Adult nightclub giant RCI Hospitality Holdings on Monday disclosed a cybersecurity incident that exposed sensitive personal information. According to an SEC filing, the company’s RCI Internet Services subsidiary discovered on March 23 that an insecure direct object reference (IDOR) vulnerability… Read More "Nightclub Giant RCI Hospitality Reports Data Breach"
Ravie LakshmananApr 14, 2026Data Theft / Browser Security Cybersecurity researchers have discovered a new campaign in which a cluster of 108 Google Chrome extensions has been found to communicate with the same command-and-control (C2) infrastructure with the goal of collecting… Read More "108 Malicious Chrome Extensions Steal Google and Telegram Data, Affecting 20,000 Users"
Modern IT environments can generate billions of logs and events each day across endpoints, networks, cloud services, and identity systems. Machine learning models can correlate those signals in near real-time, and identify behavioral anomalies — such as unusual login patterns,… Read More "How AI is transforming threat detection"
ESET researchers have identified an Android malware implant that uses generative AI (GenAI) for persistence purposes. This malicious implant is an advanced version of VNCSpy, a piece of malware that appeared on VirusTotal in January 2026 and was represented by… Read More "Android Malware Hijacks Google Gemini to Stay Hidden"
Ravie LakshmananApr 14, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added half a dozen security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The list of vulnerabilities is as follows –… Read More "CISA Adds 6 Known Exploited Flaws in Fortinet, Microsoft, and Adobe Software"
Deutschland ist im Visier staatlicher Hacker. Mdisk – shutterstock.com Hybride Attacken auf kritische Infrastruktur in Deutschland und Bundeswehr-Truppen im Ausland nehmen weiter zu. Spätestens seit 2022 sei ein spürbarer Zuwachs zu verzeichnen, sagte der Bundeswehr-Inspekteur Cyber- und Informationsraum, Vizeadmiral Thomas… Read More "Cyber-Inspekteur: Hybride Attacken nehmen weiter zu"
The number of Distributed Denial-of-Service (DDoS) attacks has increased significantly and they’re getting more powerful and disruptive, analysis by cybersecurity researchers has warned. The Radware 2026 Global Threat Analysis Report has detailed what is described as a “dramatic escalation in… Read More "Dramatic Escalation Frequency and Power of in DDoS Attacks"
Ravie LakshmananApr 14, 2026Vulnerability / Network Security A critical security vulnerability impacting ShowDoc, a document management and collaboration service popular in China, has come under active exploitation in the wild. The vulnerability in question is CVE-2025-0520 (aka CNVD-2020-26585), which carries a CVSS score… Read More "ShowDoc RCE Flaw CVE-2025-0520 Actively Exploited on Unpatched Servers"
Mississippi’s largest hospital group is still reeling from a ransomware attack late last week that has forced its IT systems offline. The University of Mississippi Medical Center (UMMC) is one of the state’s largest employers, with over 10,000 staff working… Read More "University of Mississippi Medical Center Still Offline After Ransomwar"
Nearly two-fifths of ATM jackpotting attacks recorded in the US since 2020 occurred last year, the FBI has warned. A new FBI Flash alert claimed that the 700+ attacks seen in 2025 resulted in losses of over $20m. Typically, threat actors deploy… Read More "Jackpotting Surge Costs Banks Over $20m, Warns FBI"
