Industrial Systems Hit by New Email-Worm Threat Wave
Email-borne worms are driving a fresh wave of incidents against industrial control systems (ICS), even as overall malware activity on these networks appears to be…
Month: April 2026
The Race to Quantum-Proof the Internet Has Already Begun
For years, quantum computing has hovered over the tech industry as a distant, almost abstract threat. Now, that narrative is changing. In a recent livestream…
Obsidian Plugin Abuse Delivers PHANTOMPULSE RAT in Targeted Finance, Crypto Attacks
Ravie LakshmananApr 16, 2026Application Security / Threat Intelligence A “novel” social engineering campaign has been observed abusing Obsidian, a cross-platform note-taking application, as an initial…
North Korean social engineering campaign targets macOS users
A North Korean social engineering campaign targeting macOS users tricked its victims into manually executing malicious files by impersonating a software update led to the…
Eventbrite’s new owner cuts staff after takeover
Eventbrite’s new owner, Italian tech company Bending Spoons, said t had cut a large portion of the American ticketing platform’s pre-acquisition workforce and implemented broad…
Another DraftKings Hacker Sentenced to Prison
Kamerin Stokes, a 23-year-old from Memphis, Tennessee, has been sentenced to prison for his role in a 2022 credential stuffing attack targeting the online betting…
Operation PowerOFF: 53 DDoS domains seized and 3 Million criminal accounts uncovered
Operation PowerOFF: 53 DDoS domains seized and 3 Million criminal accounts uncovered Pierluigi Paganini April 17, 2026 Operation PowerOFF shut down 53 DDoS-for-hire domains, arrested…
White House and Anthropic CEO discuss working together amid Mythos AI fears
The Trump administration and Anthropic’s CEO on Friday discussed working together for the first time since a dispute earlier this year between the Pentagon and…
Critical sandbox bypass fixed in popular Thymeleaf Java template engine
Endor Labs notes in their report that Thymeleaf has defense-in-depth layers to block dangerous expressions and in this case two of them failed. For example,…
US-sanctioned currency exchange says $15 million heist done by “unfriendly states”
Grinex, a US-sanctioned cryptocurrency exchange registered in Kyrgyzstan, said it’s halting operations after experiencing a $13 million heist carried out by “western special services” hackers.…
MSSQL to ScreenConnect | Huntress
Background Huntress SOC analysts continue to see alerts indicating malicious activity on endpoints running MSSQL Server or MSSQL Express, either as stand-alone installations, or as…
Grinex exchange blames “Western intelligence” for $13.7M crypto hack
Kyrgyzstan-based cryptocurrency exchange Grinex has suspended its operations after suffering a $13.7 million hack attributed to Western intelligence agencies. The funds were stolen from cryptocurrency…