Phishing LNK files and GitHub C2 power new DPRK cyber attacks
Phishing LNK files and GitHub C2 power new DPRK cyber attacks Pierluigi Paganini April 06, 2026 DPRK-linked hackers use GitHub...
Month: April 2026
BKA unmasks two REvil Ransomware operators behind 130+ German attacks
BKA unmasks two REvil Ransomware operators behind 130+ German attacks Pierluigi Paganini April 06, 2026 German police BKA identified two...
[un]prompted 2026 – Agents Exploiting “Auth-By-One” Errors
Author, Creator & Presenter: Brendan Dolan-Gavitt, AI Researcher, XBOW & Vincent Olesen, AI Researcher, XBOW Our thanks to prompted...
Protecting Your Data with Veeam
The days of using backup as a simple “set it and forget it” insurance policy are officially over. If...
Iran-Linked Password-Spraying Campaign Targets 300+ Israeli Microsoft 365 Organizations
An Iran-nexus threat actor is suspected to be behind a password-spraying campaign targeting Microsoft 365 environments in Israel and the U.A.E....
DPRK-Linked Hackers Use GitHub as C2 in Multi-Stage Attacks Targeting South Korea
Ravie LakshmananApr 06, 2026Malware / Threat Intelligence Threat actors likely associated with the Democratic People's Republic of Korea (DPRK) have been...
Multi-OS Cyberattacks: How SOCs Close a Critical Risk in 3 Steps
Your attack surface no longer lives on one operating system, and neither do the campaigns targeting it. In enterprise environments, attackers move across...
⚡ Weekly Recap: Axios Hack, Chrome 0-Day, Fortinet Exploits, Paragon Spyware and More
Ravie LakshmananApr 06, 2026Cybersecurity / Hacking This week had real hits. The key software got tampered with. Active bugs showed up in the...
New Fortinet Flaw Allows Unauthorized Access to Enterprise Systems
image: envato by GoldenDayz Fortinet disclosed a critical FortiClient EMS vulnerability that is already being exploited in the wild. The...
Apple Rolls Out Fix: New macOS Update Could Protect 100M Mac Users
Image: Joan Gamell/Unsplash Apple is stepping in to stop a mistake millions of users make every day: copying and pasting...
Randall Munroe’s XKCD ‘Little Red Dots’
via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink *** This is a Security...
Why I Cancelled Semrush After 7 Years (And Why GEO Is the Only B2B Growth Strategy That Matters Now)
I cancelled my Semrush subscription last month. After seven years of tracking keyword rankings, monitoring backlinks, and optimizing for...
CVE-2026-35616: Fortinet FortiClientEMS improper access control vulnerability exploited in the wild
Exploitation has been observed for CVE-2026-35616, a critical improper access control zero-day vulnerability affecting Fortinet FortiClientEMS devices. Key takeaways:...
Attackers Exploit RCE Flaw as 14,000 F5 BIG-IP APM Instances Remain Exposed
Attackers Exploit RCE Flaw as 14,000 F5 BIG-IP APM Instances Remain Exposed Pierluigi Paganini April 06, 2026 Over 14,000 F5...
The Google Workspace Blind Spot Every K-12 IT Team Misses
How DeForest School District Gained Visibility into Google Workspace and Transformed Their Security Workflow with Cloud Monitor When you’re...
