Uncategorized

Yet another ex-ransomware negotiator admits turning rogue after payoff from crimelords 2026-04-21 at 17:36 By Connor Jones Plus: Court papers reveal nonprofit paid a ransom worth nearly $26.8 million The third of three former ransomware negotiators accused of assisting the ALPHV/BlackCat ransomware gang in extorting US businesses has pleaded guilty, months after his two co-workers […]

NGate Campaign Targets Brazil, Trojanizes HandyPay to Steal NFC Data and PINs 2026-04-21 at 17:36 By Cybersecurity researchers have discovered a new iteration of an Android malware family called NGate that has been found to abuse a legitimate application called HandyPay instead of NFCGate. “The threat actors took the app, which is used to relay NFC data, and […]

5 Places where Mature SOCs Keep MTTR Fast and Others Waste Time 2026-04-21 at 17:36 By Security teams often present MTTR as an internal KPI. Leadership sees it differently: every hour a threat dwells inside the environment is an hour of potential data exfiltration, service disruption, regulatory exposure, and brand damage.  The root cause of […]

AMD’s Ryzen 9 9950X3D2 Dual Edition tested: Gratuitous overkill with a price to match 2026-04-21 at 16:07 By Tobias Mann An $899 CPU? In this economy? Review  Ever since AMD’s cache-stacked Ryzen 7 5800X3D closed the gap with Intel in gaming, folks have wondered: if one V-Cache chiplet is good, surely two must be better. […]

Crook claims to leak ‘video surveillance footage’ of companies 2026-04-21 at 15:29 By Connor Jones Mexican IT services firm admits it was hacked, but says client operations weren’t affected A Mexican IT infrastructure and digital transformation biz is on clean-up duty after a criminal posted screenshots of what they claimed was company video surveillance footage […]

AI-assisted intruders pwned Vercel via OAuth abuse and a pilfered employee account 2026-04-21 at 15:29 By Carly Page CEO suspects silicon sidekick behind ‘surprising velocity’ breach – cyber crims shop stolen data for $2M Vercel’s CEO reckons the crooks behind its recent breach likely had a helping hand from AI, saying the attackers moved with […]

When Metal Theft Becomes a Life Safety Crisis 2026-04-21 at 15:29 By Lessons from telecommunications infrastructure attacks.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

No Exploit Needed: How Attackers Walk Through the Front Door via Identity-Based Attacks 2026-04-21 at 15:29 By The cybersecurity industry has spent the last several years chasing sophisticated threats like zero-days, supply chain compromises, and AI-generated exploits. However, the most reliable entry point for attackers still hasn’t changed: stolen credentials. Identity-based attacks remain a dominant […]

Google Patches Antigravity IDE Flaw Enabling Prompt Injection Code Execution 2026-04-21 at 15:29 By Cybersecurity researchers have discovered a vulnerability in Google’s agentic integrated development environment (IDE), Antigravity, that could be exploited to achieve code execution. The flaw, since patched, combines Antigravity’s permitted file-creation capabilities with an insufficient input sanitization in Antigravity’s native file-searching tool, […]

NGate Campaign Targets Brazil, Trojanizes HandyPay to Steal NFC Data and PINs 2026-04-21 at 15:29 By Cybersecurity researchers have discovered a new iteration of an Android malware family calledNGate that has been found to abuse a legitimate application called HandyPay instead of NFCGate. “The threat actors took the app, which is used to relay NFC data, […]

How AI Increases the Load on Security Teams 2026-04-21 at 14:08 By Paul Ionescu And why automation may be the only way to keep up This article is an excerpt from SECURITY.COM View Original Source

England’s school phone ban gets teeth, just in time to bite no one 2026-04-21 at 14:08 By Carly Page 90% of schools already compliant, but at least now there’s paperwork Ministers are moving to turn England’s patchwork of school phone bans into law, after peers backed fresh changes to the Children’s Wellbeing and Schools Bill […]

Met police trials snoop tech platform in push to cuff more London shoplifters 2026-04-21 at 14:08 By Connor Jones No facial recognition privacy intrusions either! Well, maybe a little London’s Metropolitan Police is trialing new retail technology to help curtail the city’s pervasive shoplifting problem… and it doesn’t rely on live facial recognition (LFR).… This […]

Panasonic creates device-locked QR codes to speed facial biometric capture 2026-04-21 at 12:56 By Simon Sharwood Admins are tired of taking photos, so this enables secure on-site unattended enrolment Japanese industrial giant Panasonic has created a new form of QR code it says will only work on designated devices and environments.… This article is an […]

Iran claims US used backdoors to knock out networking equipment during war 2026-04-21 at 12:56 By Simon Sharwood And China is loving it Iranian media is claiming that the US used backdoors and/or botnets to disable networking equipment during the current war, and Chinese state media is dining out on the allegations.… This article is […]

CISA Adds 8 Exploited Flaws to KEV, Sets April-May 2026 Federal Deadlines 2026-04-21 at 12:56 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added eight new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including three flaws impacting Cisco Catalyst SD-WAN Manager, citing evidence of active exploitation. The list of vulnerabilities is […]

Task Manager’s CPU meter is an obituary for the recent past, says the engineer who built it 2026-04-21 at 12:15 By Richard Speed Spoiler: There’s no magic value. Just a timer, some kernel calls, and too much coffee Windows has always had a built-in portal to the very recent past: Task Manager’s CPU usage meter.… […]

Adaptavist Group breach spawns imposter emails as ransomware crew claims mega-haul 2026-04-21 at 11:30 By Carly Page Fake emails already doing the rounds as ransomware crew boasts about what it allegedly stole UK enterprise software consultancy The Adaptavist Group is investigating a security breach after an intruder logged in with stolen credentials, while a ransomware […]

NASA Inspector fears new spacesuits won’t be ready for Moon landing 2026-04-21 at 07:18 By Simon Sharwood Dud contracts, proprietary designs, and zero-experience supplier make for quite the mess The NASA Office of Inspector General, the aerospace agency’s auditor, fears that work on next-generation spacesuits won’t finish in time to use them for the planned […]

Microsoft’s GitHub grounds Copilot account sign-ups amid capacity crunch 2026-04-21 at 03:57 By Thomas Claburn Remember what we promised when you subscribed for a year? Well, we’ve got a new deal that’s better for us. Microsoft’s GitHub has stopped accepting new Copilot individual subscriptions while the code hosting biz figures out how it can meet […]