Articles

Checkmarx KICS Supply-Chain Breach Hits Docker, VS Code

Attackers compromised Checkmarx KICS Docker images and VS Code extensions to steal cloud credentials, API keys, and source code from developer environments.

Industry NewsApr 23, 2026

Cyberattacks on Firms Cascade to Consumers, Malwarebytes Warns

MEDIUM

Cyberattacks on Firms Cascade to Consumers, Malwarebytes Warns

Malwarebytes analysis shows corporate breaches expose customer PII, enable follow-on fraud, and inflate insurance premiums — affecting even unaffected individuals.

Industry NewsApr 23, 2026

ICE Admits Using Graphite Spyware for Surveillance

MEDIUM

ICE Admits Using Graphite Spyware for Surveillance

U.S. Immigration and Customs Enforcement (ICE) confirmed using spyware from Israeli firm Graphite, a tool capable of extracting data from encrypted messaging apps like WhatsApp…

Lotus Wiper Strikes Venezuelan Energy Sector in Destructive Campaign

CRITICAL

Lotus Wiper Strikes Venezuelan Energy Sector in Destructive Campaign

Kaspersky discovered Lotus Wiper, a novel file wiper targeting Venezuela's energy and utilities sector since late 2025.

2 min readLotus Wiper

Mirai Botnet Exploits D-Link Router Flaw CVE-2025-29635

Mirai Botnet Exploits D-Link Router Flaw CVE-2025-29635

Mirai botnet operators exploit CVE-2025-29635, a CVSS 8.8 command injection flaw in end-of-life D-Link DIR-823X routers, to deploy malware and launch DDoS attacks.

North Korean Hackers Steal $12 Million in Crypto via Trojanized

North Korean hackers siphoned over $12 million from crypto users in Q1 2026 using trojanized trading apps like CoinStats and TradingView AI Agent to steal recovery phrases and…

2 min readLazarus Group

Palo Alto Networks Zealot AI Agent Autonomously Hacks Cloud Systems

Tools & TechniquesApr 23, 2026

Palo Alto Networks Zealot AI Agent Autonomously Hacks Cloud Systems

Palo Alto Networks researchers built Zealot, a multi-agent AI penetration testing PoC that autonomously performs reconnaissance, exploitation, and data exfiltration on cloud…

Rituals Cosmetics Breach Exposes Customer Membership Data

Industry NewsApr 23, 2026

Rituals Cosmetics Breach Exposes Customer Membership Data

Attackers stole personal data from Rituals Cosmetics' My Rituals membership database — names, emails, addresses, and loyalty points. Number of affected customers undisclosed.

Trigona Ransomware Deploys Custom Exfil Tool for Faster Data Theft

Trigona Ransomware Deploys Custom Exfil Tool for Faster Data Theft

Trigona ransomware attacks now use a custom CLI tool to exfiltrate data from compromised networks faster, targeting backups and cloud storage before encryption.

2 min readTrigona

Agentic AI Systems Introduce Novel Enterprise Security Risks

AI SecurityApr 22, 2026

Agentic AI Systems Introduce Novel Enterprise Security Risks

Recorded Future warns that autonomous 'agentic' AI systems, now being integrated into enterprise software, create new attack surfaces for prompt injection, data poisoning, and…

VulnerabilitiesApr 22, 2026

Cohere AI Terrarium Sandbox Flaw Allows Root Code Execution,

CRITICAL

Cohere AI Terrarium Sandbox Flaw Allows Root Code Execution,

CVE-2026-5752 (CVSS 9.3) in Cohere AI's Terrarium sandbox enables root-level code execution and container escape via JavaScript prototype chain traversal.

CVE-2026-5752

VulnerabilitiesApr 22, 2026

CrowdStrike LogScale Vulnerability CVE-2026-40050 Lets Attackers Read

CRITICAL

CrowdStrike LogScale Vulnerability CVE-2026-40050 Lets Attackers Read

CrowdStrike warns of critical unauthenticated path-traversal flaw (CVE-2026-40050, CVSS 9.8) in LogScale cluster API endpoint allowing remote file reads from server filesystem.

CVE-2026-40050