Eduard Kovacs

Itron, which serves utilities and cities around the world, discovered unauthorized access to its systems on April 13.

The vulnerability is tracked as CVE-2026-6770 and it has been patched with the release of Firefox 150 and Tor 15.0.10.

Locked Shields has grown significantly over the past 16 years, with only four nations participating in the first edition.

CrowdStrike has fixed a critical LogScale vulnerability, while Tenable addressed a high-severity Nessus flaw.

360 Digital Security Group claims to have uncovered 1,000 vulnerabilities using AI, including at the Tianfu Cup hacking contest.

Palo Alto Networks has developed Zealot, a multi-agent penetration testing PoC capable of reconnaissance, exploitation, and exfiltration. 

The DDoS attack caused a major outage, but Mastodon mitigated it within a few hours.

All the flaws could have also been found by an elite human researcher, according to Mozilla.

Researchers discovered a remote code execution vulnerability and cybercriminals are using its reputation to deliver malware.

Angelo Martino of Florida has pleaded guilty to collaborating with the BlackCat cybercrime group while working as a ransomware negotiator.

Things are improving, but a researcher has still identified over 1,500 Perforce P4 instances allowing attackers to read files on the server.

Data breaches were disclosed by Southern Illinois Dermatology, Saint Anthony Hospital, and North Texas Behavioral Health Authority.

Forescout researchers discovered 20 new vulnerabilities in Lantronix and Silex products and described theoretical attack scenarios.

A pro-Iran hacker group has taken credit for the attack on Bluesky, which appears to have lasted 24 hours. 

Vercel confirmed suffering a breach after a hacker claiming to be part of ShinyHunters offered to sell stolen data for $2 million.

Kamerin Stokes sold stolen credentials through an online marketplace even after pleading guilty to his role in the DraftKings attack. 

The remote code execution vulnerability tracked as CVE-2026-34197 came to light in early April.

The malware is configured to operate on systems associated with Israeli water treatment and desalination plants.

GPT‑5.4‑Cyber is a model fine-tuned for defenders, lowering boundaries for legitimate cybersecurity work.

Cookeville Regional Medical Center was targeted last year by the Rhysida ransomware group, which stole 500GB of data.