Eduard Kovacs

The WorldLeaks extortion group claimed to have stolen 720 GB of data from the healthcare testing and laboratory services provider.

Angelo Martino, a former ransomware negotiator, was sentenced to 70 months for helping the BlackCat/Alphv group.

Both foes and allies have targeted the Balochistan Police force in Pakistan for at least two years, according to SentinelOne.

Researchers demonstrate adversarial hallucination squatting against popular AI assistants to achieve remote code execution.

Buffer overflow, DoS, command injection, SSRF, authentication bypass, and other types of vulnerabilities have been found in PAN-OS software.

The privilege escalation vulnerability tracked as CVE-2026-50656 has been patched with a Microsoft Malware Protection Engine update.

Wiz has disclosed the details of a new AI coding assistant attack method it has dubbed GhostApproval.

Fifteen of the newly patched flaws have been rated ‘critical’ and 67 have been rated ‘high severity’.

The Microsoft Defender vulnerability CVE-2026-33825 was exploited in the wild as a zero-day before patches were released.

Only a handful of the 100 organizations targeted in the PeopleSoft campaign have been confirmed.

CISA has published an advisory to inform organizations about three vulnerabilities found by a researcher in Daktronics controllers.

An optional ‘username key’ adds another layer by requiring a secondary credential before someone can message users.

The ShinyHunters extortion group claims to have stolen 3.1 TB of data from the organization.

The company says Sol matches competing systems like Mythos Preview while using only a third of the output tokens.

AWS has patched the vulnerability and published its own advisory to inform customers about the potential impact. 

The decentralized prediction market said hackers targeted some of its users through a compromise of a third-party vendor.

CISA has added the remote code execution flaw CVE-2026-12569 to its Known Exploited Vulnerabilities catalog.

Mandiant has helped the California water utility investigate the cyberattack launched by Iranian hacker group Handala.

The exploited flaw, CVE-2025-67038, is one of the vulnerabilities disclosed in April as part of the BRIDGE:BREAK research project.

CVE-2026-20245, the 7th Cisco SD-WAN vulnerability exploited in 2026, was used for months prior to its disclosure and patching.