UNC6692 Impersonates IT Helpdesk via Microsoft Teams to Deploy SNOW Malware
A previously undocumented threat activity cluster known as UNC6692 has been observed leveraging social engineering tactics via Microsoft Teams to…
$290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms +25 New Stories
î „Ravie Lakshmananî ‚Apr 23, 2026Hacking News / Cybersecurity News You scroll past one incident and see another that feels familiar, like…
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign
î „Ravie Lakshmananî ‚Apr 23, 2026Supply Chain Attack / Open Source Bitwarden CLI has been compromised as part of the newly discovered…
Project Glasswing Proved AI Can Find the Bugs. Who’s Going to Fix Them?
Last week, Anthropic announced Project Glasswing, an AI model so effective at discovering software vulnerabilities that they took the extraordinary…
Beating Automated Exploitation at AI Speed
î „The Hacker Newsî ‚Apr 23, 2026Artificial Intelligence / Enterprise Security Imagine a world where hackers don’t sleep, don’t take breaks, and…
Vercel Finds More Compromised Accounts in Context.ai-Linked Breach
î „Ravie Lakshmananî ‚Apr 23, 2026Artificial Intelligence / SaaS Security Vercel on Wednesday revealed that it has identified an additional set of…
China-Linked GopherWhisper Infects 12 Mongolian Government Systems with Go Backdoors
î „Ravie Lakshmananî ‚Apr 23, 2026Threat Intelligence / Malware Mongolian governmental institutions have emerged as the target of a previously undocumented China-aligned…
Apple Patches iOS Flaw That Stored Deleted Signal Notifications in FBI Forensic Case
î „Ravie Lakshmananî ‚Apr 23, 2026Vulnerability / Encryption Apple has rolled out a software fix for iOS and iPadOS to address a…
Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply Chain
î „Ravie Lakshmananî ‚Apr 22, 2026Cloud Security / Software Security Cybersecurity researchers have warned of malicious images pushed to the official “checkmarx/kics”…
Self-Propagating Supply Chain Worm Hijacks npm Packages to Steal Developer Tokens
Cybersecurity researchers have flagged a fresh set of packages that have been compromised by bad actors to deliver a self-propagating…