Articles

Google Tightens Android 17 Privacy Rules, Blocks 8.3 Billion Ads in 2025

Google announced new Android 17 privacy policies restricting contact and location data access, while its 2025 ad safety report details the blocking of 8.3 billion policy-violating ads and 24.9 million advertiser account suspensions.

NIST Limits CVE Enrichment Amid Overwhelming Surge in Submissions

NIST Limits CVE Enrichment Amid Overwhelming Surge in Submissions

NIST will no longer fully analyze all CVEs submitted to the National Vulnerability Database, citing a 263% increase in submissions that has overwhelmed its enrichment process, leaving security teams with less context.

Payouts King Ransomware Deploys QEMU VMs as Stealthy Reverse SSH Backdoors

HIGH

MalwareApr 17, 2026

Payouts King Ransomware Deploys QEMU VMs as Stealthy Reverse SSH Backdoors

The Payouts King ransomware group is deploying the open-source QEMU emulator to create hidden virtual machines on compromised hosts, establishing a persistent reverse SSH backdoor that evades conventional endpoint detection.

4 min readPayouts King

Social Media Age Bans May Increase Cybersecurity Risks for Children

MEDIUM

Social Media Age Bans May Increase Cybersecurity Risks for Children

Proposed bans on social media for children under 16 may inadvertently push them toward riskier, less-regulated platforms and necessitate invasive age-verification systems that create new data privacy and security threats.

U.S. Coast Guard Mandate Offers Blueprint for OT Security

U.S. Coast Guard Mandate Offers Blueprint for OT Security

New U.S. Coast Guard cybersecurity rules under the Maritime Transportation Security Act mandate third-party audits, OT-specific security plans, and dedicated personnel, providing a regulatory model for critical infrastructure.

WordPress Supply Chain Attack Infects 30+ Plugins Planted Malicous Backdoor

CRITICAL

Threat IntelApr 17, 2026

WordPress Supply Chain Attack Infects 30+ Plugins Planted Malicous Backdoor

A malicious buyer used the Flippa marketplace to acquire a plugin developer, injecting a backdoor into over 30 WordPress plugins with hundreds of thousands of installations to deploy hidden SEO spam.

6 min read

Workplace Stress Remains Elevated, Posing Persistent Insider Threat Risk

MEDIUM

Workplace Stress Remains Elevated, Posing Persistent Insider Threat Risk

Global workforce stress, anger, and sadness remain significantly above pre-pandemic levels, creating a sustained environment conducive to insider threats and security lapses, according to Gallup's 2026 report.

AI SOC Tools Criticized for Automating Triage, Not Reducing Analyst Workload

Industry NewsApr 16, 2026

AI SOC Tools Criticized for Automating Triage, Not Reducing Analyst Workload

A new analysis argues most AI-powered security operations center tools merely accelerate alert triage without reducing the underlying workload for analysts, failing to deliver on promises of true automation.

Anthropic Releases Claude Opus 4.7 with Automated Cybersecurity Safeguards

AI SecurityApr 16, 2026

Anthropic Releases Claude Opus 4.7 with Automated Cybersecurity Safeguards

Anthropic releases Claude Opus 4.7, a frontier AI model with new automated safeguards designed to detect and halt potentially harmful cybersecurity tasks during long, unsupervised agentic workflows.

ETSI Warns EU Cybersecurity Act 2 Risks Fragmenting Global Standards

Industry NewsApr 16, 2026

ETSI Warns EU Cybersecurity Act 2 Risks Fragmenting Global Standards

The European standards body ETSI warns that proposed EU legislation could ban its experts from developing global cybersecurity standards, risking fragmentation and weakening EU influence in international security governance.

Fake Adobe Reader Downloads Deploy ScreenConnect via In-Memory Loader

HIGH

MalwareApr 16, 2026

Fake Adobe Reader Downloads Deploy ScreenConnect via In-Memory Loader

A new campaign delivers ConnectWise ScreenConnect by masquerading malware as an Adobe Acrobat Reader installer, using advanced in-memory execution and defense evasion to avoid detection.

JanaWare Ransomware Campaign Targets Turkish Homes and SMBs for Six Years

HIGH

MalwareApr 16, 2026

JanaWare Ransomware Campaign Targets Turkish Homes and SMBs for Six Years

A ransomware campaign dubbed 'JanaWare' has been targeting Turkish homes and small-to-medium businesses since at least 2018, deploying a custom variant of the Adwind RAT to steal credentials before encryption.