A new developer beta of iOS and iPadOS introducing support for end-to-end encryption (E2EE) in Rich Communications Services (RCS) messages has been released by Apple. The update, available in iOS and iPadOS 26.4 Beta, allows encrypted RCS conversations between compatible… Read More "Apple Expands RCS Encryption and Memory Protections in iOS 26.4"
A new beta version of Android 17 has been released, bringing a range of privacy, security and performance changes aimed at strengthening app protections and improving developer workflows. The update marks the first public beta of the mobile operating system… Read More "Android 17 Beta Introduces Secure-By-Default Architecture"
One of the world’s largest online forums for stolen data has been taken down following a global law enforcement operation coordinated by Europol. LeakBase was an English-language site operating on the surface web which facilitated an illegal trade in stolen… Read More "Europol Operation Seizes LeakBase Data Breach Site"
An Iran-nexus threat actor is suspected to be behind a password-spraying campaign targeting Microsoft 365 environments in Israel and the U.A.E. amid ongoing conflict in the Middle East. The activity, assessed to be ongoing, was carried out in three distinct attack waves that took… Read More "Iran-Linked Password-Spraying Campaign Targets 300+ Israeli Microsoft 365 Organizations"
Networking giant Cisco has released 25 joint security advisories covering security patches for 48 vulnerabilities in across its Secure Firewall Adaptive Security Appliance (ASA), Secure Firewall Management Center (FMC), and Secure Firewall Threat Defense (FTD) software products. The security advisories… Read More "Cisco Issues Patches for 48 Vulnerabilities"
US Border Patrol agents are raising money by selling coins that commemorate last year’s wave of immigration enforcement “operations” across the country, along with other merchandise. The funds are for nonprofit organizations that list Border Patrol buildings as their address… Read More "Border Patrol Agents Sold Challenge Coins With ‘Charlotte’s Web’ Characters in Riot Gear"
Zero trust replaces network location as a trust signal with continuous verification of identity, device compliance, and session behavior. For remote employees, this means endpoint security policies are enforced consistently regardless of where they connect from. A device missing a… Read More "Endpoint Security for Hybrid Work Environments"
Ravie LakshmananApr 06, 2026Malware / Threat Intelligence Threat actors likely associated with the Democratic People’s Republic of Korea (DPRK) have been observed using GitHub as command-and-control (C2) infrastructure in multi-stage attacks targeting organizations in South Korea. The attack chain, per Fortinet FortiGuard Labs, involves obfuscated… Read More "DPRK-Linked Hackers Use GitHub as C2 in Multi-Stage Attacks Targeting South Korea"
Security researchers have urged FreeScout customers to patch a maximum-severity remote code execution (RCE) vulnerability which needs no user interaction to achieve full system compromise. CVE‑2026‑28289 (Mail2Shell) is actually a bypass for an earlier vulnerability (CVE-2026-27636) in the open source… Read More "Zero-Click FreeScout Bug Enables Remote Code Execution"
Ravie LakshmananApr 06, 2026Cybersecurity / Hacking This week had real hits. The key software got tampered with. Active bugs showed up in the tools people use every day. Some attacks didn’t even need much effort because the path was already there. One weak spot now… Read More "Axios Hack, Chrome 0-Day, Fortinet Exploits, Paragon Spyware and More"
