Uncategorized

What Are Security Experts Saying About OpenAI’s GPT-5.4-Cyber? 2026-04-16 at 18:37 By OpenAI has launched GPT-5.4-Cyber, a model optimized for defensive cybersecurity usage.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

What “The Pitt” Gets Right About Ransomware and What Hospitals Can’t Afford to Ignore 2026-04-16 at 18:37 By The Pitt may end its story with systems restored, but real hospitals don’t get that clean ending.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

[Webinar] Find and Eliminate Orphaned Non-Human Identities in Your Environment 2026-04-16 at 18:36 By In 2024, compromised service accounts and forgotten API keys were behind 68% of cloud breaches. Not phishing. Not weak passwords. Unmanaged non-human identities that nobody was watching. For every employee in your org, there are 40 to 50 automated credentials: service accounts, API tokens,

ThreatsDay Bulletin: Defender 0-Day, SonicWall Brute-Force, 17-Year-Old Excel RCE and 15 More Stories 2026-04-16 at 18:36 By You know that feeling when you open your feed on a Thursday morning and it’s just… a lot? Yeah. This week delivered. We’ve got hackers getting creative in ways that are almost impressive if you ignore the whole “crime” part, ancient vulnerabilities

Gen Z and parents favor old-school tech like iPods and digital cameras for a simpler, less plugged-in life: ‘People are just sick of it’ 2026-04-16 at 18:15 By Marie Pohl They’re tossing tech to the trash and seizing a retro reboot. This article is an excerpt from Latest Technology News | New York Post View

Americans who masterminded Nork IT worker fraud sentenced to 200 months behind bars 2026-04-16 at 18:13 By Connor Jones Fortune 500 companies and one US defense contractor got taken for $5m in four-year scam Two Americans have been jailed for a combined 200 months for helping North Korea generate $5 million through fraudulent IT worker

Textbook titan McGraw Hill on ransomware crew’s reading list after 13.5M records exposed 2026-04-16 at 15:04 By Carly Page Publisher claims misconfigured Salesforce-hosted page leaked data Textbook giant McGraw Hill has landed on a ransomware crew’s leak site after an alleged Salesforce-linked misconfiguration spilled 13.5 million records into the wild.… This article is an excerpt

Swarm welcome: Britain lines up 120,000 drones for Ukraine 2026-04-16 at 15:04 By Dan Robinson Giant UAV package will include strike, recon, logistics, and maritime systems The UK government says it will deliver at least 120,000 drones to Ukraine this year to help it fight against Russia.… This article is an excerpt from The Register

Cisco Patches Four Critical Identity Services, Webex Flaws Enabling Code Execution 2026-04-16 at 15:03 By Cisco has announced patches to address four critical security flaws impacting Identity Services and Webex Services that could result in arbitrary code execution and allow an attacker to impersonate any user within the service. The details of the vulnerabilities are below –

Hidden Passenger? How Taboola Routes Logged-In Banking Sessions to Temu 2026-04-16 at 15:03 By A bank approved a Taboola pixel. That pixel quietly redirected logged-in users to a Temu tracking endpoint. This occurred without the bank’s knowledge, without user consent, and without a single security control registering a violation. Read the full technical breakdown in the Security Intelligence Brief. Download

Obsidian Plugin Abuse Delivers PHANTOMPULSE RAT in Targeted Finance, Crypto Attacks 2026-04-16 at 15:03 By A “novel” social engineering campaign has been observed abusing Obsidian, a cross-platform note-taking application, as an initial access vector to distribute a previously undocumented Windows remote access trojan called PHANTOMPULSE in attacks targeting individuals in the financial and cryptocurrency sectors. Dubbed

The Agentic AI Tsunami is Here: Is Your Legacy IAM Sinking or Swimming? 2026-04-16 at 13:07 By Paul Toal AI agents are becoming a new class of enterprise identity—and most platforms weren’t built for them This article is an excerpt from SECURITY.COM View Original Source

Microsoft announces product it doesn’t want you to buy: Extended security updates for old Exchange, and Skype for Biz 2026-04-16 at 13:07 By Richard Speed Just migrate already, would you? But if you can’t, Redmond will take your cash Microsoft will keep delivering security updates for old versions of Exchange Server and Skype for Business

Obsolete Google nag drowns out vital bar information at Swedish concert hall 2026-04-16 at 12:21 By Richard Speed Backup and Sync may be dead, but it still knows how to kill the buzz before the ukuleles start Bork!Bork!Bork!  Sweden is arguably the home of bork – think the Swedish Chef from The Muppets – so

Cops hand Motorola £25M no-bid deal to keep 2000-era radios alive 2026-04-16 at 12:11 By Lindsay Clark Biz as usual for Brit public sector: ESN replacement is 12 years late and £3B over budget UK police tech buyers have awarded a £25 million no-competition contract for communications technology first commissioned in 2000, with the replacement

Server-room lock was nothing but a crock 2026-04-16 at 11:03 By Avram Piltch Your cybersecurity is only as good as the physical security of the servers PWNED  Welcome back to Pwned, the column where we immortalize the worst vulns that organizations opened up for themselves. If you’re the kind of person who leaves your car

QUIC will soon be as important as TCP – but it’s vastly different 2026-04-16 at 11:03 By Bruce Davie Deciphering the third transport protocol’s four RFCs is a task to rival the proverbial blind man trying to understand an elephant While Larry was producing most of the content for the “Request/Reponse” chapter for the next

Democratized Software, Democratized Risk: Who’s Accountable When Everyone Codes? 2026-04-16 at 10:16 By How to modernize risk management when software creation becomes broadly distributed. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

UAC-0247 Targets Ukrainian Clinics and Government in Data-Theft Malware Campaign 2026-04-16 at 10:16 By The Computer Emergencies Response Team of Ukraine (CERT-UA) has disclosed details of a new campaign that has targeted governments and municipal healthcare institutions, mainly clinics and emergency hospitals, to deliver malware capable of stealing sensitive data from Chromium-based web browsers and WhatsApp. The activity, which was observed

Bullet train upgrade brings 5G windows and noise-cancelling cabins to Japan 2026-04-16 at 07:47 By Simon Sharwood Shinkansen upgrade rolling out in October Some Japanese bullet trains will soon be equipped with private suites that include windows with embedded 5G antennas and noise-cancelling technology that envelops passengers in a bubble of quiet.… This article is