Collecting Cyber-News from over 60 sources

Tag: exploit

Breach Roundup: Myanmar Scam Compound Managers Charged

Apr 24, 2026 5:39 AM

Tags: apache, breach, cisa, ddos, exploit, flaw, hacking, infrastructure, network, ransomware, russia, scam

Also, Europol Cracks DDoS Networks, Mythos Finds Bugs, France Portal Hit. This week, scam compounds. Attackers exploit flaws pre-disclosure. A crackdown on DDoS-for-hire. No Mythos for CISA, yes for Mozilla. France ID portal breach. Israeli and Venezuelan critical infrastructure targeted. Russian hacking in Ukraine. An Apache flaw. A ransomware negotiator aided BlackCat. First seen on…
Hackers exploit file upload bug in Breeze Cache WordPress plugin

Apr 24, 2026 12:38 AM

Tags: exploit, hacker, vulnerability, wordpress

Hackers are actively exploiting a critical vulnerability in the Breeze Cache plugin for WordPress that allows uploading arbitrary files on the server without authentication. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-exploit-file-upload-bug-in-breeze-cache-wordpress-plugin/
Hackers exploit file upload bug in Breeze Cache WordPress plugin

Apr 24, 2026 12:38 AM

Tags: exploit, hacker, vulnerability, wordpress

Hackers are actively exploiting a critical vulnerability in the Breeze Cache plugin for WordPress that allows uploading arbitrary files on the server without authentication. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-exploit-file-upload-bug-in-breeze-cache-wordpress-plugin/
3 practical ways AI threat detection improves enterprise cyber resilience

Apr 23, 2026 11:38 PM

Tags: access, ai, attack, automation, backup, cloud, cyber, data, detection, dns, endpoint, exploit, framework, identity, login, malicious, network, radius, ransomware, resilience, risk, service, threat, tool, update, vpn, vulnerability, vulnerability-management

Legitimate admin activity and malicious behavior often look similar without contextHybrid environments generate fragmented telemetry that rule sets can’t correlateLean teams don’t have time to manually connect the dots across systemsPlatforms like Adlumin MDR apply behavioral models and automated triage to suppress low”‘value alerts and elevate incidents that actually matter. Fewer alerts, better context, and…
3 practical ways AI threat detection improves enterprise cyber resilience

Apr 23, 2026 11:38 PM

Tags: access, ai, attack, automation, backup, cloud, cyber, data, detection, dns, endpoint, exploit, framework, identity, login, malicious, network, radius, ransomware, resilience, risk, service, threat, tool, update, vpn, vulnerability, vulnerability-management

Legitimate admin activity and malicious behavior often look similar without contextHybrid environments generate fragmented telemetry that rule sets can’t correlateLean teams don’t have time to manually connect the dots across systemsPlatforms like Adlumin MDR apply behavioral models and automated triage to suppress low”‘value alerts and elevate incidents that actually matter. Fewer alerts, better context, and…
Surveillance campaigns use commercial surveillance tools to exploit long-known telecom vulnerabilities

Apr 23, 2026 10:39 PM

Tags: attack, exploit, mobile, tool, vulnerability

Researchers said it’s the first-ever mapping of attack traffic to mobile operator signalling infrastructure. First seen on cyberscoop.com Jump to article: cyberscoop.com/surveillance-campaigns-use-commercial-surveillance-tools-to-exploit-long-known-telecom-vulnerabilities/
Five steps to become Mythos ready

Apr 23, 2026 9:39 PM

Tags: access, ai, attack, automation, breach, business, cloud, compliance, control, cvss, cyber, cybersecurity, data, defense, detection, exploit, flaw, framework, identity, incident response, infrastructure, LLM, mitre, network, office, open-source, openai, risk, software, threat, tool, training, update, vulnerability, zero-day

AI is uncovering vulnerabilities at a scale that will overwhelm legacy defenses. Here is how to build a security organization that is Mythos ready. Key takeaways While frontier AI models like Claude Mythos boost cyber defenses, they also empower attackers to discover and weaponize vulnerabilities at unprecedented machine speed. To avoid getting buried by an…
Five steps to become Mythos ready

Apr 23, 2026 9:39 PM

Tags: access, ai, attack, automation, breach, business, cloud, compliance, control, cvss, cyber, cybersecurity, data, defense, detection, exploit, flaw, framework, identity, incident response, infrastructure, LLM, mitre, network, office, open-source, openai, risk, software, threat, tool, training, update, vulnerability, zero-day

AI is uncovering vulnerabilities at a scale that will overwhelm legacy defenses. Here is how to build a security organization that is Mythos ready. Key takeaways While frontier AI models like Claude Mythos boost cyber defenses, they also empower attackers to discover and weaponize vulnerabilities at unprecedented machine speed. To avoid getting buried by an…
US agency breached through Cisco vulnerability, FIRESTARTER backdoor allowed access through March

Apr 23, 2026 9:39 PM

Tags: access, backdoor, cisa, cisco, exploit, hacker, malware, vulnerability

CISA said the unnamed department was infected with malware called “FIRESTARTER” that allowed the hackers to return to the Cisco device in March without re-exploiting the original vulnerabilities. First seen on therecord.media Jump to article: therecord.media/cisa-us-agency-breached-cisco-vulnerability-backdoor
Surveillance companies exploiting telecom system to spy on targets’ locations, research shows

Apr 23, 2026 9:39 PM

Tags: exploit, infrastructure, spy

The campaigns exploited a weakness in telecom infrastructure to allow the unnamed vendors to secretly pose as real cellular providers and pinpoint victims’ locations. First seen on therecord.media Jump to article: therecord.media/surveillance-companies-exploiting-telecom-systems-to-track-location
Cryptohack Roundup: US-Sanctioned Grinex Hacked

Apr 23, 2026 9:39 PM

Tags: crypto, exploit, finance, hacker, scam, theft, update

Also: Updates in KelpDAO, Drift, Hyperbridge Hacks. This week, Grinex was exploited, a hacker laundered KelpDAO funds, Circle was sued over $280M Drift hack, Rhea Finance and Volo Protocol were exploited, update in Hyperbridge hack, sentencing in art scam case, a French home invasion for crypto theft and eth.limo hijack thwarted. First seen on govinfosecurity.com…
Checkmarx Supply Chain Attack Exploits Docker Images and CI/CD Pipelines

Apr 23, 2026 9:39 PM

Tags: attack, credentials, docker, exploit, malicious, supply-chain

A Checkmarx supply chain attack used malicious Docker images and extensions to steal credentials and spread through CI/CD pipelines. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/checkmarx-supply-chain-attack-exploits-docker-images-and-ci-cd-pipelines/
Checkmarx Supply Chain Attack Exploits Docker Images and CI/CD Pipelines

Apr 23, 2026 9:39 PM

Tags: attack, credentials, docker, exploit, malicious, supply-chain

A Checkmarx supply chain attack used malicious Docker images and extensions to steal credentials and spread through CI/CD pipelines. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/checkmarx-supply-chain-attack-exploits-docker-images-and-ci-cd-pipelines/
Self-Propagating npm Malware Turns Trusted Packages Into Attack Paths

Apr 23, 2026 8:39 PM

Tags: access, api, attack, authentication, automation, breach, control, credentials, crypto, data, data-breach, endpoint, exploit, intelligence, malicious, malware, open-source, pypi, risk, service, software, supply-chain, theft, threat, unauthorized, worm

<div cla TL;DR An open source malware campaign dubbed CanisterSprawl has been observed in npm, stealing sensitive data from developer machines including tokens, API keys, and more. From there, the malware publishes additional compromised packages under hijacked credentials, abusing developer trust in open source ecosystems to spread. Impacted organizations should remove the malware immediately, examine…
The Guardian view on Anthropic’s Claude Mythos: when AI finds every flaw, who controls the internet? | Editorial

Apr 23, 2026 8:39 PM

Tags: access, ai, attack, business, computer, control, crime, cyber, cybersecurity, email, exploit, finance, flaw, hacker, Internet, risk, threat, vulnerability

Tech can scale cyber-attacks and defences alike, raising questions about private power, public risk and the future of a shared internetAnthropic announced its latest AI model, <a href=”https://www.theguardian.com/technology/2026/apr/08/anthropic-ai-cybersecurity-software”>Claude Mythos, this month but said it would not be released publicly, because it turns computers into crime scenes. The company claimed that it could find previously unknown…
Self-Propagating npm Malware Turns Trusted Packages Into Attack Paths

Apr 23, 2026 8:39 PM

Tags: access, api, attack, authentication, automation, breach, control, credentials, crypto, data, data-breach, endpoint, exploit, intelligence, malicious, malware, open-source, pypi, risk, service, software, supply-chain, theft, threat, unauthorized, worm

<div cla TL;DR An open source malware campaign dubbed CanisterSprawl has been observed in npm, stealing sensitive data from developer machines including tokens, API keys, and more. From there, the malware publishes additional compromised packages under hijacked credentials, abusing developer trust in open source ecosystems to spread. Impacted organizations should remove the malware immediately, examine…
Self-Propagating npm Malware Turns Trusted Packages Into Attack Paths

Apr 23, 2026 8:39 PM

Tags: access, api, attack, authentication, automation, breach, control, credentials, crypto, data, data-breach, endpoint, exploit, intelligence, malicious, malware, open-source, pypi, risk, service, software, supply-chain, theft, threat, unauthorized, worm

<div cla TL;DR An open source malware campaign dubbed CanisterSprawl has been observed in npm, stealing sensitive data from developer machines including tokens, API keys, and more. From there, the malware publishes additional compromised packages under hijacked credentials, abusing developer trust in open source ecosystems to spread. Impacted organizations should remove the malware immediately, examine…
UAT-4356’s Targeting of Cisco Firepower Devices

Apr 23, 2026 5:39 PM

Tags: access, cisco, cve, exploit, unauthorized, vulnerability

Cisco Talos is aware of UAT-4356’s continued active targeting of Cisco Firepower devices’ Firepower eXtensible Operating System (FXOS). UAT-4356 exploited n-day vulnerabilities (CVE-2025-20333 and CVE-2025-20362) to gain unauthorized access to vulnerable devices. First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/uat-4356-firestarter/
With AI’s help, North Korean hackers stumbled into a near-undetectable attack

Apr 23, 2026 5:39 PM

Tags: ai, attack, exploit, hacker, hacking, malware, north-korea, phishing, social-engineering

For many years, state-sponsored hacking was defined by human expertise in finding security holes, writing malware and exploits, pulling off social engineering and phishing … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/04/23/hexagonalrodent-north-korean-hackers-targeting-developers/
ThreatsDay Bulletin: $290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms +25 New Stories

Apr 23, 2026 5:39 PM

Tags: backdoor, data, exploit, macOS, supply-chain

You scroll past one incident and see another that feels familiar, like it should have been fixed years ago, but it still works with small changes. Same bugs. Same mistakes.The supply chain is messy. Packages you did not check are stealing data, adding backdoors, and spreading. Attacking the systems behind apps is easier than breaking…
[Webinar] Mythos Reality Check: Beating Automated Exploitation at AI Speed

Apr 23, 2026 2:39 PM

Tags: ai, exploit, hacker, vulnerability

Imagine a world where hackers don’t sleep, don’t take breaks, and find weak spots in your systems instantly.Well, that world is already here.Thanks to AI, attackers are now launching automated, large-scale exploits faster than ever before. The time you have to fix a vulnerability before it gets attacked is shrinking to zero. We call this…
Hackers Use Hidden Website Instructions in New Attacks on AI Assistants

Apr 23, 2026 1:39 PM

Tags: ai, attack, cybersecurity, exploit, github, hacker, injection

Cybersecurity researchers at Forcepoint uncover new indirect prompt injection attacks that use hidden website code to exploit AI assistants like GitHub Copilot. First seen on hackread.com Jump to article: hackread.com/hackers-hidden-site-instruction-attack-ai-assistants/
CISA orders feds to patch BlueHammer flaw exploited as zero-day

Apr 23, 2026 1:39 PM

Tags: cisa, exploit, flaw, microsoft, update, zero-day

CISA has ordered U.S. federal agencies to patch a Microsoft Defender privilege escalation flaw (dubbed BlueHammer) that has been exploited in zero-day attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-microsoft-defender-flaw-exploited-in-zero-day-attacks/
U.S. CISA adds a flaw in Microsoft Defender to its Known Exploited Vulnerabilities catalog

Apr 23, 2026 12:39 PM

Tags: cisa, cve, cybersecurity, exploit, flaw, infrastructure, kev, microsoft, vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in Microsoft Defender to its Known Exploited Vulnerabilities catalog The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a flaw in Microsoft Defender, tracked as CVE-2026-33825 (CVSS score of 7.8), to its Known Exploited Vulnerabilities (KEV) catalog. CVE-2026-33825 is a Microsoft Defender flaw that can be exploited…
Attackers Exploit LMDeploy Flaw in the Wild Within 12 Hours of Advisory

Apr 23, 2026 11:39 AM

Tags: advisory, attack, cyber, exploit, flaw, github, open-source, vulnerability

A critical Server-Side Request Forgery (SSRF) vulnerability in LMDeploy’s vision-language module was exploited in active attacks just 12 hours and 31 minutes after its public disclosure, with no proof-of-concept code required. On April 21, 2026, GitHub published security advisory GHSA-6w67-hwm5-92mq, later assigned CVE-2026-33626, a high-severity SSRF flaw (CVSS 7.5) in LMDeploy, an open-source toolkit developed by Shanghai…
Riddled with flaws, serialEthernet converters endanger critical infrastructure

Apr 23, 2026 5:39 AM

Tags: access, authentication, control, credentials, data, data-breach, exploit, firmware, flaw, infrastructure, malicious, network, open-source, password, rce, remote-code-execution, risk, service, threat, update, vulnerability

New RCE and other vulnerabilities: Aside from all the known vulnerabilities from open-source components, the Forescout researchers also performed manual security analysis and identified previously unknown flaws in the firmware of three specific devices from two vendors: Lantronix EDS3000PS Series, Lantronix EDS5000 Series, and Silex SD330-AC.The web-based management interface of the Lantronix EDS5000 had five…
Riddled with flaws, serialEthernet converters endanger critical infrastructure

Apr 23, 2026 5:39 AM

Tags: access, authentication, control, credentials, data, data-breach, exploit, firmware, flaw, infrastructure, malicious, network, open-source, password, rce, remote-code-execution, risk, service, threat, update, vulnerability

New RCE and other vulnerabilities: Aside from all the known vulnerabilities from open-source components, the Forescout researchers also performed manual security analysis and identified previously unknown flaws in the firmware of three specific devices from two vendors: Lantronix EDS3000PS Series, Lantronix EDS5000 Series, and Silex SD330-AC.The web-based management interface of the Lantronix EDS5000 had five…
Claude Mythos signals a new era in AI-driven security, finding 271 flaws in Firefox

Apr 23, 2026 5:39 AM

Tags: access, ai, attack, browser, ciso, control, cyber, data-breach, exploit, flaw, hacking, incident response, infrastructure, intelligence, monitoring, openai, software, threat, tool, unauthorized, vulnerability

Defenders now able to win ‘decisively’?: Gaps between human-discoverable and AI-discoverable bugs favor attackers, who can afford to concentrate months of human effort to find just one bug they can exploit, Holley noted. Closing this gap with AI can help defenders erode that long-term advantage.The industry has largely been fighting security “to a draw,” he…
Microsoft Patch Still Leaves 1,300 SharePoint Servers Exposed

Apr 23, 2026 12:39 AM

Tags: cve, data-breach, exploit, flaw, Internet, microsoft, update

More than 1,300 internet-exposed SharePoint servers remain unpatched against CVE-2026-32201, a spoofing flaw Microsoft says was exploited as a zero-day. The post Microsoft Patch Still Leaves 1,300 SharePoint Servers Exposed appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-1300-sharepoint-servers-unpatched-zero-day-flaw/
The Invisible Threat: Business Logic Flaws in Modern Applications and Why Scanners Miss Them

Apr 22, 2026 10:39 PM

Tags: breach, business, exploit, flaw, malicious, threat, vulnerability

<div cla In today’s security landscape, some of the most dangerous vulnerabilities aren’t flagged by automated scanners at all. These are the business logic flaws: subtle mistakes in an application’s design or workflow that malicious actors can exploit by doing the unexpected. As a result, companies can be blindsided by breaches even when their vulnerability…