Uncategorized

Anthropic bakes memory fixes into Bun 1.1.13 as developers complain of leaks 2026-04-21 at 20:19 By Tim Anderson Bun is fast as a toolkit but can leak memory in production, causing slowdowns and crashes A new version of the Bun JavaScript runtime and toolkit is out with enhanced testing support and improved memory management. The […]

macOS ClickFix attacks deliver AppleScript stealers to snarf credentials, wallets 2026-04-21 at 20:19 By Jessica Lyons Data from browsers, cryptocurrency wallets, 200+ extensions hoovered up A ClickFix campaign targeting macOS users delivers an AppleScript-based infostealer that collects credentials and live session cookies from 14 browsers, 16 cryptocurrency wallets, and more than 200 extensions.… This article […]

The spaghettified DBMS chart that shows Oracle’s crown is slowly slipping 2026-04-21 at 20:19 By Lindsay Clark Change is glacial, but the direction is clear It might look like a map of the London Underground designed by a madman, but Gartner’s newly-completed DBMS Market Share Ranks: 2011-2025 has an important message. The change may be […]

Safe Learning 101 Program Supports Schools in Strengthening Campus Security 2026-04-21 at 20:19 By Security magazine speaks with the expert partner behind this program.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Security Leaders Discuss the Vercel Breach 2026-04-21 at 20:19 By Security leaders are discussing the Vercel breach.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Ransomware Negotiator Pleads Guilty to Aiding BlackCat Attacks in 2023 2026-04-21 at 20:18 By A third individual who was employed as a ransomware negotiator has pleaded guilty to conducting ransomware attacks against U.S. companies in 2023. Angelo Martino, 41, of Land O’Lakes, Florida, teamed up with the operators of the BlackCat ransomware starting in April […]

22 BRIDGE:BREAK Flaws Expose Thousands of Lantronix and Silex Serial-to-IP Converters 2026-04-21 at 20:18 By Cybersecurity researchers have identified 22 new vulnerabilities in popular models of serial-to-IP converters from Lantronix and Silex that could be exploited to hijack susceptible devices and tamper with data exchanged by them. The vulnerabilities have been collectively codenamed BRIDGE:BREAK by […]

FAA grounds Blue Origin’s New Glenn as it probes missed satellite delivery ‘mishap’ 2026-04-21 at 17:36 By Richard Speed One of two second stage engines misbehaved, administration must sign off report before flights resume Blue Origin’s New Glenn loss of a satellite has been classed as a “mishap” by the US Federal Aviation Administration (FAA), […]

Yet another ex-ransomware negotiator admits turning rogue after payoff from crimelords 2026-04-21 at 17:36 By Connor Jones Plus: Court papers reveal nonprofit paid a ransom worth nearly $26.8 million The third of three former ransomware negotiators accused of assisting the ALPHV/BlackCat ransomware gang in extorting US businesses has pleaded guilty, months after his two co-workers […]

NGate Campaign Targets Brazil, Trojanizes HandyPay to Steal NFC Data and PINs 2026-04-21 at 17:36 By Cybersecurity researchers have discovered a new iteration of an Android malware family called NGate that has been found to abuse a legitimate application called HandyPay instead of NFCGate. “The threat actors took the app, which is used to relay NFC data, and […]

5 Places where Mature SOCs Keep MTTR Fast and Others Waste Time 2026-04-21 at 17:36 By Security teams often present MTTR as an internal KPI. Leadership sees it differently: every hour a threat dwells inside the environment is an hour of potential data exfiltration, service disruption, regulatory exposure, and brand damage.  The root cause of […]

AMD’s Ryzen 9 9950X3D2 Dual Edition tested: Gratuitous overkill with a price to match 2026-04-21 at 16:07 By Tobias Mann An $899 CPU? In this economy? Review  Ever since AMD’s cache-stacked Ryzen 7 5800X3D closed the gap with Intel in gaming, folks have wondered: if one V-Cache chiplet is good, surely two must be better. […]

Crook claims to leak ‘video surveillance footage’ of companies 2026-04-21 at 15:29 By Connor Jones Mexican IT services firm admits it was hacked, but says client operations weren’t affected A Mexican IT infrastructure and digital transformation biz is on clean-up duty after a criminal posted screenshots of what they claimed was company video surveillance footage […]

AI-assisted intruders pwned Vercel via OAuth abuse and a pilfered employee account 2026-04-21 at 15:29 By Carly Page CEO suspects silicon sidekick behind ‘surprising velocity’ breach – cyber crims shop stolen data for $2M Vercel’s CEO reckons the crooks behind its recent breach likely had a helping hand from AI, saying the attackers moved with […]

When Metal Theft Becomes a Life Safety Crisis 2026-04-21 at 15:29 By Lessons from telecommunications infrastructure attacks.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

No Exploit Needed: How Attackers Walk Through the Front Door via Identity-Based Attacks 2026-04-21 at 15:29 By The cybersecurity industry has spent the last several years chasing sophisticated threats like zero-days, supply chain compromises, and AI-generated exploits. However, the most reliable entry point for attackers still hasn’t changed: stolen credentials. Identity-based attacks remain a dominant […]

Google Patches Antigravity IDE Flaw Enabling Prompt Injection Code Execution 2026-04-21 at 15:29 By Cybersecurity researchers have discovered a vulnerability in Google’s agentic integrated development environment (IDE), Antigravity, that could be exploited to achieve code execution. The flaw, since patched, combines Antigravity’s permitted file-creation capabilities with an insufficient input sanitization in Antigravity’s native file-searching tool, […]

NGate Campaign Targets Brazil, Trojanizes HandyPay to Steal NFC Data and PINs 2026-04-21 at 15:29 By Cybersecurity researchers have discovered a new iteration of an Android malware family calledNGate that has been found to abuse a legitimate application called HandyPay instead of NFCGate. “The threat actors took the app, which is used to relay NFC data, […]

How AI Increases the Load on Security Teams 2026-04-21 at 14:08 By Paul Ionescu And why automation may be the only way to keep up This article is an excerpt from SECURITY.COM View Original Source

England’s school phone ban gets teeth, just in time to bite no one 2026-04-21 at 14:08 By Carly Page 90% of schools already compliant, but at least now there’s paperwork Ministers are moving to turn England’s patchwork of school phone bans into law, after peers backed fresh changes to the Children’s Wellbeing and Schools Bill […]