The Underminr vulnerability allows attackers to hide malicious connections behind trusted domains, potentially affecting 88 million domains worldwide.
Microsoft's April 2026 cumulative updates for Windows 10 and Windows 11 introduce new safeguards against phishing attacks that weaponize Remote Desktop Protocol (.rdp) files, including security warnings and disabled resource redirections by default.
CISA has notified CyberCorps: Scholarship for Service participants that summer 2025 internships are canceled due to a DHS funding lapse, leaving hundreds of cyber scholars in limbo for a second consecutive year.
A newly documented ransomware strain called JanaWare has been targeting Turkish home users and small businesses since 2020, demanding just $200–$400 per victim while deliberately evading international researcher scrutiny.
Microsoft has introduced a temporary accelerated process to help developers recover access to Windows Hardware Program accounts suspended over incomplete identity verification, following an outcry from high-profile open-source project maintainers.
Google has embedded a Rust-based DNS parser into the modem firmware of Pixel phones, starting with the Pixel 10 series, to eliminate an entire class of memory-safety vulnerabilities in a critical and remotely accessible attack surface.
The Triad Nexus cybercrime network has rebuilt its global fraud infrastructure despite US sanctions, shifting toward emerging markets while abusing cloud services from Amazon, Cloudflare, Google, and Microsoft.
SAP released 20 security notes on its April 2026 patch day, led by CVE-2026-27681, a critical 9.9-rated SQL injection vulnerability in Business Planning and Consolidation and Business Warehouse that enables arbitrary code execution.
A joint US report from CSA, SANS, and OWASP warns organizations will be \
Dutch gym chain Basic-Fit has disclosed a data breach affecting approximately 1 million members across six European countries, with exposed data including full names, bank account details, and dates of birth.