“A .lnk file is how Windows handles shortcuts: Whenever you click on that Outlook icon on your desktop, you’re actually clicking on a separate file that uses the Outlook image and directs the operating system to open up Microsoft Outlook,”… Read More "North Korean hackers abuse LNKs and GitHub repos in ongoing campaign"
Cybersecurity remains the fastest-growing IT occupation in the UK, having seen its ranks expand by 194% since 2021, according to a new Socura report. The managed detection and response (MDR) specialist used Office of National Statistics (ONS) data to compile… Read More "Number of Cybersecurity Pros Surges 194% in Four Years"
A threat actor has targeted the Strapi ecosystem in a fresh supply chain attack involving 36 malicious NPM packages, according to supply chain security firm SafeDep. An open source headless CMS built on Node.js, Strapi allows developers to create websites… Read More "Guardarian Users Targeted With Malicious Strapi NPM Packages"
Ravie LakshmananApr 06, 2026Ransomware / Endpoint Security Threat actors associated with Qilin and Warlock ransomware operations have been observed using the bring your own vulnerable driver (BYOVD) technique to silence security tools running on compromised hosts, according to findings from Cisco Talos and Trend Micro. Qilin… Read More "Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR Tools"
1) Modular secure elements (SEs) embedded or in SIM form Device-bound cryptography, tamper resistance, ultra-low-power states and tighter OEM control over firmware and BIOS all raise the baseline for security and reliability. This is especially valuable in rugged or clinical… Read More "Authentication is broken: Here’s how security leaders can actually fix it"
The number of US data “compromises” in 2025 reached a record high of 3332, a 5% increase on the previous year, according to new figures from the Identity Theft Resource Center (ITRC). The non-profit has been tracking these figures since 2005.… Read More "US Data Breaches Hit Record High but Victim Numbers Decline"
Fortinet over the weekend rushed emergency fixes for a FortiClient Enterprise Management Server (EMS) vulnerability that has been exploited as a zero-day. Described as an improper access control issue, the critical-severity flaw is tracked as CVE-2026-35616 (CVSS score of 9.1)… Read More "Fortinet Rushes Emergency Fixes for Exploited Zero-Day"
“This is the AI equivalent of name-squatting a package registry, except there’s no central MCP authority verifying server identity and no cryptographic link between an MCP server and the organization it claims to represent,” says Brad Micklea, CEO at Jozu,… Read More "6 ways attackers abuse AI services to hack your business"
Ransomware gangs claimed a deluge of victims during the final quarter of 2025, despite a decline in the number of active ransomware groups, analysis by cybersecurity researchers at ReliaQuest has revealed. As detailed in the company’s Ransomware and Cyber Extortion in… Read More "Ransomware Victim Numbers Rise, Despite Drop in Active Extortion Group"
Ravie LakshmananApr 06, 2026Cybercrime / Financial Crime Germany’s Federal Criminal Police Office (aka BKA or the Bundeskriminalamt) has unmasked the real identity of the main threat actors associated with the now-defunct REvil (aka Sodinokibi) ransomware-as-a-service (RaaS) operation. The threat actor,… Read More "BKA Identifies REvil Leaders Behind 130 German Ransomware Attacks"
