Dutch authorities arrested two men for operating IT infrastructure used by Russia to carry out cyberattacks and seized over 800 servers.
House Republicans introduced the Secure Data Act on Wednesday, a comprehensive federal privacy bill giving consumers opt-out rights over targeted advertising and data sales while drawing swift criticism from Democrats and advocacy groups.
Sean Plankey formally asked President Trump to pull his nomination to lead CISA, citing Senate gridlock after more than a year without confirmation. The agency continues to operate under acting leadership amid deep budget cuts and ongoing personnel instability.
Incident responders at Expel have exposed a North Korean state-linked operation that drained over $12 million in cryptocurrency from 26,584 wallets using fake job offers and multi-strain malware.
Apple pushed out-of-band security updates on April 22, 2026, to address CVE-2026-28950, a Notification Services bug that allowed deleted notifications to persist on iPhone and iPad devices.
Kaspersky researchers uncovered a previously unknown wiper malware called Lotus Wiper that was deployed in destructive attacks against Venezuela's energy and utilities sector, erasing data across physical drives and rendering affected machines unrecoverable.
A 20-year-old known online as HexDex was detained in western France on Monday, suspected of orchestrating roughly 100 data breaches targeting sports federations, government databases, and private firms.
A Mirai-based botnet is actively exploiting CVE-2025-29635, a command injection vulnerability in discontinued D-Link DIR-823X routers that no longer receive security updates. Akamai researchers warn that the attacks mirror a proof-of-concept exploit previously published on GitHub.
More than 1,300 Microsoft SharePoint servers remain unpatched against CVE-2026-32201, a spoofing vulnerability that was exploited as a zero-day before patches arrived and continues to be abused in ongoing attacks.
A surge of attacks targeting a critical unauthenticated RCE flaw in BeyondTrust's Bomgar Remote Support has compromised MSPs and downstream customers, with LockBit ransomware deployed in multiple incidents.