Latest Cybersecurity News

Focusing on the People in Cybersecurity at RSAC 2026 Conference

Dark Reading

Dark ReadingApr 7, 20261m5

Focusing on the People in Cybersecurity at RSAC 2026 Conference

AI dominated the RSAC 2026 Conference and showed it's still humans in cybersecurity who matter most.

Over 1,000 Exposed ComfyUI Instances Targeted in Cryptomining Botnet Campaign

The Hacker NewsApr 7, 20266m5

Over 1,000 Exposed ComfyUI Instances Targeted in Cryptomining Botnet Campaign

Over 1,000 exposed ComfyUI instances exploited via unauthenticated code execution, enabling Monero mining and botnet expansion.

[Webinar] How to Close Identity Gaps in 2026 Before AI Exploits Enterprise Risk

The Hacker NewsApr 7, 20262m5

[Webinar] How to Close Identity Gaps in 2026 Before AI Exploits Enterprise Risk

Hundreds of disconnected apps persist in 2026 enterprises, Ponemon finds, enabling AI agents to amplify credential risks and expand attack surfaces.

GPUBreach: Root Shell Access Achieved via GPU Rowhammer Attack

SecurityWeekApr 7, 20263m5

GPUBreach: Root Shell Access Achieved via GPU Rowhammer Attack

Researchers have demonstrated that GPU Rowhammer attacks can be used to escalate privileges.

The Hidden Cost of Recurring Credential Incidents

The Hacker NewsApr 7, 20265m5

The Hidden Cost of Recurring Credential Incidents

Recurring credential incidents drive operational costs as password resets make up 30% of helpdesk tickets, impacting productivity and security.

Medusa Ransomware Fast to Exploit Vulnerabilities, Breached Systems

SecurityWeekApr 7, 20264m5

Medusa Ransomware Fast to Exploit Vulnerabilities, Breached Systems

The group is using zero-days, quickly weaponizes fresh bugs, and exfiltrates and encrypts data within days of initial access.

German Police Unmask REvil Ransomware Leader

SecurityWeekApr 7, 20262m5

German Police Unmask REvil Ransomware Leader

Shchukin is accused of extorting more than $2 million as the head of the GandCrab and REvil ransomware operations.

Life imprisonment for Cambodian scam compound operators – but will it make a difference?

Graham Cluley

Graham CluleyApr 7, 20263m5

Life imprisonment for Cambodian scam compound operators – but will it make a difference?

Cambodia has taken a dramatic step in its fight against scam compounds that have imprisoned innocent people, and forced them to work as virtual slaves defrauding victims via the internet around the world with romance scams and dodgy investment schemes.

New GPUBreach Attack Enables Full CPU Privilege Escalation via GDDR6 Bit-Flips

The Hacker NewsApr 7, 20264m5

New GPUBreach Attack Enables Full CPU Privilege Escalation via GDDR6 Bit-Flips

GPUBreach achieves full CPU privilege escalation via GDDR6 RowHammer in July 2025 research, threatening cloud AI systems.

White House Seeks to Slash CISA Funding by $707 Million

SecurityWeekApr 7, 20262m5

White House Seeks to Slash CISA Funding by $707 Million

The Trump administration says the FY2027 budget refocuses CISA on its core mission: protecting federal agencies and critical infrastructure.

China-Linked Storm-1175 Exploits Zero-Days to Rapidly Deploy Medusa Ransomware

The Hacker NewsApr 7, 20263m5

China-Linked Storm-1175 Exploits Zero-Days to Rapidly Deploy Medusa Ransomware

Storm-1175 exploits 16+ CVEs since 2023, including zero-days, enabling rapid Medusa ransomware attacks within 24 hours.

Wynn Resorts Says 21,000 Employees Affected by ShinyHunters Hack