Tech * AI * Crypto
50 articles analyzed by AI / 281 total
Law enforcement agencies in the U.S., Canada, and Germany disrupted four major IoT botnets compromising over three million devices such as routers and webcams in March 2026. These botnets were involved in large-scale DDoS attacks, significantly reducing cyberattack capabilities.
A Mirai variant called Nexcorium exploits CVE-2024-3721 to hijack TBK DVRs and end-of-life TP-Link routers for forming a DDoS botnet. Security researchers at Fortinet and Palo Alto Networks disclosed these findings in 2024, underscoring continuing IoT vulnerabilities.
Since October 2025, attackers have exploited the n8n automation platform’s webhooks to deliver malware via phishing emails. This method uses automated email campaigns, posing a significant threat to organizations relying on workflow automation tools.
Anthropic announced its AI model Claude Mythos detected thousands of zero-day vulnerabilities across major systems in 2024 as part of Project Glasswing. This AI-driven cybersecurity effort involves selected organizations aiming to proactively identify critical flaws.
The Marimo Python notebook RCE vulnerability CVE-2026-39987, with a high CVSS score of 9.3, was exploited within 10 hours of public disclosure in April 2026. The rapid exploitation emphasizes the critical need for swift patching of disclosed flaws.
Huntress reported three Microsoft Defender zero-day vulnerabilities actively being exploited in April 2026; two remain unpatched. These include BlueHammer and RedSun, which enable privilege escalation and increase the risk of widespread network compromises.
A critical remote code execution flaw (CVE-2025-0520) affecting ShowDoc servers with a CVSS score of 9.4 is actively exploited in the wild as of April 2026. Unpatched servers remain vulnerable, posing significant risk to affected organizations.
A severe security flaw CVE-2026-32251 rated 9.3 CVSS in the Tolgee cloud platform allows attackers to read sensitive files like /etc/passwd through translation file uploads, reported in April 2026. This vulnerability potentially affects multiple users hosting on the platform.
Adobe released emergency patches for an actively exploited critical Acrobat Reader vulnerability CVE-2026-34621 scoring 8.6 CVSS in April 2026. The flaw targeted mainly Brazilian fintech firms, with 62 known pre-authenticated attack targets identified.
As of April 2026, three zero-day vulnerabilities in Microsoft Defender are actively exploited, with two still unpatched, escalating organizational cybersecurity risks. Immediate patching is urged to prevent privilege escalation and system breaches.