An Iran-nexus cyber threat actor has been targeting government officials in Iraq by impersonating Iraq’s Ministry of Foreign Affairs, with the use of AI tools. Government–related infrastructure in Iraq was compromised and used to host malicious payloads distributed as part… Read More "Iranian Cyber Threat Actor Targets Iraqi Government Officials"
A lack of standardization in the way governments and tech firms handle the digital accounts of the deceased could invite fraud and exploitation, the OpenID Foundation has warned. The standards body released a report yesterday calling for a new framework… Read More "Calls for Global Digital Estate Standard as Fraud Risk Grows"
A newly identified malware campaign leveraging a Ukrainian email service to build credibility has been uncovered by cybersecurity researchers. The operation begins with an email sent from an address hosted on ukr[.]net, a popular Ukrainian provider previously abused by the… Read More "Multi-Stage “BadPaw” Malware Campaign Targets Ukraine"
A surge in attempts to compromise internet-connected surveillance cameras across the Middle East has been identified during the ongoing regional conflict, with activity attributed to infrastructure linked to Iranian threat actors. The targeting, which began intensifying on February 28, has… Read More "Surge in Attacks on Surveillance Cameras Linked to Iranian Hackers"
Investigators claimed today to have taken out another key player in the global cybercrime supply chain after seizing infrastructure linked to phishing-as-a-service (PhaaS) operation Tycoon 2FA. The effort was led by Microsoft and Europol and supported by a range of… Read More "Global Takedown Neutralizes Tycoon2FA Phishing Service"
A coalition of seven governments has launched a set of voluntary cybersecurity and cyber resilience principles for 6G, the next generation of mobile networks. The Global Coalition on Telecoms (GCOT) was established in October 2023 to set out a shared… Read More "Coalition of Western Countries Launches 6G Cybersecurity Guidelines"
The head of the UK’s National Crime Agency (NCA) has warned that the country’s teens are being “radicalized” into becoming cybercriminals by online platforms. The NCA was set up over a decade ago to tackle serious and organized crime. In a… Read More "NCA Boss Warns That Teens Are Being “Radicalized” Online"
When a wave of unusual activity swept through Syrian government accounts on X in March, it first looked like pure chaos—trolling, parody names, and even explicit content. But beneath the noise lay something far more telling: a state still struggling… Read More "The Hack That Exposed Syria’s Sweeping Security Failures"
Threat actors have demonstrated just how quickly they operate today after exploiting a critical open source vulnerability within 20 hours, working only from the advisory description. The bug, CVE-2026-33017, is an unauthenticated remote code execution (RCE) vulnerability in Langflow –… Read More "Hackers Exploit Critical Langflow Bug in Just 20 Hours"
Ravie LakshmananApr 05, 2026Vulnerability / API Security Fortinet has released out-of-band patches for a critical security flaw impacting FortiClient EMS that it said has been exploited in the wild. The vulnerability, tracked as CVE-2026-35616 (CVSS score: 9.1), has been described as a pre-authentication… Read More "Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS"
