Ravie LakshmananApr 07, 2026Vulnerability / Threat Intelligence A China-based threat actor known for deploying Medusa ransomware has been linked to the weaponization of a combination of zero-day and N-day vulnerabilities to orchestrate “high-velocity” attacks and break into susceptible internet-facing systems. “The threat… Read More "China-Linked Storm-1175 Exploits Zero-Days to Rapidly Deploy Medusa Ransomware"
Google has released a security update to patch a newly discovered zero-day in Chrome and the company warned an exploit exists in the wild. The update, published on February 13, was accompanied by an advisory on CVE-2026-2441, a high severity… Read More "Google Warns of In the Wild Exploit as It Patches New Chrome Zero Day"
Ravie LakshmananApr 07, 2026Artificial Intelligence / Vulnerability Threat actors are exploiting a maximum-severity security flaw in Flowise, an open-source artificial intelligence (AI) platform, according to new findings from VulnCheck. The vulnerability in question is CVE-2025-59528 (CVSS score: 10.0), a code injection… Read More "Flowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation; 12,000+ Instances Exposed"
A new phishing campaign targeting major financial and technology firms has been uncovered by cybersecurity researchers. SOCRadar dubbed the campaign Operation DoppelBrand and said it focused on Fortune 500 companies, including Wells Fargo and USAA, between December 2025 and January 2026, with… Read More "Operation DoppelBrand Weaponizes Trusted Brands For Credential Theft"
High-end casino and hotel operator Wynn Resorts says more than 21,000 individuals are affected by the recently disclosed data breach. Wynn Resorts confirmed in late February that hackers had obtained employee data. The admission came after the notorious ShinyHunters cybercrime… Read More "Wynn Resorts Says 21,000 Employees Affected by ShinyHunters Hack"
A multi-stage malware loader known as OysterLoader has continued to evolve into early 2026, refining its command-and-control (C2) infrastructure and obfuscation methods. The C++-based threat, also referred to as Broomstick and CleanUp, is primarily linked to campaigns associated with the… Read More "OysterLoader Evolves With New C2 Infrastructure and Obfuscation"
There has been a sharp rise in the number of ransomware groups targeting industrial organizations as cybercriminals continue to exploit vulnerabilities in operational technology (OT) and industrial control systems (ICS), researchers at Dragos have warned. A total of 119 ransomware… Read More "Significant Rise in Ransomware Attacks Targeting Industrial Operations"
A majority (69%) of security leaders agree that identity management needs to evolve in order to handle mounting risks in AI infrastructure deployments, according to a new report from Teleport. The security vendor polled over 200 US infrastructure security leaders… Read More "Over-Privileged AI Drives 4.5 Times Higher Incident Rates"
Unsophisticated cyber threat actors have started delegating key steps of extortion campaigns to large language model (LLM)-powered AI assistants. In a report published on February 17, Unit 42, Palo Alto Networks’ research team, shared findings about a low-skilled actor who… Read More "Low-Skilled Cybercriminals Use AI to Perform “Vibe Extortion” Attacks"
A new developer beta of iOS and iPadOS introducing support for end-to-end encryption (E2EE) in Rich Communications Services (RCS) messages has been released by Apple. The update, available in iOS and iPadOS 26.4 Beta, allows encrypted RCS conversations between compatible… Read More "Apple Expands RCS Encryption and Memory Protections in iOS 26.4"
