A sophisticated cyberattack campaign, tracked as UAC-0247, has been actively targeting critical local government and municipal healthcare institutions across Ukraine since early 2026. The threat actors are specifically aimed at stealing sensitive data from internet browsers and WhatsApp, and are methodically expanding their reach within compromised networks. The campaign initiates…

A stark new analysis reveals that Google Chrome, the world’s most popular web browser, offers minimal protection against invasive user tracking techniques such as browser fingerprinting and data leaks through HTTP headers. The research, published on April 14, 2026, by digital identity expert Alexander Hanff, indicates that everyday Chrome browsing…

March 2026 marked an intense period for cybersecurity, with 31 high-impact vulnerabilities actively exploited across nearly two dozen major technology vendors. This surge in real-world attacks included a significant zero-day vulnerability targeting Cisco’s Secure Firewall Management Center, exploited by the Interlock Ransomware Group before a patch was available. Microsoft and…

Cybersecurity researchers have uncovered a substantial network of malicious infrastructure operating within Russia’s commercial hosting environments. Over a three-month period from January 1 to April 1, 2026, more than 1,250 active command-and-control (C2) servers were identified across 165 distinct Russian infrastructure providers. This discovery highlights the sophisticated embedding of cyberattack…

A sophisticated cybercriminal operation known as “Pushpaganda” is weaponizing Google Discover, a popular content aggregation service, to distribute malicious push notifications to users across multiple countries. Researchers have uncovered that this campaign cleverly leverages AI-generated content and aggressive social engineering tactics to trick users into subscribing to harmful notification streams,…

The National Institute of Standards and Technology (NIST) has announced it will narrow its focus for analyzing security vulnerabilities due to an overwhelming influx of defects. This change aims to ensure the long-term sustainability of the National Vulnerability Database (NVD), which has previously faced challenges including a funding lapse earlier…

Cybercriminals are increasingly leveraging Google Cloud Storage to bypass email filters and distribute malware, a new report reveals. This sophisticated phishing tactic uses the widely trusted cloud platform to host malicious pages that deliver the Remcos Remote Access Trojan (RAT). The attack chain, identified by ANY.RUN’s threat research team, bypasses…

A sophisticated cyber campaign, exhibiting strong operational similarities to the notorious MuddyWater threat group, has been identified conducting extensive scans on over 12,000 internet-exposed systems across various regions. This widespread reconnaissance was followed by highly targeted attacks against critical sectors in the Middle East, including aviation, energy, and government entities.…

Artificial intelligence is fundamentally altering how people navigate the internet, with new agentic LLM browsers moving beyond simple page display to actively read content, execute tasks, and even complete complex user requests. This evolution, while promising enhanced productivity, has exposed significant security vulnerabilities, according to Varonis Threat Labs. These advanced…

Cybercriminals are leveraging a sophisticated tactic within Microsoft 365, exploiting built-in mailbox rules to silently intercept sensitive business communications. This emerging threat allows attackers to capture financial data, redirect confidential emails, and even suppress critical security alerts without alerting the account owner. Microsoft 365 mailbox rules, designed for productivity, are…

A sophisticated cyberattack exploited trusted WordPress plugins, hiding a backdoor for eight months before activating malicious malware. The incident, uncovered in April 2026, highlights a calculated supply chain attack that leveraged the acquisition of a legitimate plugin business to compromise hundreds of thousands of WordPress websites. This sophisticated method of…

A sophisticated cybercriminal operation, known as Triad Nexus and linked to the FUNNULL Content Delivery Network, has resurfaced with a significantly evolved and evasive infrastructure. Following U.S. Treasury sanctions, the group has deployed over 175 randomly rotating CNAME domains to power a vast network of global scam portals, demonstrating a…