Self-Propagating Supply Chain Worm Hijacks npm Packages to Steal Developer Tokens
Cybersecurity researchers have flagged a fresh set of packages that have been compromised by bad actors to deliver a self-propagating…
Harvester Deploys Linux GoGra Backdoor in South Asia Using Microsoft Graph API
î „Ravie Lakshmananî ‚Apr 22, 2026Cyber Espionage / Malware The threat actor known as Harvester has been attributed to a new Linux…
When Cross-App Permissions Stack into Risk
On January 31, 2026, researchers disclosed that Moltbook, a social network built for AI agents, had left its database wide…
Lotus Wiper Malware Targets Venezuelan Energy Systems in Destructive Attack
î „Ravie Lakshmananî ‚Apr 22, 2026Malware / Critical Infrastructure Cybersecurity researchers have discovered a previously undocumented data wiper that has been used…
Microsoft Patches Critical ASP.NET Core CVE-2026-40372 Privilege Escalation Bug
î „Ravie Lakshmananî ‚Apr 22, 2026Vulnerability / Cryptography Microsoft has released out-of-band updates to address a security vulnerability in ASP.NET Core that…
Cohere AI Terrarium Sandbox Flaw Enables Root Code Execution, Container Escape
î „Ravie Lakshmananî ‚Apr 22, 2026Vulnerability / Container Security A critical security vulnerability has been disclosed in a Python-based sandbox called Terrarium…
Mustang Panda’s New LOTUSLITE Variant Targets India Banks, South Korea Policy Circles
î „Ravie Lakshmananî ‚Apr 22, 2026Cyber Espionage / Malware Cybersecurity researchers have discovered a new variant of a known malware called LOTUSLITE…
SystemBC C2 Server Reveals 1,570+ Victims in The Gentlemen Ransomware Operation
Threat actors associated with The Gentlemen ransomware‑as‑a‑service (RaaS) operation have been observed attempting to deploy a known proxy malware called…
22 BRIDGE:BREAK Flaws Expose Thousands of Lantronix and Silex Serial-to-IP Converters
î „Ravie Lakshmananî ‚Apr 21, 2026Network Security / Vulnerability Cybersecurity researchers have identified 22 new vulnerabilities in popular models of serial-to-IP converters…
Ransomware Negotiator Pleads Guilty to Aiding BlackCat Attacks in 2023
î „Ravie Lakshmananî ‚Apr 21, 2026Insider Threat / Cybercrime A third individual who was employed as a ransomware negotiator has pleaded guilty…