Latest Cybersecurity News

APT41 Delivers 'Zero-Detection' Backdoor to Harvest Cloud Credentials

Dark Reading

Dark ReadingApr 13, 20261m5

APT41 Delivers 'Zero-Detection' Backdoor to Harvest Cloud Credentials

The prolific China-backed threat group is targeting AWS, Google, Azure, and Alibaba cloud environments and using typosquatting to obscure C2 communication.

FBI and Indonesian Police Dismantle W3LL Phishing Network Behind $20M Fraud Attempts

The Hacker News

The Hacker NewsApr 13, 20261m5

FBI and Indonesian Police Dismantle W3LL Phishing Network Behind $20M Fraud Attempts

The U.S. Federal Bureau of Investigation (FBI), in partnership with the Indonesian National Police, has dismantled the infrastructure associated with a global phishing operation that leveraged an off-the-shelf toolkit called W3LL to steal thousands of victims' account credentials and attempt more...

Booking.com Says Hackers Accessed User Information

SecurityWeekApr 13, 20262m5

Booking.com Says Hackers Accessed User Information

The online travel platform has not said how many customers’ booking information was exposed, but said the issue has been contained.

The silent “Storm”: New infostealer hijacks sessions, decrypts server-side

BleepingComputer

Malware & Threats

The silent “Storm”: New infostealer hijacks sessions, decrypts server-side

New "Storm" infostealer skips local decryption, sending browser data to attacker servers. Varonis shows how server-side decryption enables session hijacking, bypassing passwords and MFA.

BleepingComputerApr 13, 20265m5

BrowserGate: Claims of LinkedIn ‘Spying’ Clash With Security Research Findings

SecurityWeekApr 13, 20266m5

BrowserGate: Claims of LinkedIn ‘Spying’ Clash With Security Research Findings

Claims that “Microsoft is running one of the largest corporate espionage operations in modern history” face scrutiny as researchers analyze LinkedIn’s browser extension probing

Scans for EncystPHP Webshell, (Mon, Apr 13th)

SANS ISC

Scans for EncystPHP Webshell, (Mon, Apr 13th)

Last week, I wrote about attackers scanning for various webshells, hoping to find some that do not require authentication or others that use well-known credentials. But some attackers are paying attention and are deploying webshells with more difficult-to-guess credentials. Today, I noticed some ...

SANS ISCApr 13, 20261m5

⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and More

The Hacker News

The Hacker NewsApr 13, 20261m5

⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and More

Monday is back, and the weekend’s backlog of chaos is officially hitting the fan. We are tracking a critical zero-day that has been quietly living in your PDFs for months, plus some aggressive state-sponsored meddling in infrastructure that is finally coming to light. It is one of those mornings ...

OpenAI Impacted by North Korea-Linked Axios Supply Chain Hack

SecurityWeekApr 13, 20263m5

OpenAI Impacted by North Korea-Linked Axios Supply Chain Hack

The AI giant is taking action after determining that a macOS code signing certificate may have been compromised.

CISA Adds Seven Known Exploited Vulnerabilities to Catalog

CISA Alerts

CISA AlertsApr 13, 20262m5

CISA Adds Seven Known Exploited Vulnerabilities to Catalog

CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.

Your MTTD Looks Great. Your Post-Alert Gap Doesn't

The Hacker News

The Hacker NewsApr 13, 20266m5

Your MTTD Looks Great. Your Post-Alert Gap Doesn't

AI-driven attacks exploiting zero-days and 29-minute breakout times expose SOC investigation gaps, accelerating the shift to automated response.

International Operation Targets Multimillion-Dollar Crypto Theft Schemes