News

Google brings instant email verification to Android, no OTP needed

Android, authentication, credentials, Email, Google, identity verification, News /

Google brings instant email verification to Android, no OTP needed 2026-04-23 at 15:10 By Anamarija Pogorelec Google has introduced cryptographically verified email credentials for Android through the Credential Manager API. This API aligns with the W3C Digital Credential API standard. It provides a unified way for apps to request and retrieve user credentials for authentication […]

Google brings instant email verification to Android, no OTP needed Read More »

If cyber espionage via HDMI worries you, NCSC built a device to stop it

cybersecurity, EU, Government, hardware, NCSC, News, UK /

If cyber espionage via HDMI worries you, NCSC built a device to stop it 2026-04-23 at 14:17 By Sinisa Markovic A new cybersecurity device developed by the National Cyber Security Centre (NCSC) should be a helpful solution for protecting governments and businesses from malicious activity carried through display connections. Called SilentGlass, the plug-and-play tool is […]

If cyber espionage via HDMI worries you, NCSC built a device to stop it Read More »

Apple fixes iPhone bug that let FBI retrieve deleted Signal messages(CVE-2026-28950)

apple, Don't miss, FBI, Hot stuff, iOS, iPad, News, Privacy, Signal, vulnerability /

Apple fixes iPhone bug that let FBI retrieve deleted Signal messages(CVE-2026-28950) 2026-04-23 at 14:17 By Zeljka Zorz Apple has rolled out security updates for iPhones and iPads that fix CVE-2026-28950, a logging issue in Notification Services that made devices unexpectedly retain notifications marked for deletion. The vulnerability was patched following a recent report about the […]

Apple fixes iPhone bug that let FBI retrieve deleted Signal messages(CVE-2026-28950) Read More »

GopherWhisper APT group hides command and control traffic in Slack and Discord

APT, backdoor, cybercrime, cybersecurity, Don't miss, ESET, News /

GopherWhisper APT group hides command and control traffic in Slack and Discord 2026-04-23 at 12:17 By Anamarija Pogorelec Attackers continue to lean on everyday collaboration platforms to hide command and control traffic inside normal enterprise noise. A newly identified China-aligned APT group pushes that trend further, running its operations through Slack workspaces, Discord servers, Outlook […]

GopherWhisper APT group hides command and control traffic in Slack and Discord Read More »

OpenAI tackles a bad habit people have when interacting with AI

AI, GitHub, News, open source, OpenAI, Privacy /

OpenAI tackles a bad habit people have when interacting with AI 2026-04-23 at 12:17 By Sinisa Markovic Since people tend to paste personal data into AI tools such as ChatGPT, OpenAI has released Privacy Filter, an open-weight model designed to detect and redact personally identifiable information (PII) in text. The model is available under the […]

OpenAI tackles a bad habit people have when interacting with AI Read More »

Scenario: Open-source framework for automated AI app red-teaming

agentic AI, automation, Don't miss, framework, GitHub, LLMs, News, open source, red team, software /

Scenario: Open-source framework for automated AI app red-teaming 2026-04-23 at 09:47 By Mirko Zorz Enterprises running customer service bots, data analytics agents, and other AI-driven applications in production handle sensitive records and connect to core business systems every day. LangWatch has released Scenario, an open-source framework that runs automated red-team exercises against AI agents using […]

Scenario: Open-source framework for automated AI app red-teaming Read More »

A year in, Zoom’s CISO reflects on balancing security and business

CISO, cyber risk, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, strategy, tips, Zoom /

A year in, Zoom’s CISO reflects on balancing security and business 2026-04-23 at 09:47 By Mirko Zorz In this Help Net Security interview, Sandra McLeod, CISO at Zoom, reflects on her first year in the role. She talks about moving from reactive firefighting to business strategy, and what she heard from engineers, the board, and […]

A year in, Zoom’s CISO reflects on balancing security and business Read More »

GDPR works, but only where someone enforces it

CCPA, Compliance, data, Don't miss, EU, Europe, Features, GDPR, News, online tracking, Privacy, regulation, research /

GDPR works, but only where someone enforces it 2026-04-23 at 07:32 By Sinisa Markovic A new measurement study of web tracking across ten countries offers a reality check for anyone working on privacy compliance. Researchers crawled the same set of globally popular websites from virtual machines located in Australia, Brazil, Canada, Germany, India, Singapore, South […]

GDPR works, but only where someone enforces it Read More »

Ransomware, fraud, and lawsuits drive cyber insurance claims to new peaks

At-Bay, cyber insurance, cybersecurity, News, Ransomware, remote access, report /

Ransomware, fraud, and lawsuits drive cyber insurance claims to new peaks 2026-04-23 at 07:13 By Mirko Zorz The 2026 InsurSec Report from At-Bay, covering more than 100,000 policy years of claims data, documents a 7% year-over-year rise in overall claim frequency and an all-time high average severity of $221,000. Ransomware severity reached $508,000, up 16% […]

Ransomware, fraud, and lawsuits drive cyber insurance claims to new peaks Read More »

Google’s Workspace Intelligence promises privacy while running on your data

AI, cybersecurity, Google, Google Workspace, News, Privacy /

Google’s Workspace Intelligence promises privacy while running on your data 2026-04-22 at 23:27 By Sinisa Markovic Security and data governance are among the key considerations in Google’s latest AI update, which introduces Workspace Intelligence within Google Workspace. Google describes the feature as “a secure, dynamic system that inherently understands complex semantic relationships within your Workspace […]

Google’s Workspace Intelligence promises privacy while running on your data Read More »

Cyberattack on French government agency triggers phishing alert

breach, cybercrime, data breach, EU, France, News, phishing /

Cyberattack on French government agency triggers phishing alert 2026-04-22 at 19:55 By Sinisa Markovic France Titres, a French government agency, has disclosed a data breach that may have exposed user data from its online portal. France Titres, also known as the Agence nationale des titres sécurisés (ANTS), operates under the French Ministry of the Interior […]

Cyberattack on French government agency triggers phishing alert Read More »

Claude Mythos finds 271 Firefox flaws, Mozilla believes it shifts security toward defenders

AI, Anthropic, Mozilla, News, vulnerability management /

Claude Mythos finds 271 Firefox flaws, Mozilla believes it shifts security toward defenders 2026-04-22 at 18:51 By Sinisa Markovic The Mozilla Foundation tested Claude Mythos, an Anthropic AI model that has stirred debate in the cybersecurity community. Before granting access to Mythos, Mozilla scanned Firefox using Opus 4.6, which led to fixes for 22 security-sensitive […]

Claude Mythos finds 271 Firefox flaws, Mozilla believes it shifts security toward defenders Read More »

New Mirai variants target routers and DVRs in parallel campaigns

Akamai, botnet, consumer, DDoS, Don't miss, DVR, end of support, enterprise, exploit, Fortinet, Hot stuff, Internet of Things, Malware, News, router, SMBs /

New Mirai variants target routers and DVRs in parallel campaigns 2026-04-22 at 16:42 By Zeljka Zorz Hidden inside newly discovered botnet malware is an unusual message from its creator: “AI.NEEDS.TO.DIE”. Dubbed “tuxnokill” by researchers at Akamai, the malware is one of two fresh Mirai botnet variants documented this month by major cybersecurity firms and, judging […]

New Mirai variants target routers and DVRs in parallel campaigns Read More »

Progress Software fixes sneaky WAF bypass vulnerability (CVE-2026-21876)

Don't miss, enterprise, firewall, Hot stuff, News, OWASP, Progress, security update, vulnerability, web application security /

Progress Software fixes sneaky WAF bypass vulnerability (CVE-2026-21876) 2026-04-22 at 14:47 By Zeljka Zorz Progress Software has fixed a slew of high-severity vulnerabilities in MOVEit WAF and LoadMaster, including a flaw (CVE-2026-21876) that may allow attackers to bypass firewall detection. MOVEit WAF (web application firewall) is designed to protect Progress’s managed file transfer platform MOVEit […]

Progress Software fixes sneaky WAF bypass vulnerability (CVE-2026-21876) Read More »

Phishing reclaims the top initial access spot, attackers experiment with AI tools

Cisco, cybercrime, cybersecurity, News, phishing, report, scams /

Phishing reclaims the top initial access spot, attackers experiment with AI tools 2026-04-22 at 13:48 By Anamarija Pogorelec Phishing returned as the leading method attackers used to break into organizations in the first quarter of 2026, accounting for over a third of engagements where initial access could be determined, according to Cisco Talos. It is […]

Phishing reclaims the top initial access spot, attackers experiment with AI tools Read More »

Tencent’s QClaw AI agent app arrives on Windows and macOS

agentic AI, AI, News, OpenClaw, Tencent /

Tencent’s QClaw AI agent app arrives on Windows and macOS 2026-04-22 at 13:48 By Sinisa Markovic Tencent has opened an international beta of QClaw, an AI agent application aimed at consumers in Canada, Japan, Singapore, South Korea, and the United States. The first wave is capped at 20,000 users. Additional markets are scheduled to follow. […]

Tencent’s QClaw AI agent app arrives on Windows and macOS Read More »

OneDrive updates focus on AI, access control, and compliance

Microsoft, News, OneDrive, update /

OneDrive updates focus on AI, access control, and compliance 2026-04-22 at 13:48 By Anamarija Pogorelec Microsoft OneDrive’s recent updates focus on improving intelligence, collaboration, and administrative control. “Last year, we made a promise: your files should work for you, not the other way around. That meant reimagining OneDrive not just as a place to store […]

OneDrive updates focus on AI, access control, and compliance Read More »

PentAGI: Open-source autonomous AI penetration testing system

AI, automation, cybersecurity, Don't miss, GitHub, LLMs, News, open source, penetration testing, software /

PentAGI: Open-source autonomous AI penetration testing system 2026-04-22 at 10:09 By Anamarija Pogorelec Penetration testers have long relied on collections of specialized tools, manual coordination, and documented runbooks to work through a target assessment. PentAGI, an open-source project from VXControl, attempts to automate that entire workflow using a multi-agent AI system that plans, researches, and […]

PentAGI: Open-source autonomous AI penetration testing system Read More »

Shadow AI, deepfakes, and supply chain compromise are rewriting the financial sector threat playbook

Banks, CISO, cybersecurity, data, Filigran, finance, fraud, News, report, security controls /

Shadow AI, deepfakes, and supply chain compromise are rewriting the financial sector threat playbook 2026-04-22 at 10:09 By Anamarija Pogorelec Financially motivated attacks continued to drive the bulk of cyber incidents against banks, insurers, and payment processors in 2025. Approximately 90% of breaches affecting financial institutions carried a financial motive, with data breaches accounting for […]

Shadow AI, deepfakes, and supply chain compromise are rewriting the financial sector threat playbook Read More »

Apple Intelligence flaw kept stolen tokens reusable on another device

AI, apple, attack, macOS, News, research /

Apple Intelligence flaw kept stolen tokens reusable on another device 2026-04-22 at 10:09 By Sinisa Markovic Apple claims that Apple Intelligence, a GenAI service provided on its operating systems, is designed with an extra focus on user security and privacy through a two-stage authentication and authorization system using anonymous access tokens. However, researchers from The […]

Apple Intelligence flaw kept stolen tokens reusable on another device Read More »

Scroll to Top