Every month that security operations remain dependent on manual triage is a month in which AI-enabled adversaries continue to optimize their workflows. The acceleration in breakout times does not pause for budget cycles or extended vendor evaluations. The Cyber AI… Read More "The AI inflection point: What security leaders must do now"
Security researchers claim to have documented a major shift in the infostealer landscape after witnessing the first live attack targeting an OpenClaw configuration environment. Formerly known as Clawdbot and Moltbot, OpenClaw is a popular agentic AI assistant that runs locally… Read More "Infostealer Targets OpenClaw to Loot Victim’s Digital Life"
Adult nightclub giant RCI Hospitality Holdings on Monday disclosed a cybersecurity incident that exposed sensitive personal information. According to an SEC filing, the company’s RCI Internet Services subsidiary discovered on March 23 that an insecure direct object reference (IDOR) vulnerability… Read More "Nightclub Giant RCI Hospitality Reports Data Breach"
Ravie LakshmananApr 14, 2026Data Theft / Browser Security Cybersecurity researchers have discovered a new campaign in which a cluster of 108 Google Chrome extensions has been found to communicate with the same command-and-control (C2) infrastructure with the goal of collecting… Read More "108 Malicious Chrome Extensions Steal Google and Telegram Data, Affecting 20,000 Users"
Modern IT environments can generate billions of logs and events each day across endpoints, networks, cloud services, and identity systems. Machine learning models can correlate those signals in near real-time, and identify behavioral anomalies — such as unusual login patterns,… Read More "How AI is transforming threat detection"
ESET researchers have identified an Android malware implant that uses generative AI (GenAI) for persistence purposes. This malicious implant is an advanced version of VNCSpy, a piece of malware that appeared on VirusTotal in January 2026 and was represented by… Read More "Android Malware Hijacks Google Gemini to Stay Hidden"
Ravie LakshmananApr 14, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added half a dozen security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The list of vulnerabilities is as follows –… Read More "CISA Adds 6 Known Exploited Flaws in Fortinet, Microsoft, and Adobe Software"
Deutschland ist im Visier staatlicher Hacker. Mdisk – shutterstock.com Hybride Attacken auf kritische Infrastruktur in Deutschland und Bundeswehr-Truppen im Ausland nehmen weiter zu. Spätestens seit 2022 sei ein spürbarer Zuwachs zu verzeichnen, sagte der Bundeswehr-Inspekteur Cyber- und Informationsraum, Vizeadmiral Thomas… Read More "Cyber-Inspekteur: Hybride Attacken nehmen weiter zu"
The number of Distributed Denial-of-Service (DDoS) attacks has increased significantly and they’re getting more powerful and disruptive, analysis by cybersecurity researchers has warned. The Radware 2026 Global Threat Analysis Report has detailed what is described as a “dramatic escalation in… Read More "Dramatic Escalation Frequency and Power of in DDoS Attacks"
Ravie LakshmananApr 14, 2026Vulnerability / Network Security A critical security vulnerability impacting ShowDoc, a document management and collaboration service popular in China, has come under active exploitation in the wild. The vulnerability in question is CVE-2025-0520 (aka CNVD-2020-26585), which carries a CVSS score… Read More "ShowDoc RCE Flaw CVE-2025-0520 Actively Exploited on Unpatched Servers"
