Collecting Cyber-News from over 60 sources

Tag: threat

Hackers Exploit Cisco Firepower N-Day Flaws for Unauthorized Access

Apr 24, 2026 1:38 PM

Tags: access, cisco, cyber, exploit, flaw, hacker, threat, unauthorized, vulnerability, zero-day

A state-sponsored threat actor known as UAT-4356 is actively exploiting known vulnerabilities in Cisco Firepower devices to deploy a sophisticated custom backdoor. UAT-4356 exploited two n-day vulnerabilities, CVE-2025-20333 and CVE-2025-20362m affecting Cisco’s Firepower eXtensible Operating System (FXOS). These flaws allowed the threat actor to gain unauthorized access to targeted devices without requiring zero-day capabilities, instead weaponizing already-patched but unmitigated vulnerabilities…
Compromised everyday devices power Chinese cyber espionage operations

Apr 24, 2026 12:39 PM

Tags: botnet, china, cyber, espionage, infrastructure, network, router, threat

China-linked threat actors have shifted from individually procured infrastructure to large-scale covert networks, botnets built from compromised routers and other edge … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/04/24/ncsc-china-covert-networks-advisory/
UNC6692 Impersonates IT Help Desk via Microsoft Teams to Deploy SNOW Malware

Apr 24, 2026 12:39 PM

Tags: malware, microsoft, social-engineering, tactics, threat

A previously undocumented threat activity cluster known as UNC6692 has been observed leveraging social engineering tactics via Microsoft Teams to deploy a custom malware suite on compromised hosts.”As with many other intrusions in recent years, UNC6692 relied heavily on impersonating IT help desk employees, convincing their victim to accept a Microsoft Teams chat invitation from…
China-Linked Cyber Actors Turn to Massive Covert Botnets to Evade Detection

Apr 24, 2026 10:38 AM

Tags: advisory, botnet, china, cyber, cybersecurity, detection, international, malicious, network, tactics, threat

A newly issued cybersecurity advisory highlights an evolution in the tactics, techniques and procedures (TTPs) employed by China-Nexus threat actors. The report, released with support from the UK Cyber League and coordinated by the National Cyber Security Centre (NCSC-UK) alongside international partners, sheds light on how Chinese threat actors are relying on large-scale covert networks of compromised…
China-linked threat actors use consumer device botnets to evade detection, warn UK and partners

Apr 24, 2026 10:38 AM

Tags: botnet, cctv, china, control, cyber, detection, group, hacker, network, router, threat

UK National Cyber Security Centre (NCSC) warns China-linked hackers use hijacked devices as proxy networks to hide activity and evade detection. UK National Cyber Security Centre (NCSC) and global partners warn that China-linked threat actors now rely on large proxy networks built of hacked consumer devices. Groups control routers, cameras, video recorders, and NAS systems…
China-Linked Hackers Hide Behind Compromised Routers

Apr 24, 2026 9:39 AM

Tags: botnet, china, cyber, hacker, iot, network, office, router, threat

Hackers linked to China are increasingly abusing compromised routers and edge devices to build covert networks, enabling stealthy cyber operations that are harder to detect and block. Instead of relying on dedicated servers or purchased hosting, threat actors are now leveraging large-scale botnets made up of hacked small office/home office (SOHO) routers, IoT devices, and…
Hacking Safari with GPT 5.4

Apr 24, 2026 8:39 AM

Tags: hacking, threat

When Anthropic unveiled Mythos and Project Glasswing, the reaction was immediate and polarized. Some dismissed it as fear-driven marketing, while others treated it as a credible shift in the threat landscape. Like with many things, the truth is probably somewhere in the middle. I wanted to test that for myself, and since I recently got……
Hackers Impersonate IT Helpdesk Staff to Breach Firms via Microsoft Teams

Apr 24, 2026 7:38 AM

Tags: attack, breach, corporate, cyber, group, hacker, malware, microsoft, social-engineering, threat

A newly identified cyber threat group, UNC6692, is using a clever mix of social engineering and custom malware to infiltrate corporate networks. By impersonating IT helpdesk personnel on Microsoft Teams, these hackers trick employees into downloading a sophisticated malware suite that steals sensitive company data. The Social Engineering Trap The attack begins with an aggressive…
Cloudsmith Raises $72M for Software Supply-Chain Security

Apr 24, 2026 5:39 AM

Tags: ai, ciso, open-source, risk, risk-analysis, software, supply-chain, threat

Recent Package Compromises Pushed Software Component Trust to the Security Agenda. Cloudsmith raised a $72 million Series C led by TCV to expand policy enforcement, auditability and real-time package risk analysis as CISOs focus more closely on software supply-chain threats tied to open-source dependencies, AI-assisted development and compromised artifacts. First seen on govinfosecurity.com Jump to…
Tropic Trooper APT Takes Aim at Home Routers, Japanese Targets

Apr 24, 2026 5:39 AM

Tags: apt, attack, china, cyber, router, threat, tool

The Chinese state-sponsored cyber threat is known for moving fast and trying odd attack vectors; now it’s branching out in tools, victimology, and TTPs. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/tropic-trooper-apt-takes-aim-home-routers-japanese-targets
3 practical ways AI threat detection improves enterprise cyber resilience

Apr 23, 2026 11:38 PM

Tags: access, ai, attack, automation, backup, cloud, cyber, data, detection, dns, endpoint, exploit, framework, identity, login, malicious, network, radius, ransomware, resilience, risk, service, threat, tool, update, vpn, vulnerability, vulnerability-management

Legitimate admin activity and malicious behavior often look similar without contextHybrid environments generate fragmented telemetry that rule sets can’t correlateLean teams don’t have time to manually connect the dots across systemsPlatforms like Adlumin MDR apply behavioral models and automated triage to suppress low”‘value alerts and elevate incidents that actually matter. Fewer alerts, better context, and…
3 practical ways AI threat detection improves enterprise cyber resilience

Apr 23, 2026 11:38 PM

Tags: access, ai, attack, automation, backup, cloud, cyber, data, detection, dns, endpoint, exploit, framework, identity, login, malicious, network, radius, ransomware, resilience, risk, service, threat, tool, update, vpn, vulnerability, vulnerability-management

Legitimate admin activity and malicious behavior often look similar without contextHybrid environments generate fragmented telemetry that rule sets can’t correlateLean teams don’t have time to manually connect the dots across systemsPlatforms like Adlumin MDR apply behavioral models and automated triage to suppress low”‘value alerts and elevate incidents that actually matter. Fewer alerts, better context, and…
Five steps to become Mythos ready

Apr 23, 2026 9:39 PM

Tags: access, ai, attack, automation, breach, business, cloud, compliance, control, cvss, cyber, cybersecurity, data, defense, detection, exploit, flaw, framework, identity, incident response, infrastructure, LLM, mitre, network, office, open-source, openai, risk, software, threat, tool, training, update, vulnerability, zero-day

AI is uncovering vulnerabilities at a scale that will overwhelm legacy defenses. Here is how to build a security organization that is Mythos ready. Key takeaways While frontier AI models like Claude Mythos boost cyber defenses, they also empower attackers to discover and weaponize vulnerabilities at unprecedented machine speed. To avoid getting buried by an…
Five steps to become Mythos ready

Apr 23, 2026 9:39 PM

Tags: access, ai, attack, automation, breach, business, cloud, compliance, control, cvss, cyber, cybersecurity, data, defense, detection, exploit, flaw, framework, identity, incident response, infrastructure, LLM, mitre, network, office, open-source, openai, risk, software, threat, tool, training, update, vulnerability, zero-day

AI is uncovering vulnerabilities at a scale that will overwhelm legacy defenses. Here is how to build a security organization that is Mythos ready. Key takeaways While frontier AI models like Claude Mythos boost cyber defenses, they also empower attackers to discover and weaponize vulnerabilities at unprecedented machine speed. To avoid getting buried by an…
UNC6692 Impersonates IT Helpdesk via Microsoft Teams to Deploy SNOW Malware

Apr 23, 2026 9:39 PM

Tags: malware, microsoft, social-engineering, tactics, threat

A previously undocumented threat activity cluster known as UNC6692 has been observed leveraging social engineering tactics via Microsoft Teams to deploy a custom malware suite on compromised hosts.”As with many other intrusions in recent years, UNC6692 relied heavily on impersonating IT helpdesk employees, convincing their victim to accept a Microsoft Teams chat invitation from an…
Self-Propagating npm Malware Turns Trusted Packages Into Attack Paths

Apr 23, 2026 8:39 PM

Tags: access, api, attack, authentication, automation, breach, control, credentials, crypto, data, data-breach, endpoint, exploit, intelligence, malicious, malware, open-source, pypi, risk, service, software, supply-chain, theft, threat, unauthorized, worm

<div cla TL;DR An open source malware campaign dubbed CanisterSprawl has been observed in npm, stealing sensitive data from developer machines including tokens, API keys, and more. From there, the malware publishes additional compromised packages under hijacked credentials, abusing developer trust in open source ecosystems to spread. Impacted organizations should remove the malware immediately, examine…
Self-Propagating npm Malware Turns Trusted Packages Into Attack Paths

Apr 23, 2026 8:39 PM

Tags: access, api, attack, authentication, automation, breach, control, credentials, crypto, data, data-breach, endpoint, exploit, intelligence, malicious, malware, open-source, pypi, risk, service, software, supply-chain, theft, threat, unauthorized, worm

<div cla TL;DR An open source malware campaign dubbed CanisterSprawl has been observed in npm, stealing sensitive data from developer machines including tokens, API keys, and more. From there, the malware publishes additional compromised packages under hijacked credentials, abusing developer trust in open source ecosystems to spread. Impacted organizations should remove the malware immediately, examine…
Self-Propagating npm Malware Turns Trusted Packages Into Attack Paths

Apr 23, 2026 8:39 PM

Tags: access, api, attack, authentication, automation, breach, control, credentials, crypto, data, data-breach, endpoint, exploit, intelligence, malicious, malware, open-source, pypi, risk, service, software, supply-chain, theft, threat, unauthorized, worm

<div cla TL;DR An open source malware campaign dubbed CanisterSprawl has been observed in npm, stealing sensitive data from developer machines including tokens, API keys, and more. From there, the malware publishes additional compromised packages under hijacked credentials, abusing developer trust in open source ecosystems to spread. Impacted organizations should remove the malware immediately, examine…
UK Cyber Spooks: ‘Is Your Computer Monitor Spying On You?’

Apr 23, 2026 8:39 PM

Tags: computer, computing, cyber, intelligence, technology, threat

NCSC Designs ‘SilentGlass’ Gadget to Protect Overlooked Computer Peripheral. A new device called SilentGlass is designed to safeguard users against an often overlooked threat in modern computing environments: backdoored or subverted HDMI and DisplayPort monitors. The technology was developed by British intelligence to safeguard sensitive environments. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/uk-cyber-spooks-is-your-computer-monitor-spying-on-you-a-31489
The Guardian view on Anthropic’s Claude Mythos: when AI finds every flaw, who controls the internet? | Editorial

Apr 23, 2026 8:39 PM

Tags: access, ai, attack, business, computer, control, crime, cyber, cybersecurity, email, exploit, finance, flaw, hacker, Internet, risk, threat, vulnerability

Tech can scale cyber-attacks and defences alike, raising questions about private power, public risk and the future of a shared internetAnthropic announced its latest AI model, <a href=”https://www.theguardian.com/technology/2026/apr/08/anthropic-ai-cybersecurity-software”>Claude Mythos, this month but said it would not be released publicly, because it turns computers into crime scenes. The company claimed that it could find previously unknown…
Iran-nexus threat groups refine attacks against critical infrastructure

Apr 23, 2026 7:39 PM

Tags: attack, group, infrastructure, iran, threat

State-sponsored and hacktivist groups have shown greater determination to damage or disable energy, water and other key sectors. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/iran-nexus-threat-groups-refine-attacks-against-critical-infrastructure/818299/
What We Mean by Procedures (And Why Precision Matters)

Apr 23, 2026 5:39 PM

Tags: attack, detection, intelligence, strategy, threat

<div cla Why Terminology Confusion Still Undermines Modern Defense Cybersecurity discussions are filled with familiar language. Security teams talk about the latest threats and threat landscape, attack techniques and behavior, adversary tradecraft, and detection coverage. These terms appear constantly in threat intelligence reports, product documentation, and security strategy conversations. First seen on securityboulevard.com Jump to…
What We Mean by Procedures (And Why Precision Matters)

Apr 23, 2026 5:39 PM

Tags: attack, detection, intelligence, strategy, threat

<div cla Why Terminology Confusion Still Undermines Modern Defense Cybersecurity discussions are filled with familiar language. Security teams talk about the latest threats and threat landscape, attack techniques and behavior, adversary tradecraft, and detection coverage. These terms appear constantly in threat intelligence reports, product documentation, and security strategy conversations. First seen on securityboulevard.com Jump to…
Chinese APT Abuses Multiple Cloud Tools to Spy on Mongolia

Apr 23, 2026 5:39 PM

Tags: apt, china, cloud, control, microsoft, spy, threat, tool

The threat actor gave itself plenty of options to support command and control, tapping Microsoft Outlook, Slack, Discord, and file.io for online espionage. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/chinese-apt-abuses-cloud-tools-spy-mongolia
District Administration – How Cloud Monitoring Protects Districts From New Cyber Threats

Apr 23, 2026 4:39 PM

Tags: cloud, cyber, cybersecurity, monitoring, risk, threat

This article was originally published in District Administration on 04/20/26 by Charlie Sander. As cyber threats evolve, districts need real-time visibility into cloud activity to detect and stop risks early With rising cybersecurity concerns, schools are relying on real-time cloud sync to monitor administrative movements and student activity inside school accounts. However, real-time cloud sync…
Threat on the Horizon AI and Cybersecurity

Apr 23, 2026 4:39 PM

Tags: ai, attack, ceo, cybersecurity, threat

AI is changing cybersecurity on both sides of the equation. It is accelerating how attacks are executed while also strengthening how organizations detect and respond. In this month’s blog, SilverSky’s CEO shares how the organization is approaching AI-driven threats and what regulated organizations should be doing now to stay ahead. First seen on securityboulevard.com Jump…
Using AI to manage insider risk amid Middle East conflict

Apr 23, 2026 4:39 PM

Tags: ai, automation, cyber, intelligence, middle-east, monitoring, resilience, risk, threat

As geopolitical tensions reshape the cyber threat landscape across the region, organisations are turning to artificial intelligence-driven behaviour analytics, investigative automation and monitoring of AI agents to detect insider risk faster and strengthen operational resilience First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366642038/Using-AI-to-manage-insider-risk-amid-Middle-East-conflict
Experte für Threat-Management Filigran startet in Deutschland

Apr 23, 2026 2:39 PM

Tags: germany, intelligence, open-source, threat

Filigran, das europäische Unternehmen für Threat-Management, bringt seine Open-Source-basierten Lösungen für Bedrohungsinformationen, -management und die Überprüfung von Sicherheitslücken auf den DACH-Markt. Mit dem neu gegründeten deutschen Team erhalten Unternehmen und Behörden in der Region erstmals lokale Ansprechpartner für eine Technologie, die weltweit bereits von mehr als 6.000 Organisationen eingesetzt wird. Anders als klassische Threat-Intelligence-Anbieter, die…
New GopherWhisper APT group abuses Outlook, Slack, Discord for comms

Apr 23, 2026 2:39 PM

Tags: apt, attack, government, group, microsoft, service, threat

A previously undocumented state-backed threat actor named GopherWhisper is using a Go-based custom toolkit and legitimate services like Microsoft 365 Outlook, Slack, and Discord in attacks against government entities. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-gopherwhisper-apt-group-abuses-outlook-slack-discord-for-comms/
New GopherWhisper APT group abuses Outlook, Slack, Discord for comms

Apr 23, 2026 2:39 PM

Tags: apt, attack, government, group, microsoft, service, threat

A previously undocumented state-backed threat actor named GopherWhisper is using a Go-based custom toolkit and legitimate services like Microsoft 365 Outlook, Slack, and Discord in attacks against government entities. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-gopherwhisper-apt-group-abuses-outlook-slack-discord-for-comms/