The internet is noisy this week. We are seeing some wild new tactics, like people using fake cell towers to send scam texts, while some developers are accidentally downloading tools that peek into their private files during a simple install.…
Cyber Briefing: 2026.04.30
he current cyber threat landscape is characterized by a volatile shift in malware dominance, notably with Vidar ascending… This article has been indexed from CyberMaterial Read the original article: Cyber Briefing: 2026.04.30
cPanel zero-day exploited for months before patch release (CVE-2026-41940)
A critical authentication bypass vulnerability (CVE-2026-41940) in cPanel, a popular web-based control panel for managing web hosting accounts, is being exploited by attackers in the wild. What’s more, attackers didn’t have to wait for watchTowr security researchers to release technical…
CISA and Partners Publish Zero Trust Guidance For OT Security
A new CISA‑led guide explains how zero‑trust security can be applied to operational technology, balancing cyber defence with safety and system availability This article has been indexed from www.infosecurity-magazine.com Read the original article: CISA and Partners Publish Zero Trust Guidance…
Strengthening Trust in Digital Education Platforms with Passwordless Authentication
Learn how passwordless authentication strengthens trust in digital education platforms by improving security, user experience, and access control. The post Strengthening Trust in Digital Education Platforms with Passwordless Authentication appeared first on Security Boulevard. This article has been indexed from…
Ransomware Victims up 389%, TTE in Less Than Two Days: How Can Defenders Stay Ahead?
Agentic AI’s impact on ransomware—it’s execution, its success and even who gets to play, is being widely felt. And we’re just getting started. The post Ransomware Victims up 389%, TTE in Less Than Two Days: How Can Defenders Stay Ahead?…
Why Enterprises Need an MCP Gateway, Not Native Connectors
Anthropic made the architectural case for MCP gateways at an AI Engineer conference recently. The talk was titled “Why Gateways Are All You Need”. It laid out exactly why enterprise MCP deployments stall and what the path forward looks like.…
FBI and International Agencies Shut Down Scam Centers, Arrest 276 People
The FBI and law enforcement from Dubai, Thailand, and China shut down nine scam centers and arrested 276 people in connection with crypto fraud operations that were used to target Americans and steal millions of dollars by convincing victims to…
Cisco releases open-source toolkit for verifying AI model lineage
Enterprises pulling models from Hugging Face and other open repositories rarely keep records of how those models are altered after download, leaving organizations with little ability to confirm what they are running in production. The State of AI Security 2026…
UK: Education Sector Faces Surge in Cyber Breaches Despite Stable National Threat Levels
The British public education sector has faced the nation’s most dramatic increase in cyber breach prevalence over the past year This article has been indexed from www.infosecurity-magazine.com Read the original article: UK: Education Sector Faces Surge in Cyber Breaches Despite…
Critical Gemini CLI Flaw Enabled Host Code Execution, Supply Chain Attacks
An attacker could have planted a malicious configuration to execute commands outside the sandbox. The post Critical Gemini CLI Flaw Enabled Host Code Execution, Supply Chain Attacks appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the…
Ransomware Attacks on Schools: 4 Warning Signs IT Teams Shouldn’t Ignore
Ransomware attacks are increasingly threatening to K–12 schools, with districts of all sizes becoming prime targets for cybercriminals. These school ransomware attacks don’t just impact IT systems. They can shut down classrooms, disrupt learning for days or even weeks, and…
EtherRAT Distribution Spoofing Administrative Tools via GitHub Facades
Intro A sophisticated, high-resilience malicious campaign was identified by Atos Threat Research Center (TRC) in March 2026. This operation specifically targets the high-privilege professional accounts of enterprise administrators, DevOps engineers, and security analysts by impersonating administrative utilities they rely on…
New Python Backdoor Uses Tunneling Service to Steal Browser and Cloud Credentials
Cybersecurity researchers have disclosed details of a stealthy Python-based backdoor framework called DEEP#DOOR that comes with capabilities to establish persistent access and harvest a wide range of sensitive information from compromised hosts. “The intrusion chain begins with execution of a…
U.S. Charges Suspected Scattered Spider Member
Federal authorities have taken legal action against Peter Stokes, a 19-year-old alleged member of the cybercriminal group known as Scattered Spider. This article has been indexed from CyberMaterial Read the original article: U.S. Charges Suspected Scattered Spider Member
Claude Mythos Fears Startle Japan’s Financial Sector
Japan’s financial sector is taking proactive steps to address potential cybersecurity threats posed by Anthropic’s new AI model, Mythos. This article has been indexed from CyberMaterial Read the original article: Claude Mythos Fears Startle Japan’s Financial Sector
Cybercrime Fighters Club Launched
Group-IB has announced the creation of the Cybercrime Fighters Club, a new initiative designed to foster collaboration and knowledge sharing in the cybersecurity field. This article has been indexed from CyberMaterial Read the original article: Cybercrime Fighters Club Launched
IT Security News Hourly Summary 2026-04-30 15h : 12 posts
12 posts were published in the last hour 12:37 : Check Point Cyber Security Now Available Across All Levels of U.S. Government 12:37 : 90,000 Screenshots of One Celebrity’s Phone Were Exposed Online 12:37 : Hackers arrested for stealing and…
Check Point Cyber Security Now Available Across All Levels of U.S. Government
We’re proud to announce that Check Point has earned GovRAMP Authorization for the Check Point Infinity Platform for Government. This is a big milestone for the company and is a reflection of our unparalleled prevention-first capabilities, which were recently ranked #1 for the fourth consecutive year in Miercom’s 2026 Hybrid…
90,000 Screenshots of One Celebrity’s Phone Were Exposed Online
Spyware appears to have captured everything from intimate photos to private messages from the smartphone of European celebrity. They were publicly accessible until a researcher flagged the exposure. This article has been indexed from Security Latest Read the original article:…
Hackers arrested for stealing and reselling 600,000 Roblox accounts
Ukrainian police detained three suspects accused of hacking into Roblox accounts and reselling the data on Russian websites, with payments made in cryptocurrency. Police raid (Source: The Prosecutor General’s Office of Ukraine) “Prosecutors of the Lviv region, together with the…
Proxmox Backup Server 4.2 arrives with S3 storage support and parallel sync jobs
Proxmox Backup Server 4.2 is a maintenance and feature update built on Debian 13.4 “Trixie” that adds S3-compatible object storage as a supported backend and introduces parallel processing for sync jobs. The server ships the new version with Linux kernel…
Researchers develop tool to expose GPS signal spoofing in transit networks
The Oak Ridge National Laboratory (ORNL) has developed a portable detector that identifies GPS spoofing in real time, including during motion, to help protect transportation systems. Spoofing involves transmitting counterfeit signals that imitate authentic GPS transmissions and produce false information…
Nine-year-old Linux kernel flaw enables reliable local privilege escalation (CVE-2026-31431)
Security researchers at Theori have disclosed a high-severity local privilege escalation (LPE) vulnerability (CVE-2026-31431) in the Linux kernel. The flaw, nicknamed “Copy Fail”, has affected virtually every major Linux distribution shipped since 2017, and a working proof-of-concept (PoC) exploit is…