Collecting Cyber-News from over 60 sources

Tag: exploit

Five steps to become Mythos ready

Apr 23, 2026 9:39 PM

Tags: access, ai, attack, automation, breach, business, cloud, compliance, control, cvss, cyber, cybersecurity, data, defense, detection, exploit, flaw, framework, identity, incident response, infrastructure, LLM, mitre, network, office, open-source, openai, risk, software, threat, tool, training, update, vulnerability, zero-day

AI is uncovering vulnerabilities at a scale that will overwhelm legacy defenses. Here is how to build a security organization that is Mythos ready. Key takeaways While frontier AI models like Claude Mythos boost cyber defenses, they also empower attackers to discover and weaponize vulnerabilities at unprecedented machine speed. To avoid getting buried by an…
Five steps to become Mythos ready

Apr 23, 2026 9:39 PM

Tags: access, ai, attack, automation, breach, business, cloud, compliance, control, cvss, cyber, cybersecurity, data, defense, detection, exploit, flaw, framework, identity, incident response, infrastructure, LLM, mitre, network, office, open-source, openai, risk, software, threat, tool, training, update, vulnerability, zero-day

AI is uncovering vulnerabilities at a scale that will overwhelm legacy defenses. Here is how to build a security organization that is Mythos ready. Key takeaways While frontier AI models like Claude Mythos boost cyber defenses, they also empower attackers to discover and weaponize vulnerabilities at unprecedented machine speed. To avoid getting buried by an…
US agency breached through Cisco vulnerability, FIRESTARTER backdoor allowed access through March

Apr 23, 2026 9:39 PM

Tags: access, backdoor, cisa, cisco, exploit, hacker, malware, vulnerability

CISA said the unnamed department was infected with malware called “FIRESTARTER” that allowed the hackers to return to the Cisco device in March without re-exploiting the original vulnerabilities. First seen on therecord.media Jump to article: therecord.media/cisa-us-agency-breached-cisco-vulnerability-backdoor
Surveillance companies exploiting telecom system to spy on targets’ locations, research shows

Apr 23, 2026 9:39 PM

Tags: exploit, infrastructure, spy

The campaigns exploited a weakness in telecom infrastructure to allow the unnamed vendors to secretly pose as real cellular providers and pinpoint victims’ locations. First seen on therecord.media Jump to article: therecord.media/surveillance-companies-exploiting-telecom-systems-to-track-location
Self-Propagating npm Malware Turns Trusted Packages Into Attack Paths

Apr 23, 2026 8:39 PM

Tags: access, api, attack, authentication, automation, breach, control, credentials, crypto, data, data-breach, endpoint, exploit, intelligence, malicious, malware, open-source, pypi, risk, service, software, supply-chain, theft, threat, unauthorized, worm

<div cla TL;DR An open source malware campaign dubbed CanisterSprawl has been observed in npm, stealing sensitive data from developer machines including tokens, API keys, and more. From there, the malware publishes additional compromised packages under hijacked credentials, abusing developer trust in open source ecosystems to spread. Impacted organizations should remove the malware immediately, examine…
Self-Propagating npm Malware Turns Trusted Packages Into Attack Paths

Apr 23, 2026 8:39 PM

Tags: access, api, attack, authentication, automation, breach, control, credentials, crypto, data, data-breach, endpoint, exploit, intelligence, malicious, malware, open-source, pypi, risk, service, software, supply-chain, theft, threat, unauthorized, worm

<div cla TL;DR An open source malware campaign dubbed CanisterSprawl has been observed in npm, stealing sensitive data from developer machines including tokens, API keys, and more. From there, the malware publishes additional compromised packages under hijacked credentials, abusing developer trust in open source ecosystems to spread. Impacted organizations should remove the malware immediately, examine…
Self-Propagating npm Malware Turns Trusted Packages Into Attack Paths

Apr 23, 2026 8:39 PM

Tags: access, api, attack, authentication, automation, breach, control, credentials, crypto, data, data-breach, endpoint, exploit, intelligence, malicious, malware, open-source, pypi, risk, service, software, supply-chain, theft, threat, unauthorized, worm

<div cla TL;DR An open source malware campaign dubbed CanisterSprawl has been observed in npm, stealing sensitive data from developer machines including tokens, API keys, and more. From there, the malware publishes additional compromised packages under hijacked credentials, abusing developer trust in open source ecosystems to spread. Impacted organizations should remove the malware immediately, examine…
The Guardian view on Anthropic’s Claude Mythos: when AI finds every flaw, who controls the internet? | Editorial

Apr 23, 2026 8:39 PM

Tags: access, ai, attack, business, computer, control, crime, cyber, cybersecurity, email, exploit, finance, flaw, hacker, Internet, risk, threat, vulnerability

Tech can scale cyber-attacks and defences alike, raising questions about private power, public risk and the future of a shared internetAnthropic announced its latest AI model, <a href=”https://www.theguardian.com/technology/2026/apr/08/anthropic-ai-cybersecurity-software”>Claude Mythos, this month but said it would not be released publicly, because it turns computers into crime scenes. The company claimed that it could find previously unknown…
UAT-4356’s Targeting of Cisco Firepower Devices

Apr 23, 2026 5:39 PM

Tags: access, cisco, cve, exploit, unauthorized, vulnerability

Cisco Talos is aware of UAT-4356’s continued active targeting of Cisco Firepower devices’ Firepower eXtensible Operating System (FXOS). UAT-4356 exploited n-day vulnerabilities (CVE-2025-20333 and CVE-2025-20362) to gain unauthorized access to vulnerable devices. First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/uat-4356-firestarter/
With AI’s help, North Korean hackers stumbled into a near-undetectable attack

Apr 23, 2026 5:39 PM

Tags: ai, attack, exploit, hacker, hacking, malware, north-korea, phishing, social-engineering

For many years, state-sponsored hacking was defined by human expertise in finding security holes, writing malware and exploits, pulling off social engineering and phishing … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/04/23/hexagonalrodent-north-korean-hackers-targeting-developers/
ThreatsDay Bulletin: $290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms +25 New Stories

Apr 23, 2026 5:39 PM

Tags: backdoor, data, exploit, macOS, supply-chain

You scroll past one incident and see another that feels familiar, like it should have been fixed years ago, but it still works with small changes. Same bugs. Same mistakes.The supply chain is messy. Packages you did not check are stealing data, adding backdoors, and spreading. Attacking the systems behind apps is easier than breaking…
[Webinar] Mythos Reality Check: Beating Automated Exploitation at AI Speed

Apr 23, 2026 2:39 PM

Tags: ai, exploit, hacker, vulnerability

Imagine a world where hackers don’t sleep, don’t take breaks, and find weak spots in your systems instantly.Well, that world is already here.Thanks to AI, attackers are now launching automated, large-scale exploits faster than ever before. The time you have to fix a vulnerability before it gets attacked is shrinking to zero. We call this…
Hackers Use Hidden Website Instructions in New Attacks on AI Assistants

Apr 23, 2026 1:39 PM

Tags: ai, attack, cybersecurity, exploit, github, hacker, injection

Cybersecurity researchers at Forcepoint uncover new indirect prompt injection attacks that use hidden website code to exploit AI assistants like GitHub Copilot. First seen on hackread.com Jump to article: hackread.com/hackers-hidden-site-instruction-attack-ai-assistants/
CISA orders feds to patch BlueHammer flaw exploited as zero-day

Apr 23, 2026 1:39 PM

Tags: cisa, exploit, flaw, microsoft, update, zero-day

CISA has ordered U.S. federal agencies to patch a Microsoft Defender privilege escalation flaw (dubbed BlueHammer) that has been exploited in zero-day attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-microsoft-defender-flaw-exploited-in-zero-day-attacks/
U.S. CISA adds a flaw in Microsoft Defender to its Known Exploited Vulnerabilities catalog

Apr 23, 2026 12:39 PM

Tags: cisa, cve, cybersecurity, exploit, flaw, infrastructure, kev, microsoft, vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in Microsoft Defender to its Known Exploited Vulnerabilities catalog The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a flaw in Microsoft Defender, tracked as CVE-2026-33825 (CVSS score of 7.8), to its Known Exploited Vulnerabilities (KEV) catalog. CVE-2026-33825 is a Microsoft Defender flaw that can be exploited…
Attackers Exploit LMDeploy Flaw in the Wild Within 12 Hours of Advisory

Apr 23, 2026 11:39 AM

Tags: advisory, attack, cyber, exploit, flaw, github, open-source, vulnerability

A critical Server-Side Request Forgery (SSRF) vulnerability in LMDeploy’s vision-language module was exploited in active attacks just 12 hours and 31 minutes after its public disclosure, with no proof-of-concept code required. On April 21, 2026, GitHub published security advisory GHSA-6w67-hwm5-92mq, later assigned CVE-2026-33626, a high-severity SSRF flaw (CVSS 7.5) in LMDeploy, an open-source toolkit developed by Shanghai…
Riddled with flaws, serialEthernet converters endanger critical infrastructure

Apr 23, 2026 5:39 AM

Tags: access, authentication, control, credentials, data, data-breach, exploit, firmware, flaw, infrastructure, malicious, network, open-source, password, rce, remote-code-execution, risk, service, threat, update, vulnerability

New RCE and other vulnerabilities: Aside from all the known vulnerabilities from open-source components, the Forescout researchers also performed manual security analysis and identified previously unknown flaws in the firmware of three specific devices from two vendors: Lantronix EDS3000PS Series, Lantronix EDS5000 Series, and Silex SD330-AC.The web-based management interface of the Lantronix EDS5000 had five…
Riddled with flaws, serialEthernet converters endanger critical infrastructure

Apr 23, 2026 5:39 AM

Tags: access, authentication, control, credentials, data, data-breach, exploit, firmware, flaw, infrastructure, malicious, network, open-source, password, rce, remote-code-execution, risk, service, threat, update, vulnerability

New RCE and other vulnerabilities: Aside from all the known vulnerabilities from open-source components, the Forescout researchers also performed manual security analysis and identified previously unknown flaws in the firmware of three specific devices from two vendors: Lantronix EDS3000PS Series, Lantronix EDS5000 Series, and Silex SD330-AC.The web-based management interface of the Lantronix EDS5000 had five…
Claude Mythos signals a new era in AI-driven security, finding 271 flaws in Firefox

Apr 23, 2026 5:39 AM

Tags: access, ai, attack, browser, ciso, control, cyber, data-breach, exploit, flaw, hacking, incident response, infrastructure, intelligence, monitoring, openai, software, threat, tool, unauthorized, vulnerability

Defenders now able to win ‘decisively’?: Gaps between human-discoverable and AI-discoverable bugs favor attackers, who can afford to concentrate months of human effort to find just one bug they can exploit, Holley noted. Closing this gap with AI can help defenders erode that long-term advantage.The industry has largely been fighting security “to a draw,” he…
Microsoft Patch Still Leaves 1,300 SharePoint Servers Exposed

Apr 23, 2026 12:39 AM

Tags: cve, data-breach, exploit, flaw, Internet, microsoft, update

More than 1,300 internet-exposed SharePoint servers remain unpatched against CVE-2026-32201, a spoofing flaw Microsoft says was exploited as a zero-day. The post Microsoft Patch Still Leaves 1,300 SharePoint Servers Exposed appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-1300-sharepoint-servers-unpatched-zero-day-flaw/
Supply Chain Attacks Are Getting Worse”, How to Shrink Your Exposure

Apr 22, 2026 10:39 PM

Tags: attack, exploit, kubernetes, malicious, open-source, supply-chain, vulnerability

<div cla In March 2026, Trivy, one of the most widely used open-source vulnerability scanners in the Kubernetes ecosystem, was weaponized against the very organizations that relied on it for security. Attackers compromised the Aqua Security repository, force-pushed malicious binaries, and poisoned 75 of 76 version tags in the process. Any pipeline that pulled trivy:latest…
The Invisible Threat: Business Logic Flaws in Modern Applications and Why Scanners Miss Them

Apr 22, 2026 10:39 PM

Tags: breach, business, exploit, flaw, malicious, threat, vulnerability

<div cla In today’s security landscape, some of the most dangerous vulnerabilities aren’t flagged by automated scanners at all. These are the business logic flaws: subtle mistakes in an application’s design or workflow that malicious actors can exploit by doing the unexpected. As a result, companies can be blindsided by breaches even when their vulnerability…
New Mirai campaign exploits RCE flaw in EoL D-Link routers

Apr 22, 2026 10:39 PM

Tags: cve, exploit, flaw, injection, malware, rce, remote-code-execution, router, vulnerability

A new Mirai-based malware campaign is actively exploiting CVE-2025-29635, a high-severity command-injection vulnerability affecting D-Link DIR-823X routers, to enlist devices into the botnet. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-mirai-campaign-exploits-rce-flaw-in-eol-d-link-routers/
Microsoft issues outband patch for critical security flaw in update to ASP.NET Core

Apr 22, 2026 9:39 PM

Tags: advisory, api, authentication, container, cve, cvss, data, docker, exploit, flaw, framework, github, login, microsoft, password, update, vulnerability, windows, zero-day

UseCustomCryptographicAlgorithms API.A bug in the .NET 10.0.6 package, released as part of the Patch Tuesday updates on April 14, causes the ManagedAuthenticatedEncryptor library to compute the validation tag for the Hash-based Message Authentication Code (HMAC) using an incorrect offset.Incorrect calculation of security hashes results in the .AspNetCore application cookies and tokens being validated and trusted…
Mirai Botnet exploits CVE-2025-29635 to target legacy D-Link routers

Apr 22, 2026 8:40 PM

Tags: botnet, cve, exploit, flaw, injection, router, vulnerability

Mirai botnet is targeting old D-Link routers using CVE-2025-29635, a command injection flaw exploitable via crafted POST requests after public PoC disclosure. A Mirai botnet is actively exploiting a command injection vulnerability, tracked as CVE-2025-29635, in discontinued D-Link routers, Akamai reports. The flaw allows attackers to inject commands because an attacker-controlled value is copied without…
New Apple Phishing Scam Uses Fake $899 iPhone Purchase Alert

Apr 22, 2026 8:40 PM

Tags: apple, attack, email, exploit, iphone, phishing, scam

An Apple account notification has been exploited in a new email phishing attack that comes with a fake iPhone purchase claim. The post New Apple Phishing Scam Uses Fake $899 iPhone Purchase Alert appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-apple-phishing-scam-fake-899-iphone-purchase-alert/
Over 1,300 SharePoint Servers Still Exposed to Actively Exploited Spoofing Flaw

Apr 22, 2026 7:39 PM

Tags: cve, data-breach, exploit, flaw

Over 1,300 SharePoint servers remain unpatched against CVE-2026-32201, a spoofing flaw previously exploited as a zero-day. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/over-1300-sharepoint-servers-still-exposed-to-actively-exploited-spoofing-flaw/
Microsoft outband updates fixed critical ASP.NET Core privilege escalation flaw

Apr 22, 2026 5:39 PM

Tags: access, cve, exploit, flaw, microsoft, update, vulnerability

Microsoft fixed critical ASP.NET Core vulnerability, tracked as CVE-2026-40372 (CVSS score of 9.1), that lets attackers escalate privileges. Microsoft released out-of-band updates to address a serious ASP.NET Core vulnerability tracked as CVE-2026-40372 (CVSS score of 9.1). Microsoft fixed the flaw in ASP.NET Core version 10.0.7. An attacker could exploit the flaw to gain SYSTEM-level privileges, access…
The AI era demands a different kind of CISO

Apr 22, 2026 12:39 PM

Tags: ai, awareness, ciso, exploit, vulnerability

When attackers can discover and exploit vulnerabilities in minutes, last quarter’s audit doesn’t mean much. CISOs need to shift from static measurement to real-time awareness — and fast. First seen on cyberscoop.com Jump to article: cyberscoop.com/ciso-strategy-ai-real-time-risk-op-ed/
The AI era demands a different kind of CISO

Apr 22, 2026 12:39 PM

Tags: ai, awareness, ciso, exploit, vulnerability

When attackers can discover and exploit vulnerabilities in minutes, last quarter’s audit doesn’t mean much. CISOs need to shift from static measurement to real-time awareness — and fast. First seen on cyberscoop.com Jump to article: cyberscoop.com/ciso-strategy-ai-real-time-risk-op-ed/