Government terminates Capita’s Royal Mail pension contract
The government has terminated its Royal Mail pension scheme contract with Capita after citing failures to hit milestones. The announcement comes as Capita faces pressure…
Month: April 2026
Bissa Scanner, An AI-Assisted Credential Harvesting Factory
An exposed server sitting open on the internet handed forensic investigators something rarely available; an unobstructed view inside a running criminal operation, complete with code,…
Microsoft to integrate Anthropic’s Mythos into its security development program
Microsoft plans to embed advanced artificial intelligence models, including Anthropic’s Claude Mythos Preview, into its secure coding framework, as the company steps up its cyber…
Most Serious Cyberattacks Against the UK Now From Russia, Iran and China, Cyber Chief Says
The most serious cyberattacks in the U.K. are now carried out by hostile nations including Russia, Iran and China, the head of the U.K.’s National…
DDoS wave continues as Mastodon hit after Bluesky incident
DDoS wave continues as Mastodon hit after Bluesky incident Pierluigi Paganini April 22, 2026 Mastodon suffered a major DDoS attack shortly after a similar incident…
Microsoft SharePoint vulnerability widely exposed across multiple countries
The disclosure comes just weeks after a prior SharePoint flaw was discovered. Source link
CISA director pick Sean Plankey withdraws his nomination
Sean Plankey, the long-sidelined nominee to lead the Cybersecurity and Infrastructure Security Agency, asked President Donald Trump on Wednesday to withdraw his nomination. “At this point…
Microsoft issues out-of-band patch for critical security flaw in update to ASP.NET Core
When embedded in applications, these long-lived tokens confer the sort of power attackers quickly jump on. “If an attacker used forged payloads to authenticate as…
ZeroFox data shows ransomware stabilizing at scale, with manufacturing absorbing nearly one in five attacks
New ZeroFox data from the first quarter of this year paints a picture of a threat landscape that has settled into a sustained high-volume rhythm…
NCSC flags widening gap between cyber threats and national resilience, urges action as AI fuels rise in disruptive attacks
The U.K.’s National Cyber Security Centre (NCSC) is warning that organizations delivering critical services must urgently prepare for a ‘severe cyber threat’ environment, as increasingly…
A technical walkthrough of multicloud full-stack security using AWS Security Hub Extended
Building on our recent announcement of AWS Security Hub Extended —our full-stack enterprise security offering — we want to show you how we’re simplifying security…
Exploitation of Windows Server Update Services Remote Code
Acknowledgments: Special thanks to Luke Wilkinson, Joshua Kiriakoff, and Jordan Sexton for their contributions to this investigation and writeup. TL;DR: Huntress has observed threat actors…