Android Package (APK) malformation has emerged as a standard Android malware evasion tactic, with the technique identified in more than 3000 malicious samples across families including Teabot, TrickMo, Godfather and SpyNote. According to new research from Cleafy’s Threat Intelligence and… Read More "APK Malformation Found in Thousands of Android Malware Samples"
Two US nationals have been imprisoned for their role in helping to facilitate laptop farms for North Korean remote IT worker scams on behalf of Pyongyang. On April 15, the US Justice Department, announced that Kejia Wang, 42, and Zhenxing… Read More "US Nationals Jailed for Operating Fake IT Worker Scams for North Korea"
Consultants said it was a potentially serious issue given the unexpected exposure and the time the destined-to-fail patch takes to fail to install. This is the kind of failure that keeps IT leaders up at night, said cybersecurity consultant Brian… Read More "Microsoft May security patch fails for some due to boot partition size glitch"
A new high-security zero-day vulnerability that has lurked in the Linux kernel since 2017 has just been found with the help of AI. This nine-year-old flaw, dubbed ‘Copy Fail’, was discovered by Taeyang Lee, a vulnerability researcher at offensive security… Read More "Zero-Day Flaw in Linux Kernel Found by AI-Equipped Security Researcher"
Ravie LakshmananMay 18, 2026Supply Chain Attack / Botnet Cybersecurity researchers have discovered four new npm packages containing information-stealing malware, one of which is a clone of the Shai-Hulud worm open-sourced by TeamPCP. The list of identified packages is below –… Read More "Four Malicious npm Packages Deliver Infostealers and Phantom Bot DDoS Malware"
Two American cybersecurity workers have been sentenced to jail for helping the BlackCat ransomware gang conduct attacks against multiple organizations in the US. Ryan Goldberg, 40, of Georgia, and Kevin Martin, 36, of Texas were each sentenced to four years… Read More "Two Cybersecurity Workers Jailed for BlackCat Ransomware Attacks"
Key Takeaways Network Intrusion Detection Systems (NIDS) are essential for modern cybersecurity, providing real-time visibility into network traffic and helping detect threats before they escalate into major breaches. NIDS works through a combination of techniques such as traffic monitoring, packet… Read More "Understanding Network Intrusion Detection and Why Your Business Needs It?"
INTERPOL has coordinated a first-of-its-kind cybercrime crackdown across the Middle East and North Africa (MENA) that led to 201 arrests and the identification of an additional 382 suspects. The initiative involved the efforts of 13 countries from the region between… Read More "INTERPOL Operation Ramz Disrupts MENA Cybercrime Networks with 201 Arrests"
Anthropic has launched Claude Security in public beta to its Claude Enterprise customers. Previously known as Claude Code Security, the cybersecurity tool is built on Anthropic’s latest generally available AI model, Claude Opus 4.7, to scan codebases to find and… Read More "Anthropic Rolls Out Claude Security for AI Vulnerability Scanning"
The first in-the-wild attacks exploiting a critical-severity NGINX vulnerability patched last week have occurred over the weekend, VulnCheck warns. Tracked as CVE-2026-42945 (CVSS score of 9.2) and dubbed Nginx Rift, the flaw is described as a heap buffer overflow in… Read More "Exploitation of Critical NGINX Vulnerability Begins"
