NGate malware abuses HandyPay app to steal NFC card data and PINs in Brazil
Global Security News
Accor Plus Sees 39% Conversion Growth Within 30 Days of Payments Platform Redesign
COMPANY NEWS: Endava-led payments modernisation delivers immediate results while laying groundwork for next phase of loyalty transformation
Global Security News
Accor Plus Sees 39% Conversion Growth Within 30 Days of Payments Platform Redesign
COMPANY NEWS: Endava-led payments modernisation delivers immediate results while laying groundwork for next phase of loyalty transformation
AI, Apps, Compliance, Cybersecurity, Data Breaches, Funding, Global Security News, Network Security, Risk Management, Venture
AI is one of the two monumental shifts in cyber today
It’s 2026, when nobody can confidently say what the future of security is going to look like. Everyone is trying (what else can we do), but judging by all the progress around AI in recent months, we are all going to be wrong. The biggest mistake we all make is assuming that the future is…
Global Security News, Politics
Tim Cook Built Apple Into a $4 Trillion Powerhouse. He Leaves Big Challenges on AI
The Apple CEO navigated shifts between eras in technology and politics while growing the iPhone maker into $4 trillion giant.
Cybersecurity, Exploits, Global Security News
22 BRIDGE:BREAK Flaws Expose 20,000 Lantronix and Silex Serial-to-IP Converters
Cybersecurity researchers have identified 22 new vulnerabilities in popular models of serial-to-IP converters from Lantronix and Silex that could be exploited to hijack susceptible devices and tamper with data exchanged by them. The vulnerabilities have been collectively codenamed BRIDGE:BREAK by Forescout Research Vedere Labs, which identified nearly 20,000 Serial-to-Ethernet converters exposed
Global Security News
Accor Plus Sees 39% Conversion Growth Within 30 Days of Payments Platform Redesign
COMPANY NEWS: Endava-led payments modernisation delivers immediate results while laying groundwork for next phase of loyalty transformation
AI, Global Security News, Risk Management
BeyondTrust’s 13th Annual Microsoft Vulnerabilities Report Reveals Drop in Total Volume, But Surge in Critical Risk
GUEST RESEARCH: Critical vulnerabilities doubled year-over-year, signalling rising risk severity as AI-driven discovery and expanding attack surfaces reshape the Microsoft security landscape Elevation of Privilege vulnerabilities accounted for 40% of all flaws, continuing to dominate threat actor pathways and reinforcing identity as the primary attack vector Azure and Dynamics 365, saw a 9x increase in…
AI, Exploits, Global Security News
Surge in Bomgar RMM Exploitation Demonstrates Supply Chain Risk
The critical remote code execution flaw (CVE-2026-1731) in the remote monitoring and management tool can be exploited to spread ransomware and compromise supply chains.
AI, Global Security News
PCI SSC Launches Enhanced Language Microsites for Global Audience
The PCI Security Standards Council (PCI SSC) has announced the launch of newly redesigned language microsites, delivering a more accessible, structured, and user-friendly experience for global stakeholders. These updates mark a significant step forward in making PCI resources more readily available to non-English-speaking audiences by providing a consistent user experience across languages.
Global Security News
Seeing Machines Releases Part 2 of Technical Paper Series on Intoxication
Driver Monitoring System technology enables real-time assessment of a driver’s functional state relative to the driving environment
Global Security News
How Data-Driven Job Management Empowers High-Performing Teams in the Field
Operational efficiency has become a defining characteristic of organisations that consistently outperform their competitors, and the tools teams use to manage day-to-day work play a significant role in that outcome.
AI, Cybersecurity, Global Security News
Ransomware negotiator admits role in attacks he was hired to resolve
A Florida man, formerly employed as a ransomware negotiator, pleaded guilty to conspiring to carry out ransomware attacks against US companies. Prosecutors say Angelo Martino, 41, used his position at DigitalMint, a crypto broker that helps victims negotiate and pay ransomware demands, to pass sensitive information to attackers. Alongside Martino, two more individuals were involved…
AI, Global Security News
Google Fixes Critical RCE Flaw in AI-Based Antigravity Tool
The prompt injection vulnerability in the agentic AI product for filesystem operations was a sanitization issue that allowed for sandbox escape and arbitrary code execution.
AI, APAC, Global Security News
In the Rush to Scale AI, Operational Limits Are Emerging, Datadog Report Finds
Nearly 1 in 20 AI requests fail in production as capacity limits become the primary bottleneck to scaling AI reliably
AI, APAC, Data Breaches, Global Security News, Network Security
‘Scattered Spider’ Member ‘Tylerb’ Pleads Guilty
A 24-year-old British national and senior member of the cybercrime group “Scattered Spider” has pleaded guilty to wire fraud conspiracy and aggravated identity theft. Tyler Robert Buchanan admitted his role in a series of text-message phishing attacks in the summer of 2022 that allowed the group to hack into at least a dozen major technology…
AI, Global Security News, Network Security
Extreme Platform ONE Reduces Network Costs by 32%, Enterprise Adoption Gains Momentum
GUEST RESEARCH: Asiana Airlines, City of Prescott in Arizona, and SK Biosciences among many customers choosing Extreme Platform ONE to accelerate automation at scale
AI, Global Security News
Elastic Delivers First Embedded AI Experiences for Observability and Security Inside Third-Party AI Tools
MCP Apps bring Elastic’s security and observability workflows into third-party AI tools, enabling teams to act on data directly where they work, with additional capabilities for search and data exploration
AI, Global Security News, Government & Policy
Vehicle tracking is no longer just about finding a vehicle
GUEST OPINION: Vehicle tracking used to mean knowing where a vehicle was. That idea is still the core, but the job has expanded well beyond a dot on a map. In government fleet programs, telematics now reaches into real-time location, trip history, geofencing, driver coaching, maintenance reminders, fault data, and even accident reconstruction. That is…
AI, Global Security News
Snowflake Expands Snowflake Intelligence and Cortex Code to Power the Control Plane for the Agentic Enterprise
COMPANY NEWS: Snowflake delivers agentic AI for both business users and builders on a single platform with Snowflake Intelligence and Cortex Code Snowflake Intelligence transforms how business users turn insights into action through a personalised, context-aware AI agent grounded in enterprise data Cortex Code enables builders to move faster from code to production with AI-powered…
Global Security News
Clarks Launches Curated Marketplace Powered by Marketplacer, Redefining How Iconic Brands Scale Online
COMPANY NEWS: Over two hundred years of shoemaking heritage meets modern marketplace technology: Marketplacer today reveals it is the platform behind the newly launched Clarks Marketplace, enabling the global footwear brand to expand its digital offering through curated third-party selling.
Global Security News
The 9 best SQL courses online in 2026 ranked
GUEST OPINION: SQL is still the connective tissue of every modern data stack—from cloud warehouses to mobile apps. Recruiters know it, too: employer demand for SQL skills grew 46% year-over-year, according to labour-market analyst Lightcast.
AI, Global Security News
Ransomware Negotiator Pleads Guilty to Aiding BlackCat Attacks in 2023
A third individual who was employed as a ransomware negotiator has pleaded guilty to conducting ransomware attacks against U.S. companies in 2023. Angelo Martino, 41, of Land O’Lakes, Florida, teamed up with the operators of the BlackCat ransomware starting in April 2023 to assist the e-crime gang in extracting higher amounts as ransoms. “Working as…
Global Security News
GapMaps Partners with Panolytica to Deliver Advanced Consumer Segmentation Data
GapMaps has announced a new strategic global partnership with UK-based data specialists Panolytica, providing businesses with access to high quality and granular consumer segmentation data across Australia, the Kingdom of Saudi Arabia (KSA), and the UK, with planned launches across Southeast Asia and the United Arab Emirates this year.
Global Security News
BreachLock Named Representative Vendor in the 2026 Gartner Market Guide for Adversarial Exposure Validation
New York, United States, 21st April 2026, CyberNewswire
AI, Endpoint, Global Security News
GitLab Collaborates with AWS to Bring Agentic DevSecOps to Enterprise Teams Using Their Existing Amazon Bedrock Accounts and Spend
COMPANY NEWS: Customers can route GitLab Duo Agent Platform inference through Amazon Bedrock models already running in their AWS accounts without new vendor onboarding or model endpoints. GitLab Credits purchased through AWS Marketplace count toward existing AWS spending commitments. GitLab’s Bring Your Own Model (BYOM) capability for Self-Managed customers lets teams connect their self-hosted AI…
Global Security News, Network Security
Stopping Fraud at Each Stage of the Customer Journey Without Adding Friction
Fraud prevention and user experience don’t have to be a tradeoff. IPQS shows how combining identity, device, and network signals stops fraud without adding friction. […]
Global Security News
The Ungoverned Workforce: Cybersecurity Insiders Finds 92% Lack Visibility Into AI Identities
Washington D.C., USA, 21st April 2026, CyberNewswire
Global Security News
The Gentlemen Ransomware Expands With Rapid Affiliate Growth
Gentlemen RaaS expands quickly with multi-platform attacks and SystemBC-linked infections
AI, Global Security News
Entrust Integrates Australia’s Document Verification Service (DVS) to Support AML/CFT-Ready Identity Verification
News Summary: Under Tranche 2 reforms, Australia’s AML/CTF regime will undergo its most significant expansion in nearly two decades. All reporting entities will need to strengthen identity verification and customer due diligence processes. Entrust Identity Verification unifies Australia DVS checks, biometrics, and AI‑driven fraud controls for all‑in‑one Australia-ready identity verification.
Global Security News
UK probes Telegram, teen chat sites over CSAM sharing concerns
Ofcom, the United Kingdom’s independent communications regulator, has launched an investigation into Telegram based on evidence suggesting it’s being used to share child sexual abuse material (CSAM). […]
Global Security News
New Industry Event Adopts Rising Tide Approach To MSP Sector
EVENT: In a turnaround from traditional vendor‑led events, a new industry Conference called Catalyst delivered by (mostly) MSPs for MSPs, IT service providers and IT leaders, is set to launch in Sydney on Wednesday June 3, 2026.
AI, Global Security News
Scattered Spider hacker pleads guilty to stealing $8 million in cryptocurrency
A British national tied to the Scattered Spider cybercrime group pleaded guilty to hacking multiple companies via SMS phishing and stealing over $8 million in virtual currency from US victims. Tyler Robert Buchanan, 24, of Dundee, Scotland, pleaded guilty to conspiracy to commit wire fraud and aggravated identity theft. In November 2024, US authorities unsealed…
Uncategorized
Top 10 Tech Gadgets for April 2026
As of April 2026, the tech landscape is dominated by a shift toward highly specific, problem-solving gadgets rather than general-purpose devices. Here are 10 of the most noteworthy gadgets gaining traction this month: Gadget Category Why It’s Notable O-Boy Satellite Smartwatch Wearable A satellite-connected watch built for true off-grid emergencies where cell service is non-existent.…
AI, Compliance, Global Security News, Government & Policy
Kamiwaza Expands ARIA Through TD SYNNEX, HPE Channel
Kamiwaza AI is bringing its ARIA accessibility remediation platform to the TD SYNNEX channel alongside HPE, positioning MSPs and resellers to help public sector customers meet fast-approaching digital accessibility deadlines, including the April 24, 2026 ADA Title II compliance requirement. Channel opportunity tied to accessibility mandates for government websites The timing is notable for partners…
Global Security News
5 Places where Mature SOCs Keep MTTR Fast and Others Waste Time
Security teams often present MTTR as an internal KPI. Leadership sees it differently: every hour a threat dwells inside the environment is an hour of potential data exfiltration, service disruption, regulatory exposure, and brand damage. The root cause of slow MTTR is almost never “not enough analysts.” It is almost always the same structural problem:…
AI, Apps, Endpoint, Exploits, Global Security News, Risk Management
Why API Discovery Is the First Step to Securing AI
TL;DR AI risk doesn’t live in the model. It lives in the APIs behind it. Every AI interaction triggers a chain of API calls across your environment. Many of those APIs aren’t documented or tracked. That’s your real exposure. Shadow API discovery gives you visibility into those hidden endpoints, so you can find them before…
AI, Cloud Security, Global Security News
Unchecked AI Agents Cause Cybersecurity Incidents at Two Thirds of Firms
Data exposure, operational disruption and financial losses among issues faced by businesses struggling with the rapid rise of AI agents, warns Cloud Security Alliance report
AI, Global Security News, Risk Management
Ivanti Neurons AI automates IT operations, reducing manual work and security risk
Ivanti has revealed new solution capabilities, focusing on enabling autonomous IT operations and organizations to secure their environments more efficiently at scale. With these advancements, Ivanti enables IT and security operations to detect, decide, and act autonomously without sacrificing trust, governance, or control. AI capabilities and the threat landscape are changing quickly, and IT and…
AI, Global Security News
Silobreaker Mimir adds agentic AI to intelligence workflows with governance and transparency
Silobreaker has announced new agentic AI capabilities that combine faster research and deeper contextual analysis with built-in governance and transparency to ensure trusted intelligence can be safely consumed across the wider enterprise. Silobreaker Mimir is an embedded agentic capability for intelligence operations, working directly within the analyst workflow. It helps teams retrieve evidence, deepen analysis,…
AI, Apps, Cybersecurity, Endpoint, Exploits, Global Security News, Network Security
Azure SRE Agent flaw let outsiders silently eavesdrop on enterprise cloud operations
A high-severity authentication flaw in Microsoft’s Azure SRE Agent exposed sensitive agent data to unauthorized network access, according to a confirmed vulnerability disclosure. The issue was identified by Enclave AI researcher Yanir Tsarimi, who detailed the findings in a blog post describing how agent interactions could be accessed without proper authentication controls. The vulnerability has…
AI, Exploits, Global Security News, Government & Policy
CISA flags new SD-WAN flaw as actively exploited in attacks
CISA has given U.S. government agencies four days to secure their systems against another Catalyst SD-WAN Manager vulnerability it flagged as actively exploited in attacks. […]
AI, Global Security News, privacy
OpenAI’s Chronicle feature lets Codex read your screen, raising privacy concerns
OpenAI’s Chronicle is a feature designed to help Codex, an AI-powered coding assistant, better understand what users are working on by capturing context directly from their screens. It uses recent screen activity to build memories, allowing Codex to interpret references, identify relevant sources, and pick up on the tools and workflows users rely on, without…
AI, Exploits, Global Security News, Network Security
Prompt injection turned Google’s Antigravity file search into RCE
Security researchers have revealed a prompt injection flaw in Google’s Antigravity IDE that could be weaponized to bypass its sandbox protections and achieve remote code execution (RCE). The issue came from Antigravity’s ability to allow AI agents to invoke native functions, like searching files, on behalf of the user. Designed to kill complexity, the feature…
AI, Global Security News
With John Ternus as CEO, expect Apple’s platforms to proliferate
Apple now has a new iCEO, as current leader Tim Cook (65) announced late Monday that he is set to become chairman of the board, while current head of hardware engineering, John Ternus, prepares to take over as CEO on Sept. 1. As you’d expect, this leadership transition at one of the world’s most successful firms, is…
china, Global Security News
Chinese APT Targets Indian Banks, Korean Policy Circles
China is spying on India’s financial sector, for some reason, and it’s not putting much effort into it, judging by some stale TTPs.
Cybersecurity, Global Security News, Risk Management
Threat Intel Scraping Without Burning Your Cover or Your Stack
Threat Intel Scraping sounds simple until it isn’t, here’s how cybersecurity teams avoid blocks, bad data, and unnecessary risk.
AI, Cybersecurity, Data Breaches, Exploits, Global Security News
No Exploit Needed: How Attackers Walk Through the Front Door via Identity-Based Attacks
The cybersecurity industry has spent the last several years chasing sophisticated threats like zero-days, supply chain compromises, and AI-generated exploits. However, the most reliable entry point for attackers still hasn’t changed: stolen credentials. Identity-based attacks remain a dominant initial access vector in breaches today. Attackers obtain valid credentials through credential stuffing
AI, Global Security News
OpenAI Is Working With Consultants to Sell Codex
The ChatGPT maker said it has four million weekly active users for its AI coding tool, up from three million two weeks ago.
Exploits, Global Security News
CISA flags another Cisco Catalyst SD-WAN Manager bug as exploited (CVE-2026-20133)
CISA added eight new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including a Cisco Catalyst SD-WAN Manager vulnerability (CVE-2026-20133) that Cisco has yet to flag as exploited. Three Cisco Catalyst SD-WAN Manager vulnerabilities Alongside CVE-2026-20133, CISA has also listed CVE-2026-20128 and CVE-2026-20122 – two other Catalyst SD-WAN Manager vulnerabilities – as being leveraged in…
APAC, Exploits, Global Security News
Actively exploited Apache ActiveMQ flaw impacts 6,400 servers
Nonprofit security organization Shadowserver found that over 6,400 Apache ActiveMQ servers exposed online are vulnerable to ongoing attacks exploiting a high-severity code injection vulnerability. […]
AI, Apps, Cybersecurity, Global Security News, malware
NGate Campaign Targets Brazil, Trojanizes HandyPay to Steal NFC Data and PINs
Cybersecurity researchers have discovered a new iteration of an Android malware family calledNGate that has been found to abuse a legitimate application called HandyPay instead of NFCGate. “The threat actors took the app, which is used to relay NFC data, and patched it with malicious code that appears to have been AI-generated,” ESET security researcher Lukáš…
AI, Cybersecurity, Exploits, Funding, Global Security News, Government & Policy, Network Security, Risk Management
The US NSA is using Anthropic’s Claude Mythos despite supply chain risk
Axios reports the National Security Agency uses Anthropic Mythos model despite Department of Defense concerns, blurring AI risk vs defense lines. The reported use of Anthropic’s Mythos model by the U.S. National Security Agency is a reminder that the line between AI as a defensive tool and AI as a security risk is getting harder…
Cybersecurity, Exploits, Global Security News
Google Patches Antigravity IDE Flaw Enabling Prompt Injection Code Execution
Cybersecurity researchers have discovered a vulnerability in Google’s agentic integrated development environment (IDE), Antigravity, that could be exploited to achieve code execution. The flaw, since patched, combines Antigravity’s permitted file-creation capabilities with an insufficient input sanitization in Antigravity’s native file-searching tool, find_by_name, to bypass the program’s Strict
AI, Apps, Cybersecurity, Europe, Global Security News, Risk Management
Report: Enterprises Rely on Managed Services to Scale AI
New research has found that an overwhelming majority of executives view managed services as essential for the delivery of agentic AI. Boosting AI with managed services According to the global KPMG Managed Services Outlook Survey 2026, more than 90 percent of executives believe managed services are essential to their agentic AI journeys, and 87 percent…
Cybersecurity, Global Security News
Former ransomware negotiator pleads guilty to BlackCat attacks
41-year-old Angelo Martino, a former employee of cybersecurity incident response company DigitalMint, has pleaded guilty to targeting U.S. companies in BlackCat (ALPHV) ransomware attacks in 2023. […]
AI, Apps, Global Security News, Network Security, privacy, Risk Management
Why identity is the driving force behind digital transformation
Identity centric technologies have undergone a significant transformation in recent times. Gone are the days when it was all about logging in and out of any given system. Today, identity has become the backbone of all digital enterprises. It’s the ‘invisible engine’ that powers everything. From security to how modern-day products are sold. Today’s Identity…
AI, Cybersecurity, Exploits, Global Security News
Mythos can find the vulnerability. It can’t tell you what to do about it.
Mythos matters. It is a significant step forward in AI-assisted vulnerability discovery. But it does not mean cybersecurity changed overnight, nor does it mean enterprises are suddenly facing fully automated exploitation at internet scale tomorrow. It does mean the offensive side of AI is continuing to improve. The defensive side needs to catch up now.…
AI, Data Breaches, Global Security News, Network Security
Grinex crypto exchange shuts down, blames Western agencies for $13.7M breach
Grinex exchange collapses after $13.7M breach, blames Western spies as Chainalysis flags possible exit scam and sanctions evasion network links claims.
Global Security News, Network Security
A single platform powers SIM farm proxy networks across 17 countries
Racks of phones and 4G modems, connected to carrier networks and rented out as commercial mobile proxy services, are operating across at least 94 locations in 17 countries. An investigation by infrastructure intelligence firm Infrawatch traced a large portion of those deployments to a shared software platform called ProxySmart, built and operated out of Minsk,…
Global Security News
Tim Cook Told Me His Advice for Apple’s Next CEO
He remembers what Steve Jobs told him 15 years ago. Now that Cook is stepping down, he has a message for his own successor.
AI, Cybersecurity, Data Breaches, Endpoint, Exploits, Global Security News, malware, Network Security, Risk Management
U.S. CISA adds Cisco Catalyst, Kentico Xperience, PaperCut NG/MF, Synacor ZCS, Quest KACE SMA, and JetBrains TeamCity flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Cisco Catalyst, Kentico Xperience, PaperCut NG/MF, Synacor ZCS, Quest KACE SMA, and JetBrains TeamCity flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Cisco Catalyst, Kentico Xperience, PaperCut NG/MF, Synacor ZCS, Quest KACE SMA, and JetBrains TeamCity flaws to its Known…
Data Breaches, Global Security News
Vercel Confirms Cyber Incident After Sophisticated Attacker Exploits Third‑Party Tool
Cloud app developer Vercel appears to have suffered a security breach
AI, Cybersecurity, Endpoint, Exploits, Global Security News, malware, Network Security, Risk Management
Top techniques attackers use to infiltrate your systems today
Much of the talk around cybersecurity these days revolves around AI and the threat it poses to corporate systems when used by nefarious actors. But the reality on the ground remains a little more mundane than polymorphic AI malware and criminal masterminds putting machine learning and generative AI to work at scale. Still, keeping on…
AI, Apps, Global Security News, malware
NGate NFC malware targets Android users through trojanized payment app
NFC-based payment fraud is expanding geographically and operationally. A campaign active since November 2025 is targeting Android users in Brazil using a new variant of the NGate malware family, this time embedded in a trojanized version of HandyPay, a legitimate NFC relay application available on Google Play since 2021. ESET Research identified the campaign and…
AI, china, Cybersecurity, Data Breaches, Exploits, Global Security News, Government & Policy, Network Security, Russia, Venture
The thin gray line: Handala, CyberAv3ngers and Iran’s proxy ops
On April 7, six US government agencies issued a critical advisory warning domestic private sector organizations of potential infrastructural cyberattacks conducted by Iranian-affiliated Advanced Persistent Threat (APT) actors. The advisory stops short of attributing these threats to a single group but makes reference to 2023 attacks on US water and wastewater facilities linked to the…
Global Security News, malware
NGate Android malware uses HandyPay NFC app to steal card data
A new variant of the NGate malware that steals NFC payment data is targeting Android users by hiding in a trojanized version of HandyPay, a legitimate mobile payments processing tool. […]
AI, Global Security News, malware
New NGate variant hides in a trojanized NFC payment app
ESET researchers discover another iteration of NGate malware, this time possibly developed with the assistance of AI
AI, Apps, Cybersecurity, Data Breaches, Endpoint, Exploits, Global Security News, malware, Network Security, Risk Management
New Lazarus APT Campaign: “Mach-O Man” macOS Malware Kit Hits Businesses
Editor’s note: The research is authored by Mauro Eldritch, offensive security expert and a founder of BCA LTD, a company dedicated to threat intelligence and hunting. You can find Mauro on X. The recent wave of ClickFix attacks has introduced several new ways to compromise users, establishing itself as a technique that is likely here to stay. We have observed Lazarus Group using…
Global Security News
North Korean Blamed for $290m KelpDAO Crypto Heist
North Korea’s Lazarus Group is pegged for a $290m crypto theft at KelpDAO
AI, Data Breaches, Global Security News, Government & Policy, Network Security
Bluesky hit by 24-hour DDoS attack as pro-Iran group claims responsibility
Bluesky suffered a 24-hour DDoS attack that caused outages. A pro-Iran hacker group claimed responsibility for the disruption. Bluesky experienced a sophisticated DDoS attack that disrupted its services for about 24 hours, starting on April 15. Bluesky is a decentralized, open-source microblogging social media platform similar to X (formerly Twitter). It allows users to post…
AI, Global Security News, malware
A .WAV With A Payload, (Tue, Apr 21st)
There have been reports of threat actors using a .wav file as a vector for malware. It’s a proper .wav file, but they didn’t use staganography. The .wav file will play, but you’ll just hear noise: That’s because the TAs have just replaced the bytes that encode the sound with the BASE64 representation of their…
Cybersecurity, Exploits, Global Security News
CISA Adds 8 Exploited Flaws to KEV, Sets April-May 2026 Federal Deadlines
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added eight new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including three flaws impacting Cisco Catalyst SD-WAN Manager, citing evidence of active exploitation. The list of vulnerabilities is as follows – CVE-2023-27351 (CVSS score: 8.2) – An improper authentication vulnerability in PaperCut
AI, Global Security News
Researchers build an encrypted routing layer for private AI inference
Organizations in healthcare, finance, and other sensitive industries want to use large AI models without exposing private data to the cloud servers running those models. A cryptographic technique called Secure Multi-Party Computation (MPC) makes this possible. It splits data into encrypted fragments, distributes them across two or more servers that do not share information with…
AI, Apps, Cybersecurity, Global Security News
Cybersecurity jobs available right now: April 21, 2026
Application Security Engineer (DevSecOps / Azure DevOps) BEWAHARVEST | Philippines | Hybrid – View job details As an Application Security Engineer (DevSecOps / Azure DevOps), you will embed security across the SDLC by working with engineering and DevOps teams to implement automated security controls and testing. You will manage application security programs including SAST, DAST,…
AI, Global Security News
The Rise of Apple’s New CEO: A Hardware Expert Takes Over in the AI Era
John Ternus is a hardware expert who must help Apple catch up in the AI race as it looks for its next big hit.
Global Security News
ISC Stormcast For Tuesday, April 21st, 2026 https://isc.sans.edu/podcastdetail/9900, (Tue, Apr 21st)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
AI, Global Security News, malware, Risk Management
Void Dokkaebi Uses Fake Job Interview Lure to Spread Malware via Code Repositories
Our research on Void Dokkaebi’s operations uncovered a campaign that turns infected developer repositories into malware delivery channels. By spreading through trusted workflows, organizational codebases, and open-source projects, the threat can scale from a single compromise to a broader supply chain risk.
Global Security News
KelpDAO suffers $290 million heist tied to Lazarus hackers
State-sponsored North Korean hackers are likely behind the $290 million crypto-heist that impacted the KelpDAO DeFi project on Saturday. […]
Global Security News
Anthropic, Amazon Tighten Bond in $5 Billion Investment and Computing Deal
AI, Global Security News
China’s Apple App Store infiltrated by crypto-stealing wallet apps
A set of 26 malicious apps on Apple App Store impersonate popular wallets, such as Metamask, Coinbase, Trust Wallet, and OneKey, to steal recovery or seed phrases and drain them of cryptocurrency assets. […]
AI, Global Security News
Apple Hardware Exec to Succeed Tim Cook as CEO
Plus, an Iran cease-fire extension looks unlikely, and a $150 train ride to the World Cup might feel red-card worthy.
AI, Data Breaches, Global Security News
Vercel Breach Linked to Context.ai, ShinyHunters Says It’s Not Involved
Vercel confirms a breach linked to Context.ai as a hacker lists alleged data for $2M. ShinyHunters denies involvement and flags imposters.
AI, Cybersecurity, Exploits, Global Security News, Network Security
Vuln in Google’s Antigravity AI agent manager could escape sandbox, give attackers remote code execution
As organizations consider agentic AI for their business and IT stacks, researchers continue to find bugs and vulnerabilities in major, commercial models that can significantly expand their attack surface. This week, researchers at Pillar Security disclosed a vulnerability in Antigravity, an AI-powered developer tool for filesystem operations made by Google. The bug, since patched, combined…
AI, Global Security News
Apple CEO Tim Cook stepping down, to be replaced by John Ternus
Apple announced late Monday that Tim Cook, the company’s CEO since 2011, is stepping down Sept. 1 to be replaced by current senior vice president of hardware engineering, John Ternus. Cook will become executive chairman of the board. Cook, who is 65, will continue as CEO until the end of August to assist in the…
Data Breaches, Global Security News
Vercel Employee’s AI Tool Access Led to Data Breach
Stolen OAuth tokens, which are at the root of these breaches, “are the new attack surface, the new lateral movement,” a researcher noted.
AI, Compliance, Global Security News, privacy, Risk Management
The FTC’s AI portfolio is about to get bigger
The Federal Trade Commission is poised to deepen its involvement in curbing the use of AI for malicious purposes, including the spread of nonconsensual sexualized deepfakes and voice cloning scams. Last year, Congress passed the Take It Down Act, a law that allowed for criminal prosecution of individuals who share or distribute nonconsensual, intimate images…
Global Security News
Serial-to-IP Devices Hide Thousands of Old and New Bugs
The OT devices that translate machine talk into Internet-speak are riddled with vulnerabilities and more frequently targeted for attacks, researchers say.
AI, Global Security News
Apple Hardware Executive John Ternus to Become CEO
The longtime Apple insider is succeeding Tim Cook, who will become executive chairman.
AI, Apps, Cybersecurity, Data Breaches, Exploits, Global Security News, Government & Policy
France’s ANTS ID System website hit by cyberattack, possible data breach
A cyberattack hit France’s ANTS website, possibly exposing personal data from users applying for IDs, passports, and driver’s licenses. A cyberattack targeted France’s ANTS platform, which handles applications for passports, ID cards, residence permits, and driver’s licenses. Authorities detected the incident on April 15 and warned it may have exposed personal data from both individuals…
AI, Apps, Europe, Exploits, Global Security News, malware, Network Security, Risk Management
Cyberattack That Could Have Poisoned a City’s Water Supply by Manipulating Chlorine Levels
In mid-April 2026, researchers at Darktrace published a detailed breakdown of a malware sample that occupies a narrow but alarming niche in the threat landscape: a Windows-based OT weapon apparently designed from the ground up to sabotage Israeli water treatment and desalination infrastructure. The malware identifies itself internally as ZionSiphon — the name appears in a core…
AI, Apps, Data Breaches, Exploits, Global Security News, malware, Risk Management
Vercel’s security breach started with malware disguised as Roblox cheats
Vercel customers are at risk of compromise after an attacker hopped through multiple internal systems to steal credentials and other sensitive data, the company said in a security bulletin Sunday. The attack, which didn’t originate at Vercel, showcases the pitfalls of interconnected cloud applications and SaaS integrations with overly privileged permissions. An attacker traversed third-party…
Global Security News, malware
The Gentlemen ransomware now uses SystemBC for bot-powered attacks
A SystemBC proxy malware botnet of more than 1,570 hosts, believed to be corporate victims, has been discovered following an investigation into a Gentlemen ransomware attack carried out by a gang affiliate. […]
AI, Global Security News, Network Security
Panasonic Connect introduces TOUGHBOOK 56 for Mobile Professionals
Panasonic Connect North America has launched the TOUGHBOOK 56, a modular rugged laptop designed to support mobile workers across a range of industries. The new device delivers high-performance computing, faster connectivity options, improved thermal management, and advanced security features for professionals in public safety, utilities, enterprise, and federal operations. Offering purpose-built machine to frontline professionals…
Cybersecurity, Global Security News, Network Security
The Top VPNs Chosen By Gamers
In this post, I will talk about the top VPNs chosen by gamers. As seen in the news in 2026, online criminals are sometimes getting away with it. However, they despise virtual private networks. Also known as VPNs, these handy tools are becoming necessities for gamers, especially those who want to combat cybercrime and add…
AI, Global Security News, Network Security
Procure IT & NetWolves Target Enterprise IT Expense Visibility
NetWolves has partnered with Procure IT to integrate its Managed Intelligence Platform into the provider’s Site Connectivity as a Service (SCaaS) offering, aiming to give large enterprises greater visibility into IT spending across vendors, contracts, and services. Why Procure IT and NetWolves formed the partnership The goal is to give Fortune 1000 companies and large…
AI, Global Security News
Global RAM shortage appears set to continue through 2027
The ongoing shortage of memory chips looks likely to continue throughout the year as demand from the AI sector surges. According to Nikkei Asia, leading manufacturers are expected to be able to meet only about 60% of global demand despite expansion plans. Although new factories are on the way, several of them are not expected…
Cybersecurity, Global Security News
The Practical Guide to OT Security
In this post, I will talk about the practical guide to OT security. Nobody thinks about Operational Technology (OT) until it stops working. That’s the nature of infrastructure; it becomes invisible when it runs well, and catastrophic when it doesn’t. A corporate laptop going down is a bad afternoon. A pipeline controller misfiring because someone…
AI, Global Security News
Seiko USA website defaced as hacker claims customer data theft
The Seiko USA website was defaced over the weekend, displaying a message from attackers claiming they stole its Shopify customer database and threatening to leak it unless a ransom is paid. […]
AI, Apps, china, Compliance, Europe, Global Security News, Government & Policy
What Sovereign AI Means for MSPs and Channel Partners
As AI has all but reached widespread adoption, the conversation has shifted from novelty to who can properly regulate it. It’s no longer just private companies leading the charge. Governments and nations are now at the forefront of AI efforts, working to ensure that both innovation and security are maintained. That shift is creating a…