Threat actors are using AI to supercharge tried-and-tested TTPs. When attacks move this fast, cyber-defenders need to rethink their own strategy. 07 Apr 2026 • , 4 min. read We stand at an interesting point in the never-ending arms race… Read More "As breakout time accelerates, prevention-first cybersecurity takes center stage"
Most malicious open source packages have moved beyond misspelling popular project names, instead disguising themselves as plausible plugins, configs and helpers that fit naturally into a developer’s workflow. That is the central finding of new analysis by Sonatype, which examined… Read More "Attackers Move Past Typosquatting to Realistic Package Impersonation"
In the Strait of Hormuz, Iran has developed an asymmetrical naval strategy that is crippling the passage of container ships. This “hemostat” uses guerrilla tactics, after Iran’s “traditional” fleet was almost entirely destroyed by US and Israeli attacks. No longer… Read More "Iran Is Using Tiny ‘Mosquito’ Boats to Shut Down the Strait of Hormuz"
Cruise line operator Carnival Corporation is notifying approximately 6 million individuals that their personal information was stolen in a recent data breach. Carnival said the incident was identified on April 14, after hackers gained access to an employee’s account via… Read More "Carnival Data Breach Exposed 6 Million People"
Ravie LakshmananMay 28, 2026Zero Day / Vulnerability Disclosure Microsoft has come out strongly in favor of Coordinated Vulnerability Disclosure (CVD), urging the research community to share their findings and give affected vendors an opportunity to better understand the impact and… Read More "Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal"
The 38-page framework also recommends one-day remediation for critical externally exposed vulnerabilities, three days for critical internal vulnerabilities affecting high-value systems, and five days for high-severity flaws based on risk prioritization. CERT-In said threat actors are increasingly using AI to… Read More "Indian CERT urges firms to contain exploited internet-facing flaws within 12 hours"
ESET Research has discovered a new China-aligned APT group that we’ve named GopherWhisper, which targets Mongolian governmental institutions 23 Apr 2026 • , 6 min. read ESET researchers have discovered a previously undocumented China-aligned APT group that we named GopherWhisper.… Read More "A burrow full of malware"
In a new bulletin, Microsoft has criticized security researchers for publicly reporting vulnerabilities in the company’s products before patches were available and without prior notice. These “uncoordinated disclosures put our customers at unnecessary risk,” the tech giant said. Six Microsoft… Read More "Microsoft Condemns “Uncoordinated” Zero Day Disclosures"
Cybercrime is a growing problem for higher education. Between 2020 and 2021, cyberattacks targeting the education sector increased by 75%. In line with other industries, the education sector is also experiencing a dramatic increase in ransomware attacks. According to the… Read More "The State of University Cybersecurity: 3 Major Problems in 2026"
A ransomware group is attempting to extort the electronics manufacturing giant Foxconn, claiming that it stole 8 terabytes of data from the company, including schematics and project details from customers including Dell, Google, Apple, and Nvidia. Foxconn did not immediately… Read More "Foxconn Ransomware Attack Shows Nothing Is Safe Forever"
