Harvester Deploys Linux GoGra Backdoor in South Asia Using Microsoft Graph API
Harvester deploys Linux GoGra via Microsoft Graph API in South Asia, targeting India and Afghanistan since 2021, enabling covert espionage
Spain dismantles major $4.7M manga piracy platform, arrests four
The Spanish police have dismantled the largest Spanish-language manga piracy platform, operating since 2014, with millions of monthly users from around the globe.
News alert: BreachLock’s integrated attack validation platform debuts in Gartner AEV category - The Last Watchdog
NEW YORK, Apr. 21, 2026, CyberNewswire—BreachLock, a global leader in offensive security, today announced it has been named a representative vendor in the 2026 Gartner Market Guide for Adversarial Exposure Validation. This recognition marks the first time BreachLock has been identified in the Adversarial Exposure Validation (AEV) category since launching its agentic AI-powered Adversarial Exposure Validation platform in 2025. Not only has the company gained recognition in the AEV market quickly, but BreachLock has also emerged as the only vendor offering adversarial exposure validation, Penetration Testing
Phishing — sometimes with AI’s help — topped initial-access methods in Q1, Cisco says
Hackers can now spin up fake login pages without writing a single line of code.
China’s cyber capabilities now equal to the US, warns Dutch intelligence
Critical BRIDGE:BREAK flaws impact Lantronix and Silex Technology converters
22 BRIDGE:BREAK flaws hit Lantronix and Silex Technology converters, exposing approximately 20,000 devices to hijacking and data tampering.
Microsoft out-of-band updates fixed critical ASP.NET Core privilege escalation flaw
Microsoft fixed critical ASP.NET Core vulnerability, tracked as CVE-2026-40372 (CVSS score of 9.1), that lets attackers escalate privileges.
Bissa Scanner Exposed: AI-Assisted Mass Exploitation and Credential Harvesting - The DFIR Report
We recently discovered an exposed server that was used for multi-victim exploitation, staging, review, and validation. Claude Code and OpenClaw were used as an operator-side harness supporting exploitation activity and workflow orchestration. We identified a large-scale React2Shell (CVE-2025-55182) operation that scanned millions of targets and confirmed 900+ successful exploits. Logs showed an automated pipeline for exploitation, hit scoring, alerting, and secret harvesting.
Inside Caller-as-a-Service Fraud: The Scam Economy Has a Hiring Process
Fraud operations now operate like call centers, complete with hiring, training, and performance tracking. Flare reveals how cybercriminals manage "Caller-as-a-Service" operations like a professional sales team.
Cyberattaque en Iran : pourquoi les routeurs américains tombent en panne sans internet - Numerama
En pleine crise armée, des routeurs et pare-feux made in USA ont subitement lâché sur le sol iranien — alors même qu’Internet y était coupé. Pour Téhéran, c’est la preuve irréfutable que des portes dérobées sont préinstallées dans ces équipements américains. Mais comment ? Nous sommes le 28 février 2026, date du
Throttlestop Kernel Driver - Kernel Out-of-Bounds Write Privilege Escalation
Throttlestop Kernel Driver - Kernel Out-of-Bounds Write Privilege Escalation. CVE-2025-7771 . local exploit for Windows platform
WordPress Plugin 5.2.0 - Broken Access Control
WordPress Plugin 5.2.0 - Broken Access Control. CVE-2025-67586 . webapps exploit for Multiple platform
AVAST Antivirus 25.11 - Unquoted Service Path
AVAST Antivirus 25.11 - Unquoted Service Path.. local exploit for Windows platform
Choosing the Right AI Standard: 7-Point Guide | CSA
A practical guide to selecting AI standards, outlining compliance, risk, and governance considerations for responsible AI.
New npm supply-chain attack self-spreads to steal auth tokens
A new supply chain attack targeting the Node Package Manager (npm) ecosystem is stealing developer credentials and attempting to spread through packages published from compromised accounts.
YouTube lance un outil anti-deepfake pour protéger les acteurs d'Hollywood - Numerama
Imaginez une technologie capable de scanner des milliards d'heures de vidéo pour y traquer votre visage ou votre voix utilisés sans votre accord. C’est le pari monumental de YouTube, qui vient d'ouvrir son outil de détection d'IA à l'industrie d'Hollywood. Un bouclier numérique qui pourrait bien changer la donne pour
Saudi Arabia’s Cybersecurity Startups Guard the Region’s Digital Shift
This week in cybersecurity from the editors at Cybercrime Magazine
Malicious trading website drops malware that hands your browser to attackers | Malwarebytes
A fake TradingView AI agent site leads to malware that can take over your browser, steal your accounts and financial data, and open the door to further attacks.
Researcher claims Claude Desktop installs “spyware” on macOS | Malwarebytes
A security researcher claims Claude Desktop installed spyware on his Mac. We examine the findings.
Microsoft Teams to get efficiency mode on PCs with limited resources
Microsoft is preparing to roll out a new Efficiency Mode for Microsoft Teams for systems with limited CPU and memory resources to improve app responsiveness.
IR Trends Q1 2026: Phishing reemerges as top initial access vector, as attacks targeting public administration persist
Phishing reemerged as the most observed means of gaining initial access, accounting for over a third of the engagements where initial access could be determined. Phishing has not been the top vertical for initial access since Q2 2025.
ICE Uses Graphite Spyware - Schneier on Security
ICE has admitted that it uses spyware from the Israeli company Graphite.
Toxic Combinations: When Cross-App Permissions Stack into Risk
Toxic combinations form when AI agents, integrations, or OAuth grants
bridge SaaS apps into trust relationships no single admin authorized.
Lotus Wiper Malware Targets Venezuelan Energy Systems in Destructive Attack
Lotus Wiper hit Venezuela’s energy sector in late 2025, exploiting pre-Windows 10 1803 systems, wiping drives and crippling operations.
The AI era demands a different kind of CISO | CyberScoop
Static audits can’t stop AI-speed attacks. Rinki Sethi argues why CISOs must shift from periodic compliance to real-time risk awareness to survive the modern threat landscape.
Microsoft Patches Critical ASP.NET Core CVE-2026-40372 Privilege Escalation Bug
CVE-2026-40372 scores 9.1 due to cryptographic flaw in ASP.NET Core 10.0.0–10.0.6, risking SYSTEM access.
New GoGra malware for Linux uses Microsoft Graph API for comms
A Linux variant of the GoGra backdoor uses legitimate Microsoft infrastructure, relying on an Outlook inbox for stealthy payload delivery.
Microsoft traces Universal Print issues to Graph API code change
Microsoft says that an ongoing Universal Print sharing issue that prevents users from creating some printer shares is due to a Microsoft Graph API code change.
Comment Claude Desktop installe une porte dérobée dans vos navigateurs sans vous le dire - Numerama
Dans un billet publié le 18 avril 2026, un consultant en cybersécurité affirme que Claude Desktop, l’application de bureau d’Anthropic, préautorise discrètement l’accès aux navigateurs dès l’installation, y compris à ceux qui ne sont pas encore présents sur la machine. C’est en déboguant un projet personnel
Cohere AI Terrarium Sandbox Flaw Enables Root Code Execution, Container Escape
CVE-2026-5752 CVSS 9.3 flaw in Terrarium enables root code execution via Pyodide prototype traversal, risking container escape.