When the EU Cyber Resilience Act (CRA) was introduced into law in 2024, it represented one of the most significant regulatory shifts we’ve seen anywhere in the world with implications for how organizations build, ship, and maintain software. It establishes…
Chrome Advances User Protection with new Infostealer Mitigation Features
Google Chrome has taken a significant step toward hardening browser-level authentication security in response to the growing threat landscape by introducing Device Bound Session Credentials in its latest Windows update. As part of Chrome 146, this mechanism has been…
Microsoft warns of fake IT worker identities
Microsoft has raised an alarm regarding a North Korean-affiliated group known as Jasper Sleet, which is exploiting the trend of remote hiring to infiltrate cloud environments. This article has been indexed from CyberMaterial Read the original article: Microsoft warns of…
Massive SIM Farm Network Exposed
A recent investigation has revealed a massive mobile proxy network known as ProxySmart, which spans 17 countries and involves 87 exposed control panels and at least 94 physical phone-farm locations. This article has been indexed from CyberMaterial Read the original…
Ransomware Negotiator Pleads Guilty
Angelo Martino, a former ransomware negotiator, has admitted to secretly working with the BlackCat ransomware group, pleading guilty to conspiracy charges. This article has been indexed from CyberMaterial Read the original article: Ransomware Negotiator Pleads Guilty
Roblox Settles with Alabama and West Virginia
Roblox has settled with the states of Alabama and West Virginia over concerns regarding child safety on its gaming platform. This article has been indexed from CyberMaterial Read the original article: Roblox Settles with Alabama and West Virginia
1Nebula achieves ISO 27001 certification
1Nebula has successfully obtained ISO 27001 certification, marking a significant milestone in its commitment to information security. This article has been indexed from CyberMaterial Read the original article: 1Nebula achieves ISO 27001 certification
Researchers Uncover SIM Farm-as-a-Service Operation Spanning 87 Panels in 17 Nations
Infrastructure intelligence firm Infrawatch has exposed a globally distributed SIM Farm-as-a-Service ecosystem powered by a single Belarus-based software platform called ProxySmart, identifying 87 exposed control panels across 17 countries and at least 94 physical phone-farm locations. A SIM farm is…
Malicious Google Ads Hit Crypto Users With Wallet Drainers
Malicious Google Ads are increasingly being used to steal cryptocurrency by draining wallets and harvesting seed phrases from unsuspecting users searching for legitimate DeFi apps and wallet services. Recent campaigns tracked by SEAL show a sustained, technically advanced operation that…
Mozilla Firefox 150 Released With Fixes for Multiple Code Execution Vulnerabilities
Mozilla has released Firefox 150 to patch 41 security vulnerabilities, including multiple high-severity flaws that could lead to remote code execution. Users should immediately update their browsers to protect against these critical memory corruption and use-after-free bugs. Critical Vulnerability Details…
Experience AI-Powered Check Point Firewall at Google Cloud Next
Today’s enterprises demand Zero Trust security, everywhere. Cloud security teams require high-performance protection without the burden of managing firewalls at scale. For this reason, organizations are seeking managed network security solutions that reduce operational overhead while improving consistency, visibility, and prevention across complex multi-cloud environments. Responding to that demand, Check Point is continuing rollout of an AI-powered cloud firewall as a service now available for preview on Google…
From Access Control to Outcome Control: Securing AI Agents with Check Point and Google Cloud
AI is changing how software works. Applications no longer just process requests. They reason, make decisions, and take action. AI agents now retrieve data, invoke tools, and execute workflows across systems in real time. That shift introduces a new kind…
Palo Alto Networks Joins DNS-OARC as a Platinum Member
Palo Alto Networks joining DNS-OARC as a Platinum Member to collaborate on DNS research and security and improve internet resilience. The post Palo Alto Networks Joins DNS-OARC as a Platinum Member appeared first on Palo Alto Networks Blog. This article…
Malicious trading website drops malware that hands your browser to attackers
A fake TradingView AI agent site leads to malware that can take over your browser, steal your accounts and financial data, and open the door to further attacks. This article has been indexed from Malwarebytes Read the original article: Malicious…
Most Serious Cyberattacks Against the UK Now From Russia, Iran and China, Cyber Chief Says
British businesses need to prepare themselves to defend against cyberattacks because the U.K. could be targeted “at scale,” if it became involved in an international conflict. The post Most Serious Cyberattacks Against the UK Now From Russia, Iran and China,…
Surge in Silent Subject Phishing Attacks Targets VIP Users
Null subject phishing campaigns bypass filters and target VIPs with QR code and RMM abuse This article has been indexed from www.infosecurity-magazine.com Read the original article: Surge in Silent Subject Phishing Attacks Targets VIP Users
Harvester Expands Toolset with GoGra Backdoor
The Harvester APT group has introduced a new Linux variant of its GoGra backdoor, which is designed to evade detection by using legitimate Microsoft services for its command-and-control (C2) operations. This article has been indexed from CyberMaterial Read the original…
Namastex npm Packages Deliver CanisterWorm Malware
A new supply chain threat has emerged within the npm ecosystem, involving malicious versions of packages from Namastex.ai that deliver the CanisterWorm malware. This article has been indexed from CyberMaterial Read the original article: Namastex npm Packages Deliver CanisterWorm Malware
Volo Protocol Hacked for $3.5M
Volo Protocol, a decentralized finance platform, has confirmed a security breach that resulted in the loss of approximately $3.5 million. This article has been indexed from CyberMaterial Read the original article: Volo Protocol Hacked for $3.5M
Ransomware Attack on Hospital Caribbean Medical Center
Hospital Caribbean Medical Center in Puerto Rico has suffered a significant ransomware attack, affecting up to 92,000 individuals. This article has been indexed from CyberMaterial Read the original article: Ransomware Attack on Hospital Caribbean Medical Center
Anker’s New AI Chip Announcement
Anker has unveiled its latest innovation in the form of a custom AI chip named Thus, aimed at advancing local AI functionalities in various electronic devices. This article has been indexed from CyberMaterial Read the original article: Anker’s New AI…
IT Security News Hourly Summary 2026-04-22 15h : 17 posts
17 posts were published in the last hour 12:35 : Bluesky Back Online After DDoS Attack, as Iran-Linked 313 Team Takes Credit 12:35 : 109 Fake GitHub Repos Spread SmartLoader, StealC Malware 12:35 : Algorithmic Circuit Breakers: Engineering Hard Stop…
Bluesky Back Online After DDoS Attack, as Iran-Linked 313 Team Takes Credit
Bluesky is back online after a roughly 24-hour DDoS attack disrupted services, with the Iran-linked 313 Team claiming responsibility and no data breach reported. This article has been indexed from Hackread – Cybersecurity News, Data Breaches, AI and More Read…
109 Fake GitHub Repos Spread SmartLoader, StealC Malware
A coordinated malware operation is abusing fake GitHub repositories to distribute a LuaJIT-based loader, SmartLoader, and a follow-on StealC infostealer, with at least 109 malicious repos active across 103 accounts. The campaign blends cloned open source code, obfuscated Lua stages,…