Some lawmakers are calling for widespread reforms following years of surveillance scandals and abuses across successive U.S. administrations. But even if the spy law known as Section 702 expires in April, the government’s spy powers will not automatically lapse. This…
Category: EN
Hackers Use ATHR to Run AI-Powered Vishing, Credential Theft, and Phone-Based Phishing at Scale
A new cybercrime platform called ATHR is making it much easier for attackers to run large-scale phone-based phishing operations, also known as vishing. Instead of relying on malicious links or infected email attachments, this platform sends simple-looking emails with just…
Anthropic Releases Claude Opus 4.7 with Automated Real-Time Cybersecurity Safeguards
Anthropic has launched Claude Opus 4.7, its latest flagship model, combining improved coding and vision capabilities with automated real-time safeguards to detect and block high-risk cybersecurity requests. The release is notable because Anthropic is testing these protections on a broadly…
Fake Ledger Hardware Wallets on Chinese Marketplaces Steal Crypto Seeds and PINs
A Brazilian cybersecurity researcher has exposed a sophisticated, large-scale supply chain scam involving counterfeit Ledger Nano S Plus hardware wallets sold through a Chinese marketplace, devices engineered from the ground up to silently drain cryptocurrency across roughly 20 blockchains. The…
Attackers Weaponize CVE-2026-39987 to Spread Blockchain-Based Backdoor Via Hugging Face
A critical vulnerability in the marimo Python notebook platform is now being actively used by attackers to deploy a blockchain-powered backdoor on developer systems. The flaw, tracked as CVE-2026-39987, allows remote code execution without authentication, making it a dangerous entry…
Top XBOW Alternatives in 2026
Escape is the best XBOW alternative for continuous AI pentesting across APIs, web apps, and complex authentication — with regression testing, developer-ready remediation, and platform pricing suited for rapidly scaling orgs. The post Top XBOW Alternatives in 2026 appeared first…
Cyber Briefing: 2026.04.17
Today’s cyber briefing landscape is marked by high-velocity exploitation and a shifting regulatory environment This article has been indexed from CyberMaterial Read the original article: Cyber Briefing: 2026.04.17
New Mirai Variant Nexcorium Hijacks DVR Devices for DDoS Attacks
Cybersecurity researchers at Fortinet have discovered Nexcorium, a new Mirai-based malware targeting TBK DVR systems to turn them into a botnet for DDoS attacks. This article has been indexed from Hackread – Cybersecurity News, Data Breaches, AI and More Read…
Operation PowerOFF: 53 DDoS domains seized and 3 Million criminal accounts uncovered
Operation PowerOFF shut down 53 DDoS-for-hire domains, arrested four suspects, and exposed data on over 3 million criminal user accounts. Operation PowerOFF is an international law enforcement action that dismantled 53 domains linked to DDoS-for-hire services used by over 75,000…
Over 1 Billion Users Potentially Impacted by Microsoft Zero Day Exposure
Informally known as BlueHammer, a newly discovered Windows zero-day vulnerability has drawn attention to the cybersecurity community because of its ability to quietly hand over control to attackers. As privilege escalation flaws are not uncommon, this particular vulnerability is…
AI Search Shift Causes HubSpot Traffic Drop and Forces Businesses to Rethink Digital Strategy
Surprisingly fast growth in AI-driven search is reshaping how people find information online. As habits shift, companies are seeing major traffic changes—HubSpot, for instance, lost nearly 140 million visits in just one year. This decline is closely tied to…
Three Microsoft Defender Zero-Days Actively Exploited; Two Still Unpatched
Huntress is warning that threat actors are exploiting three recently disclosed security flaws in Microsoft Defender to gain elevated privileges in compromised systems. The activity involves the exploitation of three vulnerabilities that are codenamed BlueHammer (requires GitHub sign-in), RedSun, and UnDefend,…
TP-Link Routers Hit by Mirai in CVE-2023-33538 Attacks
Hackers are actively scanning for vulnerable TP-Link home routers to push Mirai-style malware, abusing CVE-2023-33538 in a new wave of automated attacks. While the current exploit attempts are technically flawed, researchers warn that the underlying bug is real and dangerous…
Bluesky confirms DDoS attack is cause of continued app outages
Bluesky has been experiencing ongoing service disruptions since just before 3 a.m. ET. on April 15. This article has been indexed from Security News | TechCrunch Read the original article: Bluesky confirms DDoS attack is cause of continued app outages
Tracking Mirai Variant Nexcorium: A Vulnerability-Driven IoT Botnet Campaign
TBK DVRs targeted by Nexcorium: exploiting, persisting, brute-force attacks, and multi-architecture Mirai-style DDoS in a single campaign. From CVE-2024-3721 exploitation to CVE-2017-17215 reuse, this botnet demonstrates how quickly IoT threats continue to evolve. This article has been indexed from…
DDoS-For-Hire Services Disrupted by International Police Action in ‘Operation PowerOff’
Coordinated action by FBI, Europol and others seizes infrastructure, makes arrests – and sends warning letters to known DDoS service users This article has been indexed from www.infosecurity-magazine.com Read the original article: DDoS-For-Hire Services Disrupted by International Police Action in…
Commercial AI Models Show Rapid Gains in Vulnerability Research
AI models are making rapid gains in vulnerability research and exploit development, raising new cybersecurity risks, a Forescout study finds This article has been indexed from www.infosecurity-magazine.com Read the original article: Commercial AI Models Show Rapid Gains in Vulnerability Research
SEO Poisoning Attack Uses Microsoft Binary to Install RMM Tool
New research has exposed a search engine poisoning campaign that delivers a trojanized TestDisk installer, abuses a Microsoft-signed binary for DLL sideloading, and silently deploys the ScreenConnect remote monitoring and management (RMM) client for hands-on keyboard access. The rogue domain…
Part II: The Network That Doesn’t Exist: Zero Trust, Service Meshes, and the Slow Death of Perimeter Security
The conversation that reordered my understanding of enterprise network security happened in a conference room in London in early 2019. The CISO of a mid-size financial services firm — precise, methodical, someone whose threat modeling I trusted — was describing…
The Vulnerability Management Race Is Over. It’s Time to Focus on Exposure.
With Anthropic’s Mythos Preview announcement, the race to patch all vulnerabilities is over. As defenders, we must move on. We must focus on what adversaries can do after they exploit a vulnerability: which attack paths those exploits enable, where those…