Latest Cybersecurity News

Graham CluleyApr 29, 20263m5

Alleged Silk Typhoon hacker extradited to the United States to face charges

A man accused of working as a hacker for China's Ministry of State Security has been extradited to the USA from Italy, and faces - if found guilty - the prospect of decades behind bars.

Hundreds of Internet-Facing VNC Servers Expose ICS/OT

SecurityWeekApr 29, 20263m5

Hundreds of Internet-Facing VNC Servers Expose ICS/OT

Forescout has identified tens of thousands of exposed RDP and VNC servers that can be mapped to specific industries.

Webinar: How to Automate Exposure Validation to Match the Speed of AI Attacks

The Hacker NewsApr 29, 20262m5

Webinar: How to Automate Exposure Validation to Match the Speed of AI Attacks

AI-driven attacks uncovered in February 2026 automate kill chain and seize Domain Admin credentials in minutes, forcing faster defenses.

Vulnerabilities

Adapting Zero Trust Principles to Operational Technology

CISA Alerts

Vulnerabilities

Adapting Zero Trust Principles to Operational Technology

This guidance provides a roadmap for organizations to reference as they transition toward a zero trust architecture.

CISA AlertsApr 29, 20262m4

What to Look for in an Exposure Management Platform (And What Most of Them Get Wrong)

The Hacker NewsApr 29, 20267m5

What to Look for in an Exposure Management Platform (And What Most of Them Get Wrong)

Integrated exposure platforms validate exploitability, correlate paths, and reduce priorities to 2%, improving enterprise risk reduction.

Checkmarx Confirms Data Stolen in Supply Chain Attack

SecurityWeekApr 29, 20263m5

Checkmarx Confirms Data Stolen in Supply Chain Attack

The hackers exfiltrated the data from Checkmarx’s GitHub environment on March 30, a week after publishing malicious code.

Iranian Cyber Group Handala Targets US Troops in Bahrain

SecurityWeekApr 29, 20263m5

Iranian Cyber Group Handala Targets US Troops in Bahrain

US service members received WhatsApp messages claiming they would be targeted with drones and missiles.

CISA orders feds to patch Windows flaw exploited as zero-day

BleepingComputer

Malware & Threats

CISA orders feds to patch Windows flaw exploited as zero-day

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to secure their Windows systems against a vulnerability exploited in zero-day attacks.

BleepingComputerApr 29, 20263m4

38 Vulnerabilities Found in OpenEMR Medical Software

SecurityWeekApr 29, 20262m4

38 Vulnerabilities Found in OpenEMR Medical Software

Some of the vulnerabilities discovered by Aisle can be exploited to access and alter sensitive patient information.

Critical cPanel Authentication Vulnerability Identified — Update Your Server Immediately

The Hacker NewsApr 29, 20262m4

Critical cPanel Authentication Vulnerability Identified — Update Your Server Immediately

cPanel patches authentication flaw across supported versions, prompting Namecheap port blocks and temporary access limits.

Chrome 147, Firefox 150 Security Updates Rolling Out

SecurityWeekApr 29, 20262m4

Chrome 147, Firefox 150 Security Updates Rolling Out

The browser refreshes resolve critical and high-severity vulnerabilities that could lead to arbitrary code execution.