service providers (MSPs) of all sizes, the service provides threat detection, incident

Acronis MDR by TRU brings 24/7 managed detection and response to MSPs Read More »

Cloudflare moves up its post-quantum deadline as researchers narrow the path to Q-Day

Cloudflare moves up its post-quantum deadline as researchers narrow the path to Q-Day 2026-04-07 at 20:31 By Mirko Zorz Cloudflare announced it is targeting 2029 to complete post-quantum security across its entire product suite, including post-quantum authentication. The company is following a revised roadmap that Google also adopted after announcing that it had improved the

Cloudflare moves up its post-quantum deadline as researchers narrow the path to Q-Day Read More »

Severe StrongBox Vulnerability Patched in Android

Severe StrongBox Vulnerability Patched in Android 2026-04-07 at 20:31 By Eduard Kovacs A critical DoS vulnerability in the Framework component of Android has also been fixed with the latest update. The post Severe StrongBox Vulnerability Patched in Android appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Severe StrongBox Vulnerability Patched in Android Read More »

GrafanaGhost: Attackers Can Abuse Grafana to Leak Enterprise Data

GrafanaGhost: Attackers Can Abuse Grafana to Leak Enterprise Data 2026-04-07 at 20:31 By Ionut Arghire By targeting Grafana’s AI components, attackers can point to external resources and inject indirect prompts to bypass safeguards. The post GrafanaGhost: Attackers Can Abuse Grafana to Leak Enterprise Data appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

GrafanaGhost: Attackers Can Abuse Grafana to Leak Enterprise Data Read More »

Over 1,000 Exposed ComfyUI Instances Targeted in Cryptomining Botnet Campaign

Over 1,000 Exposed ComfyUI Instances Targeted in Cryptomining Botnet Campaign 2026-04-07 at 20:31 By An active campaign has been observed targeting internet-exposed instances running ComfyUI, a popular stable diffusion platform, to enlist them into a cryptocurrency mining and proxy botnet. “A purpose-built Python scanner continuously sweeps major cloud IP ranges for vulnerable targets, automatically installing malicious

Over 1,000 Exposed ComfyUI Instances Targeted in Cryptomining Botnet Campaign Read More »

[Webinar] How to Close Identity Gaps in 2026 Before AI Exploits Enterprise Risk

[Webinar] How to Close Identity Gaps in 2026 Before AI Exploits Enterprise Risk 2026-04-07 at 20:31 By In the rapid evolution of the 2026 threat landscape, a frustrating paradox has emerged for CISOs and security leaders: Identity programs are maturing, yet the risk is actually increasing. According to new research from the Ponemon Institute, hundreds of applications within the typical

[Webinar] How to Close Identity Gaps in 2026 Before AI Exploits Enterprise Risk Read More »

The Hidden Cost of Recurring Credential Incidents

The Hidden Cost of Recurring Credential Incidents 2026-04-07 at 20:31 By When talking about credential security, the focus usually lands on breach prevention. This makes sense when IBM’s 2025 Cost of a Data Breach Report puts the average cost of a breach at $4.4 million. Avoiding even one major incident is enough to justify most security investments, but that

The Hidden Cost of Recurring Credential Incidents Read More »

Samsung is discontinuing its texting app, urges users to switch to Google Messages

Samsung is discontinuing its texting app, urges users to switch to Google Messages 2026-04-07 at 20:24 By Associated Press According to an end-of-service announcement published on the tech giant’s US support website, Samsung Messages will be discontinued in July. This article is an excerpt from Latest Technology News | New York Post View Original Source

Samsung is discontinuing its texting app, urges users to switch to Google Messages Read More »

Russia’s Fancy Bear still attacking routers to boost fake sites, NCSC warns

Russia’s Fancy Bear still attacking routers to boost fake sites, NCSC warns 2026-04-07 at 20:02 By Connor Jones 200 orgs and 5,000 devices compromised so far in Vlad’s latest intelligence grab, Microsoft reckons The UK’s National Cyber Security Centre (NCSC) has issued a fresh warning about Russia’s ongoing targeting of routers to steal passwords and

Russia’s Fancy Bear still attacking routers to boost fake sites, NCSC warns Read More »

US prosecutors reject Tornado Cash co-founder‘s argument for dismissal

US prosecutors reject Tornado Cash co-founder‘s argument for dismissal 2026-04-07 at 19:48 By Cointelegraph by Turner Wright Roman Storm, the co-founder of the crypto mixing service, still faces a possible retrial on two charges after a jury failed to reach a verdict in 2025. This article is an excerpt from Cointelegraph.com News View Original Source

US prosecutors reject Tornado Cash co-founder‘s argument for dismissal Read More »

The New Rules of Engagement: Matching Agentic Attack Speed

The New Rules of Engagement: Matching Agentic Attack Speed 2026-04-07 at 19:40 By Nadir Izrael The cybersecurity response to AI-enabled nation-state threats cannot be incremental. It must be architectural. The post The New Rules of Engagement: Matching Agentic Attack Speed appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

The New Rules of Engagement: Matching Agentic Attack Speed Read More »

Trent AI Emerges From Stealth With $13 Million in Funding

Trent AI Emerges From Stealth With $13 Million in Funding 2026-04-07 at 19:34 By Ionut Arghire The startup has created a layered security solution aiming to secure AI agents throughout their entire lifecycle. The post Trent AI Emerges From Stealth With $13 Million in Funding appeared first on SecurityWeek. This article is an excerpt from

Trent AI Emerges From Stealth With $13 Million in Funding Read More »

Stack Overflow abandons redesign after loyalists criticize it

Stack Overflow abandons redesign after loyalists criticize it 2026-04-07 at 19:26 By Tim Anderson Fabled Q&A site for devs struggles with its future as AI takes over its original purpose Stack Overflow, the once-popular dev community, has abandoned a planned redesign that was meant to refocus the site more on discussions than the question-and-answer format

Stack Overflow abandons redesign after loyalists criticize it Read More »

Russian hackers hijack internet traffic using vulnerable routers

Russian hackers hijack internet traffic using vulnerable routers 2026-04-07 at 19:18 By Sinisa Markovic The Russian state cyber group APT28 has been compromising routers to hijack web traffic and spy on victims, the UK’s The National Cyber Security Centre (NCSC) has warned. Attackers are exploiting vulnerable routers to alter DHCP and DNS settings, redirecting traffic

Russian hackers hijack internet traffic using vulnerable routers Read More »

Scroll to Top