BKA Identifies REvil Leaders Behind 130 German Ransomware Attacks
Ravie LakshmananApr 06, 2026Cybercrime / Financial Crime Germany’s Federal Criminal Police Office (aka BKA or the Bundeskriminalamt) has unmasked the real identities of two of…
Author: Cybernoz
NDIS Commission to have a new intelligent risk engine by August
The NDIS Quality and Safeguards Commission is expecting to have the “essential” capabilities of a new risk engine to support its work regulating the $50…
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 92
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Thirty-Six Malicious npm Strapi Packages Deploy…
AI Only Has to Beat 3/10
I think there’s a misconception about how AI will break and change things. The Mythos hype has convinced people that AI is about to be…
Insights from Our 2024 Cyber Threat Report
Ransomware is on a winning streak. And businesses, big and small, are on the verge of losing it all. Over the past year, cybercriminals have…
FBI Atlanta and Indonesian National Police Take Down W3LLSTORE Phishing Market
The FBI Atlanta Field Office and the Indonesian National Police have taken down a global phishing operation tied to more than $20 million in attempted…
Flowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation; 12,000+ Instances Exposed
Ravie LakshmananApr 07, 2026Artificial Intelligence / Vulnerability Threat actors are exploiting a maximum-severity security flaw in Flowise, an open-source artificial intelligence (AI) platform, according to…
Adobe fixes actively exploited Acrobat Reader flaw CVE-2026-34621
Adobe fixes actively exploited Acrobat Reader flaw CVE-2026-34621 Pierluigi Paganini April 12, 2026 Adobe addressed a critical Acrobat Reader vulnerability, tracked as CVE-2026-34621, which is…
It’s Time for Full Activation
I’ve been experiencing a feeling lately that’s massive and hard to pin down. But here goes. If you remember my piece on Constraints on Creativity,…
Smuggler’s Gambit | Huntress
tl;dr Huntress uncovered the infrastructure of a mass phishing campaign including potentially novel tradecraft that combines HTML smuggling, injected iframes, and session theft via transparent…
Critical Marimo pre-auth RCE flaw now under active exploitation
Hackers started exploiting a critical vulnerability in the Marimo open-source reactive Python notebook platform just 10 hours after its public disclosure. The flaw allows remote…
Hacker Used Claude Code, GPT-4.1 to Exfiltrate Hundreds of Millions of Mexican Records
A single hacker recently managed to compromise nine different Mexican government agencies by exploiting two popular AI platforms. This finding comes from the research firm Gambit…