Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
North Korean UNC4736 Linked to $285M Solana DeFi Hack on Drift Exchange
On 1 April 2026, the Solana-based decentralized exchange Drift suffered a theft of approximately $285 million, in what now appears ...
Chrome Zero-Day CVE-2026-5281: Critical WebGPU Vulnerability Under Active Exploitation
Google has released an unscheduled Chrome security update that patches 21 vulnerabilities, including an actively exploited zero-day vulnerability CVE-2026-5281. The ...
Living off the Land Attacks: How to Control Your Internal Attack Surface
Security models built around the principle of “find the malicious file, block the attack” are rapidly losing effectiveness. Modern adversaries ...
Axios npm Package Compromised in North Korean Supply Chain Attack Targeting Developers
The widely used JavaScript HTTP client Axios has become the center of a significant software supply chain attack. Google Threat ...
Google Rolls Out Mandatory Android Developer Verification as Apple Tightens Wearable Privacy Rules
Major platform providers are simultaneously raising the bar for mobile security. Google is introducing mandatory identity verification for Android developers ...
AtlasCross RAT: Silver Fox Targets Chinese-Speaking Users via Fake VPN and Messaging Sites
A large-scale malware campaign is distributing a new remote access trojan, AtlasCross RAT, by impersonating popular VPN, messaging, video conferencing ...
ChatGPT DNS Data Exfiltration Vulnerability and OpenAI Codex Command Injection Raise AI Security Concerns
Recent research by Check Point and BeyondTrust Phantom Labs has revealed critical security weaknesses in two widely used OpenAI services: ...
GitGuardian State of Secrets Sprawl 2026: AI, DevOps and the Explosion of Machine Identities
The latest GitGuardian State of Secrets Sprawl 2026 report shows that hardcoded secrets in code and infrastructure are not just ...
Chinese Cyber Espionage Operation Targets Southeast Asian Government with USB Malware and Advanced RATs
A government organization in Southeast Asia has been hit by a large-scale cyber espionage campaign that Palo Alto Networks’ Unit ...
Iran-Linked Handala Hack Team Targets FBI Email and Stryker in Destructive Cyber Attacks
The Iran-aligned Handala Hack Team, believed to be operating on behalf of Iran’s Ministry of Intelligence and Security (MOIS), has ...
