Featured

OpenAI Widens Access to Cybersecurity Model After Anthropic’s Mythos Reveal

OpenAI Widens Access to Cybersecurity Model After Anthropic’s Mythos Reveal 2026-04-16 at 18:37 By Eduard Kovacs GPT‑5.4‑Cyber is a model fine-tuned for defenders, lowering boundaries for legitimate cybersecurity work. The post OpenAI Widens Access to Cybersecurity Model After Anthropic’s Mythos Reveal appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

OpenAI Widens Access to Cybersecurity Model After Anthropic’s Mythos Reveal Read More »

‘By Design’ Flaw in MCP Could Enable Widespread AI Supply Chain Attacks

‘By Design’ Flaw in MCP Could Enable Widespread AI Supply Chain Attacks 2026-04-15 at 16:34 By Kevin Townsend Researchers warn that a flaw in Anthropic’s Model Context Protocol allows unsanitized commands to execute silently, enabling full system compromise across widely used AI environments. The post ‘By Design’ Flaw in MCP Could Enable Widespread AI Supply

‘By Design’ Flaw in MCP Could Enable Widespread AI Supply Chain Attacks Read More »

$10 Domain Could Have Handed Hackers 25k Endpoints, Including in OT and Gov Networks

$10 Domain Could Have Handed Hackers 25k Endpoints, Including in OT and Gov Networks 2026-04-15 at 14:29 By Eduard Kovacs Researchers found adware capable of killing cybersecurity products and pushing more dangerous payloads to infected systems. The post $10 Domain Could Have Handed Hackers 25k Endpoints, Including in OT and Gov Networks appeared first on

$10 Domain Could Have Handed Hackers 25k Endpoints, Including in OT and Gov Networks Read More »

‘Mythos-Ready’ Security: CSA Urges CISOs to Prepare for Accelerated AI Threats

‘Mythos-Ready’ Security: CSA Urges CISOs to Prepare for Accelerated AI Threats 2026-04-14 at 16:21 By Kevin Townsend CISOs face a shrinking window to prepare as AI models like Mythos collapse the gap between vulnerability discovery and exploitation, driving a new era of high-velocity cyberattacks. The post ‘Mythos-Ready’ Security: CSA Urges CISOs to Prepare for Accelerated

‘Mythos-Ready’ Security: CSA Urges CISOs to Prepare for Accelerated AI Threats Read More »

CPUID Hacked to Serve Trojanized CPU-Z and HWMonitor Downloads

CPUID Hacked to Serve Trojanized CPU-Z and HWMonitor Downloads 2026-04-13 at 15:44 By Eduard Kovacs Download links were replaced by a Russian-speaking threat actor to distribute a recently emerged malware named STX RAT. The post CPUID Hacked to Serve Trojanized CPU-Z and HWMonitor Downloads appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

CPUID Hacked to Serve Trojanized CPU-Z and HWMonitor Downloads Read More »

Gmail Brings End-to-End Encryption to Android and iOS for Enterprise Users

Gmail Brings End-to-End Encryption to Android and iOS for Enterprise Users 2026-04-13 at 13:22 By Ionut Arghire The feature allows enterprise users to compose and read end-to-end encrypted messages natively on their mobile devices. The post Gmail Brings End-to-End Encryption to Android and iOS for Enterprise Users appeared first on SecurityWeek. This article is an

Gmail Brings End-to-End Encryption to Android and iOS for Enterprise Users Read More »

Adobe Patches Reader Zero-Day Exploited for Months

Adobe Patches Reader Zero-Day Exploited for Months 2026-04-12 at 10:57 By Eduard Kovacs The vulnerability is tracked as CVE-2026-34621 and Adobe has confirmed that it can be exploited for arbitrary code execution. The post Adobe Patches Reader Zero-Day Exploited for Months appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Adobe Patches Reader Zero-Day Exploited for Months Read More »

Adobe Reader Zero-Day Exploited for Months: Researcher

Adobe Reader Zero-Day Exploited for Months: Researcher 2026-04-09 at 12:00 By Eduard Kovacs Reputable researcher Haifei Li has come across what appears to be a PDF designed to exploit an unpatched vulnerability. The post Adobe Reader Zero-Day Exploited for Months: Researcher appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Adobe Reader Zero-Day Exploited for Months: Researcher Read More »

Shaky Ceasefire Unlikely to Stop Cyberattacks From Iran-Linked Hackers for Long

Shaky Ceasefire Unlikely to Stop Cyberattacks From Iran-Linked Hackers for Long 2026-04-09 at 06:18 By Associated Press Hackers vowed to revive its efforts against America when the time was right — demonstrating how digital warfare has become ingrained in military conflict. The post Shaky Ceasefire Unlikely to Stop Cyberattacks From Iran-Linked Hackers for Long appeared

Shaky Ceasefire Unlikely to Stop Cyberattacks From Iran-Linked Hackers for Long Read More »

US Disrupts Russian Espionage Operation Involving Hacked Routers and DNS Hijacking

US Disrupts Russian Espionage Operation Involving Hacked Routers and DNS Hijacking 2026-04-08 at 15:06 By Eduard Kovacs The APT28 threat group exploited vulnerable TP-Link and MikroTik routers to conduct adversary-in-the-middle (AitM) attacks. The post US Disrupts Russian Espionage Operation Involving Hacked Routers and DNS Hijacking appeared first on SecurityWeek. This article is an excerpt from

US Disrupts Russian Espionage Operation Involving Hacked Routers and DNS Hijacking Read More »

Iran-Linked Hackers Disrupt US Critical Infrastructure via PLC Attacks

Iran-Linked Hackers Disrupt US Critical Infrastructure via PLC Attacks 2026-04-08 at 06:17 By Mike Lennon Federal agencies warn attackers are manipulating PLC and SCADA systems across multiple sectors, triggering operational disruptions and raising concerns over broader OT targeting. The post Iran-Linked Hackers Disrupt US Critical Infrastructure via PLC Attacks appeared first on SecurityWeek. This article

Iran-Linked Hackers Disrupt US Critical Infrastructure via PLC Attacks Read More »

Anthropic Unveils ‘Claude Mythos’ – A Cybersecurity Breakthrough That Could Also Supercharge Attacks

Anthropic Unveils ‘Claude Mythos’ – A Cybersecurity Breakthrough That Could Also Supercharge Attacks 2026-04-07 at 21:53 By Kevin Townsend New AI model drives Project Glasswing, a effort to secure critical software before advanced capabilities fall into the wrong hands. The post Anthropic Unveils ‘Claude Mythos’ – A Cybersecurity Breakthrough That Could Also Supercharge Attacks appeared first on

Anthropic Unveils ‘Claude Mythos’ – A Cybersecurity Breakthrough That Could Also Supercharge Attacks Read More »

Wynn Resorts Says 21,000 Employees Affected by ShinyHunters Hack

Wynn Resorts Says 21,000 Employees Affected by ShinyHunters Hack 2026-04-07 at 09:24 By Eduard Kovacs The high-end casino and hotel operator has likely paid a ransom to avoid a data leak. The post Wynn Resorts Says 21,000 Employees Affected by ShinyHunters Hack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

Wynn Resorts Says 21,000 Employees Affected by ShinyHunters Hack Read More »

Fortinet Rushes Emergency Fixes for Exploited Zero-Day

Fortinet Rushes Emergency Fixes for Exploited Zero-Day 2026-04-06 at 12:42 By Ionut Arghire The improper access control bug in FortiClient EMS allows unauthenticated attackers to execute arbitrary code remotely. The post Fortinet Rushes Emergency Fixes for Exploited Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Fortinet Rushes Emergency Fixes for Exploited Zero-Day Read More »

European Commission Confirms Data Breach Linked to Trivy Supply Chain Attack

European Commission Confirms Data Breach Linked to Trivy Supply Chain Attack 2026-04-04 at 13:31 By Ionut Arghire Hackers stole over 300GB of data from the Commission’s AWS environment, including personal information. The post European Commission Confirms Data Breach Linked to Trivy Supply Chain Attack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

European Commission Confirms Data Breach Linked to Trivy Supply Chain Attack Read More »

North Korean Hackers Drain $285 Million From Drift in 10 Seconds

North Korean Hackers Drain $285 Million From Drift in 10 Seconds 2026-04-03 at 14:30 By Ionut Arghire The attackers prepared infrastructure and multiple nonce-based transactions, took over an admin key, and drained five vaults. The post North Korean Hackers Drain $285 Million From Drift in 10 Seconds appeared first on SecurityWeek. This article is an

North Korean Hackers Drain $285 Million From Drift in 10 Seconds Read More »

Critical Vulnerability in Claude Code Emerges Days After Source Leak

Critical Vulnerability in Claude Code Emerges Days After Source Leak 2026-04-02 at 21:45 By Kevin Townsend Within days of each other, Anthropic first leaked the source code to Claude Code, and then a critical vulnerability was found by Adversa AI. The post Critical Vulnerability in Claude Code Emerges Days After Source Leak appeared first on

Critical Vulnerability in Claude Code Emerges Days After Source Leak Read More »

Mercor Hit by LiteLLM Supply Chain Attack

Mercor Hit by LiteLLM Supply Chain Attack 2026-04-02 at 13:45 By Ionut Arghire The AI recruiting firm is investigating the incident as Lapsus$ claimed the theft of 4TB of Mercor data. The post Mercor Hit by LiteLLM Supply Chain Attack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Mercor Hit by LiteLLM Supply Chain Attack Read More »

Exploited Zero-Day Among 21 Vulnerabilities Patched in Chrome

Exploited Zero-Day Among 21 Vulnerabilities Patched in Chrome 2026-04-01 at 18:46 By Eduard Kovacs Google has announced fixes for CVE-2026-5281, a zero-day affecting Chrome’s Dawn component.  The post Exploited Zero-Day Among 21 Vulnerabilities Patched in Chrome appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Exploited Zero-Day Among 21 Vulnerabilities Patched in Chrome Read More »

Scroll to Top