News

Thunderbird 150 arrives with encrypted message search and OpenPGP improvements

Email, Mozilla, News, software /

Thunderbird 150 arrives with encrypted message search and OpenPGP improvements 2026-04-21 at 23:32 By Anamarija Pogorelec Released today, Thunderbird 150.0 brings eight new features, a round of bug fixes, and security patches that cover the web engine underlying the email client. Thunderbird 150.0 runs on Windows 10 or later, macOS 10.15 or later, and Linux […]

Thunderbird 150 arrives with encrypted message search and OpenPGP improvements Read More »

VirtualBox 7.2.8 is out with Linux kernel 7.0 support and crash fixes

News, Oracle, software /

VirtualBox 7.2.8 is out with Linux kernel 7.0 support and crash fixes 2026-04-21 at 21:54 By Anamarija Pogorelec Oracle shipped VirtualBox 7.2.8 on April 21, 2026, as a maintenance release covering crashes, networking problems, clipboard issues, and extended Linux kernel compatibility. The update touches the VMM layer, NAT networking, graphics, UEFI, and both Linux and […]

VirtualBox 7.2.8 is out with Linux kernel 7.0 support and crash fixes Read More »

Ransomware negotiator admits role in attacks he was hired to resolve

law enforcement, News, Ransomware, US DoJ, USA /

Ransomware negotiator admits role in attacks he was hired to resolve 2026-04-21 at 20:19 By Sinisa Markovic A Florida man, formerly employed as a ransomware negotiator, pleaded guilty to conspiring to carry out ransomware attacks against US companies. Prosecutors say Angelo Martino, 41, used his position at DigitalMint, a crypto broker that helps victims negotiate […]

Ransomware negotiator admits role in attacks he was hired to resolve Read More »

A Closer Look at the Novel and Stealthy KarstoRAT Malware

Emerging Threats, News, Reports /

A Closer Look at the Novel and Stealthy KarstoRAT Malware 2026-04-21 at 17:36 By Chen Aviani For almost three decades now, threat actors have used remote access trojans (RATs) to monitor user activity and steal sensitive information and credentials. The RAT’s surreptitious nature has cemented its spot in malicious actors’ malware arsenal, and over the […]

A Closer Look at the Novel and Stealthy KarstoRAT Malware Read More »

Scattered Spider hacker pleads guilty to stealing $8 million in cryptocurrency

Cryptocurrency, cybercrime, law enforcement, News, phishing, US DoJ /

Scattered Spider hacker pleads guilty to stealing $8 million in cryptocurrency 2026-04-21 at 17:36 By Sinisa Markovic A British national tied to the Scattered Spider cybercrime group pleaded guilty to hacking multiple companies via SMS phishing and stealing over $8 million in virtual currency from US victims. Tyler Robert Buchanan, 24, of Dundee, Scotland, pleaded […]

Scattered Spider hacker pleads guilty to stealing $8 million in cryptocurrency Read More »

CISA flags another Cisco Catalyst SD-WAN Manager bug as exploited (CVE-2026-20133)

Arctic Wolf Networks, CISA, Cisco, Don't miss, Government, Hot stuff, News, VulnCheck /

CISA flags another Cisco Catalyst SD-WAN Manager bug as exploited (CVE-2026-20133) 2026-04-21 at 15:29 By Zeljka Zorz CISA added eight new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including a Cisco Catalyst SD-WAN Manager vulnerability (CVE-2026-20133) that Cisco has yet to flag as exploited. Three Cisco Catalyst SD-WAN Manager vulnerabilities Alongside CVE-2026-20133, CISA has […]

CISA flags another Cisco Catalyst SD-WAN Manager bug as exploited (CVE-2026-20133) Read More »

OpenAI’s Chronicle feature lets Codex read your screen, raising privacy concerns

Artificial Intelligence, macOS, News, OpenAI, Privacy /

OpenAI’s Chronicle feature lets Codex read your screen, raising privacy concerns 2026-04-21 at 15:29 By Anamarija Pogorelec OpenAI’s Chronicle is a feature designed to help Codex, an AI-powered coding assistant, better understand what users are working on by capturing context directly from their screens. It uses recent screen activity to build memories, allowing Codex to […]

OpenAI’s Chronicle feature lets Codex read your screen, raising privacy concerns Read More »

A single platform powers SIM farm proxy networks across 17 countries

cybercrime, Don't miss, fraud, hardware, mobile, network, News, spoofing /

A single platform powers SIM farm proxy networks across 17 countries 2026-04-21 at 12:30 By Mirko Zorz Racks of phones and 4G modems, connected to carrier networks and rented out as commercial mobile proxy services, are operating across at least 94 locations in 17 countries. An investigation by infrastructure intelligence firm Infrawatch traced a large […]

A single platform powers SIM farm proxy networks across 17 countries Read More »

NGate NFC malware targets Android users through trojanized payment app

Android, cybercrime, ESET, fraud, generative AI, Malware, News, scams /

NGate NFC malware targets Android users through trojanized payment app 2026-04-21 at 12:00 By Mirko Zorz NFC-based payment fraud is expanding geographically and operationally. A campaign active since November 2025 is targeting Android users in Brazil using a new variant of the NGate malware family, this time embedded in a trojanized version of HandyPay, a […]

NGate NFC malware targets Android users through trojanized payment app Read More »

Researchers build an encrypted routing layer for private AI inference

Artificial Intelligence, cybersecurity, Don't miss, Encryption, LLMs, News, research /

Researchers build an encrypted routing layer for private AI inference 2026-04-21 at 07:31 By Sinisa Markovic Organizations in healthcare, finance, and other sensitive industries want to use large AI models without exposing private data to the cloud servers running those models. A cryptographic technique called Secure Multi-Party Computation (MPC) makes this possible. It splits data […]

Researchers build an encrypted routing layer for private AI inference Read More »

Cybersecurity jobs available right now: April 21, 2026

cybersecurity jobs, News /

Cybersecurity jobs available right now: April 21, 2026 2026-04-21 at 07:18 By Anamarija Pogorelec Application Security Engineer (DevSecOps / Azure DevOps) BEWAHARVEST | Philippines | Hybrid – View job details As an Application Security Engineer (DevSecOps / Azure DevOps), you will embed security across the SDLC by working with engineering and DevOps teams to implement […]

Cybersecurity jobs available right now: April 21, 2026 Read More »

Vercel breached via compromised third-party AI tool

breach, data theft, Don't miss, extension, Hot stuff, News, third party compromise, Vercel /

Vercel breached via compromised third-party AI tool 2026-04-20 at 18:12 By Zeljka Zorz Cloud deployment and hosting platform Vercel has suffered a security breach that resulted in attackers accessing some of its internal systems and compromising Vercel credentials of a “limited subset of customers”. Advice for affected customers “The incident originated with a compromise of […]

Vercel breached via compromised third-party AI tool Read More »

AI platform ATHR makes voice phishing a one-person job

Abnormal AI, AI, Don't miss, Hot stuff, News, phishing, vishing /

AI platform ATHR makes voice phishing a one-person job 2026-04-20 at 14:37 By Zeljka Zorz For $4,000 and a cut of the take, a lone criminal can now run a fully automated voice-phishing operation via ATHR, a plaform that spoofs emails alerts from Google, Microsoft, and Coinbase, buries a phone number in each message, and […]

AI platform ATHR makes voice phishing a one-person job Read More »

Meta and PortSwigger drive offensive security further to find what others miss

bug bounty, Meta, News, PortSwigger, vulnerability disclosure /

Meta and PortSwigger drive offensive security further to find what others miss 2026-04-20 at 11:16 By Anamarija Pogorelec Meta Bug Bounty and PortSwigger have formed a partnership to help security researchers sharpen their skills, collaborate more closely, and improve vulnerability discovery. The initiative combines Meta’s bug bounty program with PortSwigger’s Burp Suite, reflecting a shared […]

Meta and PortSwigger drive offensive security further to find what others miss Read More »

EU pushes for stronger cloud sovereignty, awards €180 million to four providers

Cloud, EU, European Commission, News, resilience /

EU pushes for stronger cloud sovereignty, awards €180 million to four providers 2026-04-20 at 10:30 By Sinisa Markovic The European Commission is stepping up efforts to strengthen the EU’s digital sovereignty by awarding a cloud services tender worth up to €180 million over six years. The initiative gives EU institutions and agencies access to sovereign […]

EU pushes for stronger cloud sovereignty, awards €180 million to four providers Read More »

SmokedMeat: Open-source tool shows what attackers do inside CI/CD pipelines

DevOps, Don't miss, GitHub, News, open source, software /

SmokedMeat: Open-source tool shows what attackers do inside CI/CD pipelines 2026-04-20 at 09:14 By Mirko Zorz Boost Security has released SmokedMeat, an open-source framework that runs attack chains against CI/CD infrastructure so engineering and security teams can see what an attacker would do in their specific environment. What the tool does SmokedMeat takes a flagged […]

SmokedMeat: Open-source tool shows what attackers do inside CI/CD pipelines Read More »

How to spot a North Korean fake in a job interview

deepfakes, Don't miss, Flare, identity, News, Threat Intelligence, Video /

How to spot a North Korean fake in a job interview 2026-04-20 at 08:17 By Help Net Security North Korean operatives are getting hired at companies by passing job interviews using fake identities and AI tools. In this Help Net Security video, Adrian Cheek, a senior cybercrime researcher at Flare, outlines several ways organizations can […]

How to spot a North Korean fake in a job interview Read More »

Product showcase: Syncthing for secure, private file synchronization

Encryption, file-sharing, News, open source, Privacy, Product showcase, software /

Product showcase: Syncthing for secure, private file synchronization 2026-04-20 at 07:52 By Anamarija Pogorelec Syncthing is a free and open-source application that synchronizes files directly between your devices. Instead of uploading data to a central server, it uses a peer-to-peer approach, transferring files whenever peers are online. This decentralized model ensures that your data remains […]

Product showcase: Syncthing for secure, private file synchronization Read More »

Week in review: Acrobat Reader flaw exploited, Claude Mythos offensive capabilities and limits

News, Week in review /

Week in review: Acrobat Reader flaw exploited, Claude Mythos offensive capabilities and limits 2026-04-19 at 11:49 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Bringing governance and visibility to machine and AI identities In this Help Net Security interview, Archit Lohokare, CEO of AppViewX, […]

Week in review: Acrobat Reader flaw exploited, Claude Mythos offensive capabilities and limits Read More »

Researcher drops two more Microsoft Defender zero-days, all three now exploited in the wild

0-day, Don't miss, exploit, Hot stuff, Huntress, Microsoft, Microsoft Defender, News, PoC /

Researcher drops two more Microsoft Defender zero-days, all three now exploited in the wild 2026-04-17 at 14:32 By Zeljka Zorz The security researcher who earlier this month published a proof-of-concept (PoC) exploit for a zero-day privilege escalation vulnerability in Microsoft Defender is back with two more. The first, dubbed “RedSun,” is another privilege escalation flaw […]

Researcher drops two more Microsoft Defender zero-days, all three now exploited in the wild Read More »

Scroll to Top