Latest Cybersecurity News

Stay informed with real-time threat intelligence, vulnerability disclosures, and expert analysis from the cybersecurity community.

All Malware & Threats468 Vulnerabilities240 Data Breaches20 Ransomware0 APT & Threat Actors0 Cloud Security0 MENA Cybersecurity0 Compliance & Frameworks0 Tools & Tutorials0 Industry News1127

PyTorch Lightning Compromised in PyPI Supply Chain Attack to Steal Credentials

The Hacker News

Industry News

PyTorch Lightning Compromised in PyPI Supply Chain Attack to Steal Credentials

Malicious Lightning 2.6.2/2.6.3 released April 30 enable credential theft via hidden payload, leading to PyPI quarantine and forced remediation.

The Hacker NewsApr 30, 20264m4

April KB5083769 Windows 11 update causes backup software failures

BleepingComputer

Malware & Threats

April KB5083769 Windows 11 update causes backup software failures

The April 2026 KB5083769 security update breaks third-party backup applications from multiple vendors on systems running Windows 11 24H2 and 25H2.

BleepingComputerApr 30, 20262m6

SonicWall Urges Immediate Patching of Firewall Vulnerabilities

SecurityWeek

Industry News

SonicWall Urges Immediate Patching of Firewall Vulnerabilities

The bugs could be exploited to bypass security controls, access restricted services, and crash firewalls.

SecurityWeekApr 30, 20262m4

SAP NPM Packages Targeted in Supply Chain Attack

SecurityWeek

Industry News

SAP NPM Packages Targeted in Supply Chain Attack

The Mini Shai-Hulud attack introduced a preinstall hook to fetch and execute a Bun binary and bypass security monitoring.

SecurityWeekApr 30, 20263m4

Anti-DDoS Firm Heaped Attacks on Brazilian ISPs

Krebs on Security

Data Breaches

Anti-DDoS Firm Heaped Attacks on Brazilian ISPs

A Brazilian tech firm that specializes in protecting networks from distributed denial-of-service (DDoS) attacks has been enabling a botnet responsible for an extended campaign of massive DDoS attacks against other network operators in Brazil, KrebsOnSecurity has learned. The firm's chief…

Krebs on SecurityApr 30, 20267m5

What Happens in the First 24 Hours After a New Asset Goes Live

BleepingComputer

Malware & Threats

What Happens in the First 24 Hours After a New Asset Goes Live

When a new asset goes live, attackers start scanning within minutes. Sprocket Security shows how automated attacks move from discovery to compromise in under 24 hours.

BleepingComputerApr 30, 20265m5

ThreatsDay Bulletin: SMS Blaster Busts, OpenEMR Flaws, 600K Roblox Hacks and 25 More Stories

The Hacker News

Industry News

ThreatsDay Bulletin: SMS Blaster Busts, OpenEMR Flaws, 600K Roblox Hacks and 25 More Stories

Latest ThreatsDay: SMS blasters, npm supply chain hits, and unpatched Windows flaws. Stay ahead of new phishing kits and exposed servers.

The Hacker NewsApr 30, 202618m4

New Linux ‘Copy Fail’ flaw gives hackers root on major distros

BleepingComputer

Malware & Threats

New Linux ‘Copy Fail’ flaw gives hackers root on major distros

An exploit has been published for a local privilege escalation vulnerability dubbed "Copy Fail" that impacts Linux kernels released since 2017, allowing an unprivileged local attacker to gain root permissions.

BleepingComputerApr 30, 20264m4