Cyber Daily News

Cyber Daily News for April 4, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - European Commission Breach Exposes 300GB of Data from 30 EU Entities https://www.securityweek.com/european-commission-confirms-data-breach-linked-to-trivy-supply-chain-attack/ - North Korea-Linked Hackers Drain $285M from Drift Protocol https://securityaffairs.com/190330/hacking/north-korea-linked-hackers-drain-285m-from-drift-in-sophisticated-attack.html - TrueConf Zero-Day Exploited in Asian Government Attacks https://www.securityweek.com/trueconf-zero-day-exploited-in-asian-government-attacks/ - Critical ShareFile Flaws Lead to Unauthenticated RCE https://www.securityweek.com/critical-sharefile-flaws-lead-to-unauthenticated-rce/ - CrystalX RAT: New MaaS Malware Combines Spyware, Stealer, and Remote Access https://securityaffairs.com/190310/cyber-crime/crystalx-rat-new-maas-malware-combines-spyware-stealer-and-remote-access.html - ChatGPT Data Leak Exposes User Information https://www.securityweek.com/in-other-news-chatgpt-data-leak-android-rootkit-water-facility-hit-by-ransomware/ - New Android Rootkit Discovered Targeting Mobile Users https://www.securityweek.com/in-other-news-chatgpt-data-leak-android-rootkit-water-facility-hit-by-ransomware/ - Water Treatment Facility Hit by Ransomware Attack https://www.securityweek.com/in-other-news-chatgpt-data-leak-android-rootkit-water-facility-hit-by-ransomware/

Cyber Daily News for April 3, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - North Korean Hackers Drain $285 Million From Drift in 10 Seconds https://www.securityweek.com/north-korean-hackers-drain-285-million-from-drift-in-10-seconds/ - React2Shell Exploited in Large-Scale Credential Harvesting Campaign https://www.securityweek.com/react2shell-exploited-in-large-scale-credential-harvesting-campaign/ - Researchers Observe Sub-One-Hour Ransomware Attacks https://www.infosecurity-magazine.com/news/researchers-subonehour-ransomware/ - Cisco Patches Critical and High-Severity Vulnerabilities https://securityaffairs.com/190295/security/cisco-fixed-critical-and-high-severity-flaws.html - Apple Expands iOS 18 Security Updates Amid DarkSword Threat https://www.infosecurity-magazine.com/news/apple-ios-18-updates-darksword/ - Critical Vulnerability in Claude Code Emerges Days After Source Leak https://www.securityweek.com/critical-vulnerability-in-claude-code-emerges-days-after-source-leak/ - Hasbro Hit by Cyberattack, Investigates Possible Data Breach https://securityaffairs.com/190306/security/hasbro-hit-by-cyberattack-investigates-possible-data-breach.html - T-Mobile Sets the Record Straight on Latest Data Breach Filing https://www.securityweek.com/t-mobile-sets-the-record-straight-on-latest-data-breach-filing/

Cyber Daily News for April 2, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Google fixes fourth actively exploited Chrome zero-day of 2026 https://securityaffairs.com/190265/hacking/google-fixes-fourth-actively-exploited-chrome-zero-day-of-2026.html - Mercor Hit by LiteLLM Supply Chain Attack https://www.securityweek.com/mercor-hit-by-litellm-supply-chain-attack/ - Google links Axios npm supply chain attack to North Korea-linked APT UNC1069 https://securityaffairs.com/190256/security/google-links-axios-npm-supply-chain-attack-to-north-korea-linked-apt-unc1069.html - Toy Giant Hasbro Hit by Cyberattack https://www.securityweek.com/toy-giant-hasbro-hit-by-cyberattack/ - Italian spyware vendor creates Fake WhatsApp app, targeting 200 users https://securityaffairs.com/190276/malware/italian-spyware-vendor-creates-fake-whatsapp-app-targeting-200-users.html - FBI Warns of AVrecon Malware Targeting Network Devices Across 163 Countries https://thecyberexpress.com/fbi-warns-of-avrecon-malware/ - Most CNI Firms Face Up to £5m in Downtime from OT Attacks https://www.infosecurity-magazine.com/news/most-cni-firms-5m-downtime-ot/ - FBI Warns of Data Security Risks From China-Made Mobile Apps https://www.securityweek.com/fbi-warns-of-data-security-risks-from-china-made-mobile-apps/

Cyber Daily News for April 1, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - North Korea's Lazarus Group Behind Axios npm Supply Chain Attack https://www.securityweek.com/axios-npm-package-breached-in-north-korean-supply-chain-attack/ - AI Startup Mercor Hit by Supply Chain Attack Linked to LiteLLM https://thecyberexpress.com/mercor-cyberattack/ - Iran-Linked Hackers Breach FBI Director Kash Patel's Personal Email https://thecyberexpress.com/what-kash-patel-email-hack-is-really-about/ - Anthropic Accidentally Leaks Claude Code Source via npm https://securityaffairs.com/190229/data-breach/anthropic-accidentally-leaks-claude-code.html - ChatGPT Security Issue Enabled Data Theft via Single Prompt https://www.infosecurity-magazine.com/news/chatgpt-security-issue-steal-data/ - Nearly Half a Million Lloyds Banking Group Customers Affected by Data Incident https://securityaffairs.com/190213/data-breach/nearly-half-a-million-mobile-customers-of-lloyds-banking-group-affected-by-a-security-incident.html - TeamPCP Moves From Open Source to AWS Environments https://www.securityweek.com/teampcp-moves-from-oss-to-aws-environments/ - CrewAI Vulnerabilities Expose Devices to Hacking via Sandbox Escape https://www.securityweek.com/crewai-vulnerabilities-expose-devices-to-hacking/

Cyber Daily News for March 31, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Axios Supply Chain Attack Exposes Developers to Hidden Malware https://thecyberexpress.com/axios-supply-chain-attack-npm-malware/ - Alleged Unpatched Telegram Zero-Day Allows Device Takeover, but Telegram Denies https://securityaffairs.com/190167/security/its-a-mystery-alleged-unpatched-telegram-zero-day-allows-device-takeover-but-telegram-denies.html - CISA Adds Citrix NetScaler Flaw to Known Exploited Vulnerabilities Catalog https://securityaffairs.com/190197/security/u-s-cisa-adds-a-flaw-in-citrix-netscaler-to-its-known-exploited-vulnerabilities-catalog.html - Qilin Ransomware Allegedly Breached Chemical Giant Dow Inc https://securityaffairs.com/190186/cyber-crime/qilin-ransomware-allegedly-breached-chemical-manufacturer-giant-dow-inc.html - Lloyds Data Security Incident Impacts 450,000 Individuals https://www.securityweek.com/lloyds-data-security-incident-impacts-450000-individuals/ - Intesa Sanpaolo Data Breach Exposes 3,500+ Customers, Draws 31.8M Euro Penalty https://thecyberexpress.com/intesa-sanpaolo-data-breach/ - StrongSwan Flaw Allows Unauthenticated Attackers to Crash VPNs https://www.securityweek.com/strongswan-flaw-allows-unauthenticated-attackers-to-crash-vpns/ - Critical Vulnerability in OpenAI Codex Allowed GitHub Token Compromise https://www.securityweek.com/critical-vulnerability-in-openai-codex-allowed-github-token-compromise/

Cyber Daily News for March 30, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Critical Fortinet FortiClient EMS flaw exploited for Remote Code Execution https://securityaffairs.com/190158/security/critical-fortinet-forticlient-ems-flaw-exploited-for-remote-code-execution.html - F5 BIG-IP DoS Flaw Upgraded to Critical RCE, Now Exploited in the Wild https://www.securityweek.com/f5-big-ip-dos-flaw-upgraded-to-critical-rce-now-exploited-in-the-wild/ - Citrix NetScaler CVE-2026-3055 Actively Probed by Attackers https://securityaffairs.com/190131/hacking/urgent-alert-netscaler-bug-cve-2026-3055-probed-by-attackers-could-leak-sensitive-data.html - European Commission Confirms Cloud Data Breach https://www.infosecurity-magazine.com/news/european-commission-cloud-data/ - FBI Confirms Kash Patel Email Hack as US Offers $10M Reward for Hackers https://www.securityweek.com/fbi-confirms-kash-patel-email-hack-as-us-offers-10m-reward-for-hackers/ - Russia-linked APT TA446 uses DarkSword exploit to target iPhone users https://securityaffairs.com/190139/apt/russia-linked-apt-ta446-uses-darksword-exploit-to-target-iphone-users-in-phishing-wave.html - New macOS Infinity Stealer uses Nuitka Python payload and ClickFix https://securityaffairs.com/190147/security/new-macos-infinity-stealer-uses-nuitka-python-payload-and-clickfix.html - Hackers Impersonate Ukrainian CERT to Plant RAT on Government, Hospital Networks https://thecyberexpress.com/hackers-impersonate-cert-ua-agewheeze-rat/

Cyber Daily News for March 29, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - ShinyHunters Claims Massive European Commission Breach https://securityaffairs.com/190095/data-breach/shinyhunters-claims-the-hack-of-the-european-commission.html - Apple Pushes Urgent Lock Screen Warnings to Unpatched iPhones and iPads https://securityaffairs.com/190109/security/apple-issues-urgent-lock-screen-warnings-for-unpatched-iphones-and-ipads.html - Iran-Linked Handala Group Hacked FBI Director Kash Patel's Personal Email https://securityaffairs.com/190088/intelligence/iran-linked-group-handala-hacked-fbi-director-kash-patels-personal-email-account.html - European Commission Confirms Cyberattack on Cloud Infrastructure https://securityaffairs.com/190067/data-breach/the-european-commission-confirmed-a-cyberattack-affecting-part-of-its-cloud-systems.html - New AITM Phishing Campaign Hijacks TikTok Business Accounts https://securityaffairs.com/190058/security/new-aitm-phishing-wave-hijacks-tiktok-business-accounts.html - CISA Adds F5 BIG-IP AMP Flaw to Known Exploited Vulnerabilities Catalog https://securityaffairs.com/190076/uncategorized/u-s-cisa-adds-a-flaw-in-f5-big-ip-amp-to-its-known-exploited-vulnerabilities-catalog.html - CISA and BSI Warn of Critical PTC Windchill and FlexPLM Vulnerability https://securityaffairs.com/190049/security/cisa-and-bsi-warn-orgs-of-critical-ptc-windchill-and-flexplm-flaw.html - CISA Adds Aquasecurity Trivy Flaw to KEV Catalog https://securityaffairs.com/190044/security/u-s-cisa-adds-an-aquasecurity-trivy-flaw-to-its-known-exploited-vulnerabilities-catalog.html

Cyber Daily News for March 28, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Iran-linked Handala Group Claims Hack of FBI Director Kash Patel's Personal Email https://securityaffairs.com/190088/intelligence/iran-linked-group-handala-hacked-fbi-director-kash-patels-personal-email-account.html - European Commission Confirms Cyberattack on Cloud Systems, Data Potentially Stolen https://securityaffairs.com/190067/data-breach/the-european-commission-confirmed-a-cyberattack-affecting-part-of-its-cloud-systems.html - CISA and BSI Warn of Critical CVSS 10.0 Flaw in PTC Windchill — No Patch Available https://securityaffairs.com/190049/security/cisa-and-bsi-warn-orgs-of-critical-ptc-windchill-and-flexplm-flaw.html - CISA Adds Actively Exploited F5 BIG-IP RCE Flaw to KEV Catalog https://securityaffairs.com/190076/uncategorized/u-s-cisa-adds-a-flaw-in-f5-big-ip-amp-to-its-known-exploited-vulnerabilities-catalog.html - Google Warns Quantum Computing Threat to Encryption Could Arrive by 2029 https://www.infosecurity-magazine.com/news/quantum-encryption-q-day-closer/ - Cloudflare-Themed ClickFix Attack Drops Infiniti Stealer on Macs https://www.securityweek.com/cloudflare-themed-clickfix-attack-drops-infiniti-stealer-on-macs/ - New AiTM Phishing Wave Hijacks TikTok Business Accounts for Malvertising https://www.infosecurity-magazine.com/news/phishing-targets-tiktok-for/ - TeamPCP Targets Telnyx Package in PyPI Supply Chain Attack https://www.infosecurity-magazine.com/news/teampcp-targets-telnyx-pypi-package/

Cyber Daily News for March 27, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - China-linked Red Menshen APT deploys stealthy BPFDoor implants in telecom networks https://securityaffairs.com/190029/malware/china-linked-red-menshen-apt-deploys-stealthy-bpfdoor-implants-in-telecom-networks.html - U.S. CISA adds an Aquasecurity Trivy flaw to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/190044/security/u-s-cisa-adds-an-aquasecurity-trivy-flaw-to-its-known-exploited-vulnerabilities-catalog.html - U.S. CISA adds a Langflow flaw to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/190018/security/u-s-cisa-adds-a-langflow-flaw-to-its-known-exploited-vulnerabilities-catalog.html - Attackers Rapidly Weaponize Critical Oracle WebLogic RCE, Honeypot Study Finds https://www.infosecurity-magazine.com/news/critical-oracle-weblogic-rce/ - Coruna iOS Exploit Kit Likely an Update to Operation Triangulation https://www.securityweek.com/coruna-ios-exploit-kit-likely-an-update-to-operation-triangulation/ - EtherRAT Techniques Bypass Security Via Ethereum Smart Contracts https://www.infosecurity-magazine.com/news/etherrat-bypass-security-ethereum/ - Security Researchers Sound the Alarm on Vulnerabilities in AI-Generated Code https://www.infosecurity-magazine.com/news/ai-generated-code-vulnerabilities/ - Congress Wants a GPS Tracker on Every Advanced AI Chip America Exports https://thecyberexpress.com/advanced-ai-chip-chip-security-act/

Cyber Daily News for March 26, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Alleged RedLine Malware Administrator Extradited to US https://www.securityweek.com/alleged-redline-malware-administrator-extradited-to-us/ - FCC Bans Foreign-Made Routers Over National Security Concerns https://www.infosecurity-magazine.com/news/us-fcc-bans-foreign-made-routers/ - Three Individuals Charged for Trying to Smuggle 'America-Made' AI Tech Worth $170M https://thecyberexpress.com/charged-for-smuggling-america-made-ai-tech/ - Port of Vigo Hit by Ransomware Attack, Cargo Systems Disrupted https://thecyberexpress.com/port-of-vigo-cyberattack-disrupts-systems/ - Iran-Linked Pay2Key Ransomware Group Re-Emerges https://www.infosecurity-magazine.com/news/iranlinked-pay2key-ransomware/ - Patch now: TP-Link Archer NX Routers Vulnerable to Firmware Takeover https://securityaffairs.com/189980/iot/patch-now-tp-link-archer-nx-routers-vulnerable-to-firmware-takeover.html - Russian authorities arrest alleged LeakBase admin behind stolen data marketplace https://securityaffairs.com/189994/cyber-crime/russian-authorities-arrest-alleged-leakbase-admin-behind-stolen-data-marketplace.html - Node.js Fixes Critical Flaws, Patches DoS Risk in Latest Security Update https://thecyberexpress.com/nodejs-cve-2026-21637/