Critical sandbox bypass fixed in popular Thymeleaf Java template engine
Endor Labs notes in their report that Thymeleaf has defense-in-depth layers to block dangerous expressions and in this case two of them failed. For example,…
Latest Cybersecurity News — Page 371
View all →
US-sanctioned currency exchange says $15 million heist done by “unfriendly states”
Grinex, a US-sanctioned cryptocurrency exchange registered in Kyrgyzstan, said it’s halting operations after experiencing a $13 million heist carried out by “western special services” hackers.…
MSSQL to ScreenConnect | Huntress
Background Huntress SOC analysts continue to see alerts indicating malicious activity on endpoints running MSSQL Server or MSSQL Express, either as stand-alone installations, or as…
Grinex exchange blames “Western intelligence” for $13.7M crypto hack
Kyrgyzstan-based cryptocurrency exchange Grinex has suspended its operations after suffering a $13.7 million hack attributed to Western intelligence agencies. The funds were stolen from cryptocurrency…
Email-Borne Worm Surge Drives New Threat Wave Across Industrial Control Systems
A global wave of email-borne worms hit industrial control systems (ICS) in the fourth quarter of 2025, marking one of the most concerning threat shifts…
Operation PowerOFF Knocks Out 75,000 DDoS Attackers and Over 50 Service Domains
A major international law enforcement campaign has hit the DDoS-for-hire ecosystem, warning more than 75,000 suspected users and disrupting the infrastructure that helped power online…
Founder Liquidity Without Compromising on Growth
As a founder, you put all that you have behind your idea. The money is still trapped somewhere within your venture. Achieving genuine founder liquidity…
Operation PowerOFF Seizes 53 DDoS Domains, Exposes 3 Million Criminal Accounts
Ravie LakshmananApr 17, 2026DDoS / Cybercrime An international law enforcement operation has taken down 53 domains and arrested four people in connection with commercial distributed…
Surging CVE disclosures force NIST to shake up workflows
The US National Institute for Standards and Technology (NIST) is in the process of shaking up the way in which it handles common vulnerabilities and…
Russian GRU Cyber Campaign Targets Western Logistics Firms
A new joint cybersecurity advisory has revealed an ongoing Russian GRU cyber campaign targeting Western logistics entities and technology companies, particularly those involved in coordinating…
iTnews Cloud Covered Breakfast Summit heads to Sydney
Following the success of the iTnews Cloud Covered Breakfast Summit in Perth, the series is now heading to Sydney, where discussion will turn to the next phase…
White House Chief of Staff to Meet With Anthropic CEO Over Its New AI Technology
White House chief of staff Susie Wiles plans to sound out Anthropic CEO Dario Amodei about the artificial intelligence company’s new Mythos model, which has…