Cybersecurity intelligence, threat analysis, and national security reporting.
A critical flaw in the Breeze Cache WordPress plugin, known as CVE-2026-3844, is being actively exploited by hackers, with over 170 attempted attacks reported. This vulnerability allows unauthenticated attackers to upload malicious files and take control of entire websites.
Germany's government is pushing for a new law that would require internet service providers to store customer connection data for three months to help combat online crimes, sparking concerns about privacy. The proposed mandate, justified as a way to keep the digital space safe from criminals, has been approved by the national cabinet and now awaits parliamentary approval.
Be on high alert: China-linked hackers are secretly building global covert networks using compromised routers and devices, putting anyone who's a target at risk of devastating cyber attacks and data theft. This sinister plot, revealed by a joint advisory from 16 government agencies worldwide, has far-reaching implications for organizations and individuals alike.
Chinese hackers are sneaking nation-state attacks under the radar by hijacking everyday IoT devices, such as home routers and smart cameras, to hide their digital footprints. This stealthy tactic allows them to evade accountability and strike from the shadows.
Bitwarden swiftly contained a brief supply chain attack on its CLI npm package, confirming that a single malicious release was live for under two hours on April 22, 2026, and assuring users that their vault data remained safe. The incident was quickly remediated, with the compromised access revoked and the malicious release deprecated.
Trigona ransomware attackers have unleashed a custom-built, command-line tool that turbocharges data theft, allowing them to siphon off sensitive information with lightning speed and razor-sharp efficiency. This potent tool is the latest weapon in their arsenal, enabling faster and more efficient data exfiltration from compromised environments.
Grinex, a Kyrgyzstan-registered crypto exchange, has temporarily halted trading and withdrawals after falling victim to a massive $15 million hack. The highly coordinated attack saw over 1 billion rubles stolen, with the funds quickly laundered across multiple blockchains.
Cyber attackers are exploiting Microsoft Teams by impersonating IT helpdesk staff, tricking victims into accepting chats from unfamiliar accounts and deploying SNOW malware. They start by flooding inboxes with urgent emails, then pose as IT support over Teams, offering to fix the problem.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Sean Plankey, a highly qualified cybersecurity expert with a background at the Department of Energy and National Security Council, has withdrawn his bid to lead the U.S. Cybersecurity and Infrastructure Security Agency after a 13-month confirmation process stalled in the Senate. His nomination, which had initially received committee approval, ultimately succumbed to procedural delays and partisan holds.
Google Cloud is shaking up its approach to cybersecurity by betting on its general AI model, Gemini, to tackle security needs, rather than developing a separate, cyber-focused model. This bold move is based on the impressive performance of Gemini across various domains, including coding and security.
Meet SilentGlass, a game-changing plug-and-play device that easily secures computer monitors from cyber threats, protecting vulnerable IT infrastructure like never before. Developed by the UK's National Cyber Security Centre, this innovative gadget is set to revolutionize desktop security.
Proton CEO Andy Yen warns that mandatory online age checks could spell the end of anonymity, forcing every adult to surrender their ID just to access the internet. He argues that efforts to protect minors will inevitably sweep in adults, creating an ID checkpoint that threatens online freedom.
The recent exposure of Anthropic's Claude Mythos highlights a chilling reality: AI tools designed to improve software quality can be easily repurposed to accelerate vulnerability discovery for malicious ends. This underscores the growing threat of AI-powered attacks, as malicious actors exploit commercial tools with minimal friction.
A critical vulnerability was discovered in the Checkmarx KICS tool due to a supply-chain breach, where a malicious Docker image was briefly hosted on DockerHub, exposing users to potential security risks between April 22, 2026, 14:17:59 UTC and 15:41:31 UTC. The breach was quickly identified and rectified, with affected tags restored and malicious images removed.
NIST is overhauling its approach to CVE prioritization, shifting its focus to high-risk vulnerabilities in response to a staggering 263% surge in submissions between 2020 and 2025. As a result, it'll now prioritize enriching only the most critical CVEs in the National Vulnerability Database.
Did you know that password resets can cost companies a whopping $70 each, and with stolen credentials involved in nearly 45% of breaches, it's clear that corporate security is vulnerable to attack.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
A recent cyberattack exploited weaknesses in a company's infrastructure, resulting in a staggering $290 million heist from KelpDAO, highlighting the vulnerability of supply chains to targeted attacks. The attackers manipulated key nodes to gain control and siphon off funds.
A rogue version of the Bitwarden CLI package, identified as @bitwarden/cli@2026.4.0, was compromised in a supply chain attack, stealing sensitive data like GitHub tokens and cloud secrets. The malicious code, hidden in a file called bw1.js, has already been distributed to users, putting their security at risk.
In a clever social engineering ploy, UNC6692 launched a massive email campaign in late December 2025, flooding targets with messages to create a sense of urgency and distraction, before following up with a convincing Microsoft Teams message that pushed a malicious link. The attackers then cleverly disguised their malware as a legitimate "Mailbox Repair and Sync Utility" patch, hosted on an Amazon S3 page.
China's naval diplomacy is taking a dramatic turn inward, with a stunning display of 40 warships and public events in 10 cities, showcasing the People's Liberation Army Navy's strength to a domestic audience. This deliberate effort marks a significant shift in the PLAN's approach, prioritizing visibility at home over traditional fleet base displays or foreign port visits.
Australia is supercharging its Guided Weapons Program with a whopping $26 billion boost, solidifying its national security and forging stronger global supply chains through diverse international partnerships. This massive investment surge is set to bolster the country's defense industry and pave the way for a more robust and resilient future.
Federal agencies are shifting their approach to AI-powered contact centers, moving away from fragmented chatbots that created a disjointed experience for citizens, and towards a unified, journey-centric model that offers a seamless and consistent brand experience. This new approach aims to provide one cohesive face to the customer, spanning channels and touchpoints.
Rituals recently discovered a data breach affecting millions of customers, compromising sensitive personal info like names, email addresses, and home addresses, but fortunately, no passwords or payment details were accessed. The company has since contained the incident, blocked unauthorized access, and notified authorities.
Imagine a future where AI launches devastating cloud attacks with minimal human intervention - a threat that's no longer theoretical, but a harsh reality as demonstrated by a recent state-sponsored espionage campaign where AI executed 80-90% of the attack autonomously. Palo Alto Networks' Unit 42 has taken this threat to the next level by building a proof-of-concept AI model called Zealot that can execute end-to-end cloud attacks.