Top Security News for Today
Estimating Remaining Stack Space in a C Program
https://www.reddit.com/r/lowlevel/comments/1sjg88m/estimating_remaining_stack_space_in_a_c_program/
Reverse engineered SilentSDK - RAT and C2 infrastructure found on beamers, sold on Amazon/AliExpress/eBay
https://www.reddit.com/r/netsec/comments/1sjioe3/reverse_engineered_silentsdk_rat_and_c2/
We combined DRAM timing attacks, electrical grid frequency detection, and gyroscope fusion into a single bot detection stack and I think we need to talk about it
https://www.reddit.com/r/netsec/comments/1sjkuu2/we_combined_dram_timing_attacks_electrical_grid/
Paying Google to Hack macOS Users?
https://www.reddit.com/r/netsec/comments/1sjecf4/paying_google_to_hack_macos_users/
Agentic Browser Security: Indirect Prompt Injection in Perplexity Comet
https://www.reddit.com/r/netsec/comments/1sk1x6r/agentic_browser_security_indirect_prompt/
CVE-2025-8061: From User-land to Ring 0
https://www.reddit.com/r/netsec/comments/1sk4j5o/cve20258061_from_userland_to_ring_0/
JanelaRAT: a financial threat targeting users in Latin America
https://securelist.com/janelarat-financial-threat-in-latin-america/119332/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Estimating Remaining Stack Space in a C Program
https://www.reddit.com/r/lowlevel/comments/1sjg88m/estimating_remaining_stack_space_in_a_c_program/
Reverse engineered SilentSDK - RAT and C2 infrastructure found on beamers, sold on Amazon/AliExpress/eBay
https://www.reddit.com/r/netsec/comments/1sjioe3/reverse_engineered_silentsdk_rat_and_c2/
We combined DRAM timing attacks, electrical grid frequency detection, and gyroscope fusion into a single bot detection stack and I think we need to talk about it
https://www.reddit.com/r/netsec/comments/1sjkuu2/we_combined_dram_timing_attacks_electrical_grid/
Paying Google to Hack macOS Users?
https://www.reddit.com/r/netsec/comments/1sjecf4/paying_google_to_hack_macos_users/
Agentic Browser Security: Indirect Prompt Injection in Perplexity Comet
https://www.reddit.com/r/netsec/comments/1sk1x6r/agentic_browser_security_indirect_prompt/
CVE-2025-8061: From User-land to Ring 0
https://www.reddit.com/r/netsec/comments/1sk4j5o/cve20258061_from_userland_to_ring_0/
JanelaRAT: a financial threat targeting users in Latin America
https://securelist.com/janelarat-financial-threat-in-latin-america/119332/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Reddit
From the lowlevel community on Reddit: Estimating Remaining Stack Space in a C Program
Posted by Yairlenga - 0 votes and 4 comments
Top Security News for Today
CVE-2025-8061: From User-land to Ring 0
https://www.reddit.com/r/netsec/comments/1sk4j5o/cve20258061_from_userland_to_ring_0/
Agentic Browser Security: Indirect Prompt Injection in Perplexity Comet
https://www.reddit.com/r/netsec/comments/1sk1x6r/agentic_browser_security_indirect_prompt/
AI Chatbots and Trust
https://www.schneier.com/blog/archives/2026/04/ai-chatbots-and-trust.html
One Uppercase Letter Breaks Every Nuxt App
https://www.reddit.com/r/netsec/comments/1sk6xc3/one_uppercase_letter_breaks_every_nuxt_app/
Hack at Dutch gym chain Basic-Fit exposes customer data in several EU countries
https://therecord.media/dutch-gym-chain-basic-fit-hit-by-hackers
The persistence of analog RF links in drone video feeds
https://www.reddit.com/r/netsec/comments/1sk83f7/the_persistence_of_analog_rf_links_in_drone_video/
CVE-2026-22666: Dolibarr 23.0.0 dol_eval() whitelist bypass -> RCE (full write-up + PoC)
https://www.reddit.com/r/netsec/comments/1skazzv/cve202622666_dolibarr_2300_dol_eval_whitelist/
YARA-X now runs in the browser - official Playground
https://www.reddit.com/r/netsec/comments/1sk96tq/yarax_now_runs_in_the_browser_official_playground/
Anatomy of an Autonomous AI Agent Risk: How Qualys ETM Connects the Dots on OpenClaw
https://blog.qualys.com/product-tech/2026/04/13/anatomy-autonomous-ai-agent-risk-qualys-etm-openclaw
FBI, Indonesia take down W3LL phishing tool
https://therecord.media/phishing-takedown-indonesia-fbi
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
CVE-2025-8061: From User-land to Ring 0
https://www.reddit.com/r/netsec/comments/1sk4j5o/cve20258061_from_userland_to_ring_0/
Agentic Browser Security: Indirect Prompt Injection in Perplexity Comet
https://www.reddit.com/r/netsec/comments/1sk1x6r/agentic_browser_security_indirect_prompt/
AI Chatbots and Trust
https://www.schneier.com/blog/archives/2026/04/ai-chatbots-and-trust.html
One Uppercase Letter Breaks Every Nuxt App
https://www.reddit.com/r/netsec/comments/1sk6xc3/one_uppercase_letter_breaks_every_nuxt_app/
Hack at Dutch gym chain Basic-Fit exposes customer data in several EU countries
https://therecord.media/dutch-gym-chain-basic-fit-hit-by-hackers
The persistence of analog RF links in drone video feeds
https://www.reddit.com/r/netsec/comments/1sk83f7/the_persistence_of_analog_rf_links_in_drone_video/
CVE-2026-22666: Dolibarr 23.0.0 dol_eval() whitelist bypass -> RCE (full write-up + PoC)
https://www.reddit.com/r/netsec/comments/1skazzv/cve202622666_dolibarr_2300_dol_eval_whitelist/
YARA-X now runs in the browser - official Playground
https://www.reddit.com/r/netsec/comments/1sk96tq/yarax_now_runs_in_the_browser_official_playground/
Anatomy of an Autonomous AI Agent Risk: How Qualys ETM Connects the Dots on OpenClaw
https://blog.qualys.com/product-tech/2026/04/13/anatomy-autonomous-ai-agent-risk-qualys-etm-openclaw
FBI, Indonesia take down W3LL phishing tool
https://therecord.media/phishing-takedown-indonesia-fbi
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Reddit
From the netsec community on Reddit: CVE-2025-8061: From User-land to Ring 0
Explore this post and more from the netsec community
Top Security News for Today
New Report: Digital Exposure of European Telecoms
https://www.reddit.com/r/netsec/comments/1sl6thg/new_report_digital_exposure_of_european_telecoms/
Virginia enacts ban on precise geolocation data sales as momentum for similar prohibitions builds
https://therecord.media/virginia-enacts-ban-on-precise-geolocation-data
New ‘JanaWare’ ransomware targeting Turkish citizens as cybercriminal ecosystem fragments
https://therecord.media/new-janaware-ransomware-targeting-turkey
Microsoft and Adobe Patch Tuesday, April 2026 Security Update Review
https://blog.qualys.com/vulnerabilities-threat-research/2026/04/14/microsoft-and-adobe-patch-tuesday-april-2026-security-update-review
ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying
https://arxiv.org/abs/2604.09747
Improving DNS Exfiltration Detection via Transformer Pretraining
https://arxiv.org/abs/2604.09849
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
New Report: Digital Exposure of European Telecoms
https://www.reddit.com/r/netsec/comments/1sl6thg/new_report_digital_exposure_of_european_telecoms/
Virginia enacts ban on precise geolocation data sales as momentum for similar prohibitions builds
https://therecord.media/virginia-enacts-ban-on-precise-geolocation-data
New ‘JanaWare’ ransomware targeting Turkish citizens as cybercriminal ecosystem fragments
https://therecord.media/new-janaware-ransomware-targeting-turkey
Microsoft and Adobe Patch Tuesday, April 2026 Security Update Review
https://blog.qualys.com/vulnerabilities-threat-research/2026/04/14/microsoft-and-adobe-patch-tuesday-april-2026-security-update-review
ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying
https://arxiv.org/abs/2604.09747
Improving DNS Exfiltration Detection via Transformer Pretraining
https://arxiv.org/abs/2604.09849
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Reddit
From the netsec community on Reddit: New Report: Digital Exposure of European Telecoms
Explore this post and more from the netsec community
Top Security News for Today
Two Admin-level API keys publicly exposed for years, both dismissed as "Out of scope" by official bug bounty programs. Case analysis + proposed NHI Exposure Severity Index
https://www.reddit.com/r/netsec/comments/1slz48l/two_adminlevel_api_keys_publicly_exposed_for/
Kerberoasting detection gaps in mixed-encryption environments and why 0x17 filtering alone isn't enough
https://www.reddit.com/r/netsec/comments/1sm0afg/kerberoasting_detection_gaps_in_mixedencryption/
Defense in Depth, Medieval Style
https://www.schneier.com/blog/archives/2026/04/defense-in-depth-medieval-style.html
Sweden says pro-Russian hackers attempted to breach thermal power plant
https://therecord.media/sweden-hackers-russia-power-plant
Educational company McGraw Hill says Salesforce misconfiguration led to data leak
https://therecord.media/mcgraw-hill-data-leak-tied-to-salesforce-misconfiguration
UK warns businesses to address cyber risks amid Anthropic AI panic
https://therecord.media/anthropic-mythos-uk-cyber-risk
Incident response for AI: Same fire, different fuel
https://www.microsoft.com/en-us/security/blog/2026/04/15/incident-response-for-ai-same-fire-different-fuel/
Teen arrested in Northern Ireland over cyberattack on school network
https://therecord.media/northern-ireland-cyberattack-arrest
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Two Admin-level API keys publicly exposed for years, both dismissed as "Out of scope" by official bug bounty programs. Case analysis + proposed NHI Exposure Severity Index
https://www.reddit.com/r/netsec/comments/1slz48l/two_adminlevel_api_keys_publicly_exposed_for/
Kerberoasting detection gaps in mixed-encryption environments and why 0x17 filtering alone isn't enough
https://www.reddit.com/r/netsec/comments/1sm0afg/kerberoasting_detection_gaps_in_mixedencryption/
Defense in Depth, Medieval Style
https://www.schneier.com/blog/archives/2026/04/defense-in-depth-medieval-style.html
Sweden says pro-Russian hackers attempted to breach thermal power plant
https://therecord.media/sweden-hackers-russia-power-plant
Educational company McGraw Hill says Salesforce misconfiguration led to data leak
https://therecord.media/mcgraw-hill-data-leak-tied-to-salesforce-misconfiguration
UK warns businesses to address cyber risks amid Anthropic AI panic
https://therecord.media/anthropic-mythos-uk-cyber-risk
Incident response for AI: Same fire, different fuel
https://www.microsoft.com/en-us/security/blog/2026/04/15/incident-response-for-ai-same-fire-different-fuel/
Teen arrested in Northern Ireland over cyberattack on school network
https://therecord.media/northern-ireland-cyberattack-arrest
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Reddit
From the netsec community on Reddit: Two Admin-level API keys publicly exposed for years, both dismissed as "Out of scope" by official…
Explore this post and more from the netsec community
Top Security News for Today
Ukrainian emergency services and hospitals hit by espionage campaign using new AgingFly malware
https://therecord.media/aging-fly-espionage-campaign-targets-ukraine-emergency-services
Cargo thieving hackers running sophisticated remote access campaigns, researchers find
https://therecord.media/cargo-thieving-hackers-running-sophisticated-campaigns
Human Trust of AI Agents
https://www.schneier.com/blog/archives/2026/04/human-trust-of-ai-agents.html
Dissecting Sapphire Sleet’s macOS intrusion from lure to compromise
https://www.microsoft.com/en-us/security/blog/2026/04/16/dissecting-sapphire-sleets-macos-intrusion-from-lure-to-compromise/
New Jersey men given lengthy sentences for running North Korean laptop farms
https://therecord.media/new-jersey-men-sentenced-north-korean-laptop-farms
Building your cryptographic inventory: A customer strategy for cryptographic posture management
https://www.microsoft.com/en-us/security/blog/2026/04/16/building-your-cryptographic-inventory-a-customer-strategy-for-cryptographic-posture-management/
HAProxy HTTP/3 -> HTTP/1 Desync: Cross-Protocol Smuggling via a Standalone QUIC FIN (CVE-2026-33555)
https://www.reddit.com/r/netsec/comments/1snem8w/haproxy_http3_http1_desync_crossprotocol/
Open dataset: 100k+ multimodal prompt injection samples with per-category academic sourcing
https://www.reddit.com/r/netsec/comments/1sn2o3v/open_dataset_100k_multimodal_prompt_injection/
Taking Maestro in Stride
https://bishopfox.com/blog/taking-maestro-in-stride
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Ukrainian emergency services and hospitals hit by espionage campaign using new AgingFly malware
https://therecord.media/aging-fly-espionage-campaign-targets-ukraine-emergency-services
Cargo thieving hackers running sophisticated remote access campaigns, researchers find
https://therecord.media/cargo-thieving-hackers-running-sophisticated-campaigns
Human Trust of AI Agents
https://www.schneier.com/blog/archives/2026/04/human-trust-of-ai-agents.html
Dissecting Sapphire Sleet’s macOS intrusion from lure to compromise
https://www.microsoft.com/en-us/security/blog/2026/04/16/dissecting-sapphire-sleets-macos-intrusion-from-lure-to-compromise/
New Jersey men given lengthy sentences for running North Korean laptop farms
https://therecord.media/new-jersey-men-sentenced-north-korean-laptop-farms
Building your cryptographic inventory: A customer strategy for cryptographic posture management
https://www.microsoft.com/en-us/security/blog/2026/04/16/building-your-cryptographic-inventory-a-customer-strategy-for-cryptographic-posture-management/
HAProxy HTTP/3 -> HTTP/1 Desync: Cross-Protocol Smuggling via a Standalone QUIC FIN (CVE-2026-33555)
https://www.reddit.com/r/netsec/comments/1snem8w/haproxy_http3_http1_desync_crossprotocol/
Open dataset: 100k+ multimodal prompt injection samples with per-category academic sourcing
https://www.reddit.com/r/netsec/comments/1sn2o3v/open_dataset_100k_multimodal_prompt_injection/
Taking Maestro in Stride
https://bishopfox.com/blog/taking-maestro-in-stride
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
therecord.media
Ukrainian emergency services and hospitals hit by espionage campaign using new AgingFly malware
Hackers have targeted Ukrainian hospitals and local government bodies in a new espionage campaign using a malware tool dubbed AgingFly, researchers say.
Top Security News for Today
Anomaly Detection in IEC-61850 GOOSE Networks: Evaluating Unsupervised and Temporal Learning for Real-Time Intrusion Detection
https://arxiv.org/abs/2604.14233
Sovereign 2.0: Control-Plane Sovereignty for Cloud Systems Under Disruption
https://arxiv.org/abs/2604.14242
Challenges and Future Directions in Agentic Reverse Engineering Systems
https://arxiv.org/abs/2604.14317
Head Count: Privacy-Preserving Face-Based Crowd Monitoring
https://arxiv.org/abs/2604.14250
Understanding Student Experiences with TLS Client Authentication
https://arxiv.org/abs/2604.14330
From Black Box to Glass Box: Cross-Model ASR Disagreement to Prioto Review in Ambient AI Scribe Documentation
https://arxiv.org/abs/2604.14152
Compressed-Sensing-Guided, Inference-Aware Structured Reduction for Large Language Models
https://arxiv.org/abs/2604.14156
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Anomaly Detection in IEC-61850 GOOSE Networks: Evaluating Unsupervised and Temporal Learning for Real-Time Intrusion Detection
https://arxiv.org/abs/2604.14233
Sovereign 2.0: Control-Plane Sovereignty for Cloud Systems Under Disruption
https://arxiv.org/abs/2604.14242
Challenges and Future Directions in Agentic Reverse Engineering Systems
https://arxiv.org/abs/2604.14317
Head Count: Privacy-Preserving Face-Based Crowd Monitoring
https://arxiv.org/abs/2604.14250
Understanding Student Experiences with TLS Client Authentication
https://arxiv.org/abs/2604.14330
From Black Box to Glass Box: Cross-Model ASR Disagreement to Prioto Review in Ambient AI Scribe Documentation
https://arxiv.org/abs/2604.14152
Compressed-Sensing-Guided, Inference-Aware Structured Reduction for Large Language Models
https://arxiv.org/abs/2604.14156
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
arXiv.org
Anomaly Detection in IEC-61850 GOOSE Networks: Evaluating...
The IEC-61850 GOOSE protocol underpins time-critical communication in modern digital substations but lacks native security mechanisms, leaving it vulnerable to replay, masquerade, and data...
Top Security News for Today
The Smart TV in Your Living Room Is a Node in the AI Scraping Economy
https://www.reddit.com/r/netsec/comments/1sotxf6/the_smart_tv_in_your_living_room_is_a_node_in_the/
MAD Bugs: Even "cat readme.txt" is not safe
https://www.reddit.com/r/netsec/comments/1sou4zz/mad_bugs_even_cat_readmetxt_is_not_safe/
Cross‑tenant helpdesk impersonation to data exfiltration: A human-operated intrusion playbook
https://www.microsoft.com/en-us/security/blog/2026/04/18/crosstenant-helpdesk-impersonation-data-exfiltration-human-operated-intrusion-playbook/
TPM 2.0 is cool, actually: hardware attestation for bare-metal fleets
https://www.reddit.com/r/netsec/comments/1sozi1e/tpm_20_is_cool_actually_hardware_attestation_for/
CVE-2026-34621 PoC isn't a scanner, it's a campaign weaponizer with 62 pre-authenticated Brazilian fintech targets
https://www.reddit.com/r/netsec/comments/1sp128h/cve202634621_poc_isnt_a_scanner_its_a_campaign/
Subject: Inquiry Regarding Localized GEM Induction via High-Frequency Plasma
https://www.reddit.com/r/netsec/comments/1spgkxy/subject_inquiry_regarding_localized_gem_induction/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
The Smart TV in Your Living Room Is a Node in the AI Scraping Economy
https://www.reddit.com/r/netsec/comments/1sotxf6/the_smart_tv_in_your_living_room_is_a_node_in_the/
MAD Bugs: Even "cat readme.txt" is not safe
https://www.reddit.com/r/netsec/comments/1sou4zz/mad_bugs_even_cat_readmetxt_is_not_safe/
Cross‑tenant helpdesk impersonation to data exfiltration: A human-operated intrusion playbook
https://www.microsoft.com/en-us/security/blog/2026/04/18/crosstenant-helpdesk-impersonation-data-exfiltration-human-operated-intrusion-playbook/
TPM 2.0 is cool, actually: hardware attestation for bare-metal fleets
https://www.reddit.com/r/netsec/comments/1sozi1e/tpm_20_is_cool_actually_hardware_attestation_for/
CVE-2026-34621 PoC isn't a scanner, it's a campaign weaponizer with 62 pre-authenticated Brazilian fintech targets
https://www.reddit.com/r/netsec/comments/1sp128h/cve202634621_poc_isnt_a_scanner_its_a_campaign/
Subject: Inquiry Regarding Localized GEM Induction via High-Frequency Plasma
https://www.reddit.com/r/netsec/comments/1spgkxy/subject_inquiry_regarding_localized_gem_induction/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Reddit
From the netsec community on Reddit: The Smart TV in Your Living Room Is a Node in the AI Scraping Economy
Posted by AdTemporary2475 - 2 votes and 0 comments
Top Security News for Today
FakeWallet crypto stealer spreading through iOS apps in the App Store
https://securelist.com/fakewallet-cryptostealer-ios-app-store-2/119482/
Built an ARMv4 emulator in JS — write C/C++, run real ARM binaries in the browser
https://www.reddit.com/r/lowlevel/comments/1spuz4n/built-an-armv4-emulator-in-js-write-cc-run-real/
Playing with the LANL ARCS Data Sets
http://diablohorn.com/2026/04/19/playing-with-the-lanl-arcs-data-sets/
Retrocausal capacity of a quantum channel
https://arxiv.org/abs/2509.08965
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
FakeWallet crypto stealer spreading through iOS apps in the App Store
https://securelist.com/fakewallet-cryptostealer-ios-app-store-2/119482/
Built an ARMv4 emulator in JS — write C/C++, run real ARM binaries in the browser
https://www.reddit.com/r/lowlevel/comments/1spuz4n/built-an-armv4-emulator-in-js-write-cc-run-real/
Playing with the LANL ARCS Data Sets
http://diablohorn.com/2026/04/19/playing-with-the-lanl-arcs-data-sets/
Retrocausal capacity of a quantum channel
https://arxiv.org/abs/2509.08965
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Securelist
FakeWallet crypto stealer spreading through iOS apps in the App Store
In March 2026, we uncovered more than twenty phishing apps in the Apple App Store masquerading as popular crypto wallets.
Top Security News for Today
British hacker tied to Scattered Spider campaign pleads guilty in $8M scheme
https://therecord.media/hacker-scattered-spider-guilty-plea
FakeWallet crypto stealer spreading through iOS apps in the App Store
https://securelist.com/fakewallet-cryptostealer-ios-app-store/119474/
Cyberattack at French identity document agency may have exposed personal data
https://therecord.media/france-cyberattack-agency-passports
Making opportunistic cyberattacks harder by design
https://www.microsoft.com/en-us/security/blog/2026/04/20/making-opportunistic-cyberattacks-harder-by-design/
Analysis of the April 2026 Booking.com Supply Chain Breach and ClickFix Tactics
https://www.reddit.com/r/netsec/comments/1sr1z4w/analysis_of_the_april_2026_bookingcom_supply/
Vercel Breach Explained: OAuth Risk in AI + SaaS Environment
https://www.reddit.com/r/netsec/comments/1sqvz0w/vercel_breach_explained_oauth_risk_in_ai_saas/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
British hacker tied to Scattered Spider campaign pleads guilty in $8M scheme
https://therecord.media/hacker-scattered-spider-guilty-plea
FakeWallet crypto stealer spreading through iOS apps in the App Store
https://securelist.com/fakewallet-cryptostealer-ios-app-store/119474/
Cyberattack at French identity document agency may have exposed personal data
https://therecord.media/france-cyberattack-agency-passports
Making opportunistic cyberattacks harder by design
https://www.microsoft.com/en-us/security/blog/2026/04/20/making-opportunistic-cyberattacks-harder-by-design/
Analysis of the April 2026 Booking.com Supply Chain Breach and ClickFix Tactics
https://www.reddit.com/r/netsec/comments/1sr1z4w/analysis_of_the_april_2026_bookingcom_supply/
Vercel Breach Explained: OAuth Risk in AI + SaaS Environment
https://www.reddit.com/r/netsec/comments/1sqvz0w/vercel_breach_explained_oauth_risk_in_ai_saas/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
therecord.media
British hacker tied to Scattered Spider campaign pleads guilty in $8M scheme
A British hacker pleaded guilty in U.S. federal court to participating in a sweeping cybercrime campaign that siphoned at least $8 million in cryptocurrency from companies and individuals, federal prosecutors said.
Top Security News for Today
Cloud platform Vercel says company breached through third-party AI tool
https://therecord.media/cloud-platform-vercel-says-company-breached-through-ai-tool
Command Execution via Drag-and-Drop in Terminal Emulators
https://www.reddit.com/r/netsec/comments/1sreolc/command_execution_via_draganddrop_in_terminal/
We analysed almost 100 UK charity websites and found that ~1 in 6 are running vulnerable JavaScript dependencies.
https://www.reddit.com/r/netsec/comments/1srks4e/we_analysed_almost_100_uk_charity_websites_and/
Ukraine busts ‘bot farm’ supplying thousands of fake Telegram accounts to Russian spies
https://therecord.media/ukraine-sbu-busts-bot-farm-supplying-russian-spies
Void Dokkaebi Uses Fake Job Interview Lure to Spread Malware via Code Repositories
https://www.trendmicro.com/en_us/research/26/d/void-dokkaebi-uses-fake-job-interview-lure-to-spread-malware-via-code-repositories.html
Detection strategies across cloud and identities against infiltrating IT workers
https://www.microsoft.com/en-us/security/blog/2026/04/21/detection-strategies-cloud-identities-against-infiltrating-it-workers/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Cloud platform Vercel says company breached through third-party AI tool
https://therecord.media/cloud-platform-vercel-says-company-breached-through-ai-tool
Command Execution via Drag-and-Drop in Terminal Emulators
https://www.reddit.com/r/netsec/comments/1sreolc/command_execution_via_draganddrop_in_terminal/
We analysed almost 100 UK charity websites and found that ~1 in 6 are running vulnerable JavaScript dependencies.
https://www.reddit.com/r/netsec/comments/1srks4e/we_analysed_almost_100_uk_charity_websites_and/
Ukraine busts ‘bot farm’ supplying thousands of fake Telegram accounts to Russian spies
https://therecord.media/ukraine-sbu-busts-bot-farm-supplying-russian-spies
Void Dokkaebi Uses Fake Job Interview Lure to Spread Malware via Code Repositories
https://www.trendmicro.com/en_us/research/26/d/void-dokkaebi-uses-fake-job-interview-lure-to-spread-malware-via-code-repositories.html
Detection strategies across cloud and identities against infiltrating IT workers
https://www.microsoft.com/en-us/security/blog/2026/04/21/detection-strategies-cloud-identities-against-infiltrating-it-workers/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
therecord.media
Cloud platform Vercel says company breached through third-party AI tool
Vercel released a statement acknowledging a breach and warning a “limited subset of customers” that their Vercel credentials were compromised.
Top Security News for Today
AI-powered defense for an AI-accelerated threat landscape
https://www.microsoft.com/en-us/security/blog/2026/04/22/ai-powered-defense-for-an-ai-accelerated-threat-landscape/
Understanding the CVE Ecosystem and NIST’s Changing Role
https://bishopfox.com/blog/understanding-the-cve-ecosystem-and-nists-changing-role
Reverse-engineering a targeted npm supply chain attack with two-stage C2 — full forensic analysis
https://www.reddit.com/r/netsec/comments/1ssmyig/reverseengineering_a_targeted_npm_supply_chain/
New Defense Department cyber strategy imminent, official says
https://therecord.media/defense-cyber-strategy-warfare
North Korean hackers siphon more than $12 million from crypto users in sprawling campaign
https://therecord.media/north-korean-hackers-siphon-12-million-from-crypto-users
UK cyber agency handling four major incidents a week as nation-state attacks surge
https://therecord.media/UK-cyberattacks-ncsc-china
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
AI-powered defense for an AI-accelerated threat landscape
https://www.microsoft.com/en-us/security/blog/2026/04/22/ai-powered-defense-for-an-ai-accelerated-threat-landscape/
Understanding the CVE Ecosystem and NIST’s Changing Role
https://bishopfox.com/blog/understanding-the-cve-ecosystem-and-nists-changing-role
Reverse-engineering a targeted npm supply chain attack with two-stage C2 — full forensic analysis
https://www.reddit.com/r/netsec/comments/1ssmyig/reverseengineering_a_targeted_npm_supply_chain/
New Defense Department cyber strategy imminent, official says
https://therecord.media/defense-cyber-strategy-warfare
North Korean hackers siphon more than $12 million from crypto users in sprawling campaign
https://therecord.media/north-korean-hackers-siphon-12-million-from-crypto-users
UK cyber agency handling four major incidents a week as nation-state attacks surge
https://therecord.media/UK-cyberattacks-ncsc-china
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Microsoft News
AI-powered defense for an AI-accelerated threat landscape
Read how Microsoft is partnering with Anthropic and broader industry to use leading models, paired with our platforms and expertise, to turn AI-driven discovery into protection at scale.
Top Security News for Today
FBI Extracts Deleted Signal Messages from iPhone Notification Database
https://www.schneier.com/blog/archives/2026/04/fbi-extracts-deleted-signal-messages-from-iphone-notification-database.html
Medical data on 500,000 Britons put on sale on Alibaba
https://therecord.media/medical-data-on-500000-britons-put-on-sale-alibaba
House Republicans unveil data privacy law that would override state protections
https://therecord.media/house-republicans-unveil-data-privacy-law-override-state-measures
Trump’s pick for CISA director withdraws from consideration
https://therecord.media/trump-pick-to-lead-cisa-withdraws-from-consideration
China-linked hackers target Mongolian government using Slack, Discord
https://therecord.media/china-linked-hackers-target-mongolian-gov-slack-discord
CISA: US agency breached through Cisco vulnerability
https://therecord.media/cisa-us-agency-breached-cisco-vulnerability-backdoor
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
FBI Extracts Deleted Signal Messages from iPhone Notification Database
https://www.schneier.com/blog/archives/2026/04/fbi-extracts-deleted-signal-messages-from-iphone-notification-database.html
Medical data on 500,000 Britons put on sale on Alibaba
https://therecord.media/medical-data-on-500000-britons-put-on-sale-alibaba
House Republicans unveil data privacy law that would override state protections
https://therecord.media/house-republicans-unveil-data-privacy-law-override-state-measures
Trump’s pick for CISA director withdraws from consideration
https://therecord.media/trump-pick-to-lead-cisa-withdraws-from-consideration
China-linked hackers target Mongolian government using Slack, Discord
https://therecord.media/china-linked-hackers-target-mongolian-gov-slack-discord
CISA: US agency breached through Cisco vulnerability
https://therecord.media/cisa-us-agency-breached-cisco-vulnerability-backdoor
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Schneier on Security
FBI Extracts Deleted Signal Messages from iPhone Notification Database - Schneier on Security
404 Media reports (alternate site): The FBI was able to forensically extract copies of incoming Signal messages from a defendant’s iPhone, even after the app was deleted, because copies of the content were saved in the device’s push notification database….…
Top Security News for Today
Toronto police arrest three in Canada’s first mobile SMS blaster case
https://therecord.media/canada-sms-blaster-cybercriminals
Norway's prime minister proposes ban on social media access for young teens
https://therecord.media/norway-prime-minister-proposes-social-media-ban-for-young-teens
Pentagon grapples with securing AI as it moves toward autonomous warfare
https://therecord.media/pentagon-grapples-with-securing-ai-as-it-moves-towards-autonomous-warfare
ADT says customer data stolen in cyber intrusion
https://therecord.media/ADT-data-breach-cyberattack
What Really Happened In There? A Tamper-Evident Audit Trail for AI Agents
https://www.reddit.com/r/netsec/comments/1suaupb/what_really_happened_in_there_a_tamperevident/
Hiding Bluetooth Trackers in Mail
https://www.schneier.com/blog/archives/2026/04/hiding-bluetooth-trackers-in-mail.html
Cohere Terrarium (CVE-2026-5752) and OpenAI Codex CLI (CVE-2025-59532): a cross-CVE analysis of AI code sandbox escapes
https://www.reddit.com/r/netsec/comments/1suh47t/cohere_terrarium_cve20265752_and_openai_codex_cli/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Toronto police arrest three in Canada’s first mobile SMS blaster case
https://therecord.media/canada-sms-blaster-cybercriminals
Norway's prime minister proposes ban on social media access for young teens
https://therecord.media/norway-prime-minister-proposes-social-media-ban-for-young-teens
Pentagon grapples with securing AI as it moves toward autonomous warfare
https://therecord.media/pentagon-grapples-with-securing-ai-as-it-moves-towards-autonomous-warfare
ADT says customer data stolen in cyber intrusion
https://therecord.media/ADT-data-breach-cyberattack
What Really Happened In There? A Tamper-Evident Audit Trail for AI Agents
https://www.reddit.com/r/netsec/comments/1suaupb/what_really_happened_in_there_a_tamperevident/
Hiding Bluetooth Trackers in Mail
https://www.schneier.com/blog/archives/2026/04/hiding-bluetooth-trackers-in-mail.html
Cohere Terrarium (CVE-2026-5752) and OpenAI Codex CLI (CVE-2025-59532): a cross-CVE analysis of AI code sandbox escapes
https://www.reddit.com/r/netsec/comments/1suh47t/cohere_terrarium_cve20265752_and_openai_codex_cli/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
therecord.media
Toronto police arrest three in Canada’s first mobile SMS blaster case
Canadian police arrested three men over the use of a mobile “SMS blaster,” a device capable of impersonating a cellular tower to send mass phishing messages and disrupt mobile networks.
Top Security News for Today
STIX Visualizer — Threat Intelligence Graph Explorer
https://www.reddit.com/r/netsec/comments/1sv17v2/stix_visualizer_threat_intelligence_graph_explorer/
Large-scale security audit of 1,764 "vibe-coded" apps: 7% have wide-open Supabase DBs, 15% of Bolt apps ship hardcoded API keys, plus IDOR and zero-auth APIs
https://www.reddit.com/r/netsec/comments/1sv6gty/largescale_security_audit_of_1764_vibecoded_apps/
Attempting to evade an AI SOC with offensive agents
https://www.reddit.com/r/netsec/comments/1svfqfe/attempting_to_evade_an_ai_soc_with_offensive/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
STIX Visualizer — Threat Intelligence Graph Explorer
https://www.reddit.com/r/netsec/comments/1sv17v2/stix_visualizer_threat_intelligence_graph_explorer/
Large-scale security audit of 1,764 "vibe-coded" apps: 7% have wide-open Supabase DBs, 15% of Bolt apps ship hardcoded API keys, plus IDOR and zero-auth APIs
https://www.reddit.com/r/netsec/comments/1sv6gty/largescale_security_audit_of_1764_vibecoded_apps/
Attempting to evade an AI SOC with offensive agents
https://www.reddit.com/r/netsec/comments/1svfqfe/attempting_to_evade_an_ai_soc_with_offensive/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Reddit
From the netsec community on Reddit: STIX Visualizer — Threat Intelligence Graph Explorer
Explore this post and more from the netsec community
❤1
Top Security News for Today
Thinking Outside The Box: New Attack Surfaces in Sandboxed AI Agents
https://www.reddit.com/r/netsec/comments/1swr12y/thinking_outside_the_box_new_attack_surfaces_in/
MCPwned: a Burp Suite extension for auditing MCP servers
https://www.reddit.com/r/netsec/comments/1swxhu6/mcpwned_a_burp_suite_extension_for_auditing_mcp/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Thinking Outside The Box: New Attack Surfaces in Sandboxed AI Agents
https://www.reddit.com/r/netsec/comments/1swr12y/thinking_outside_the_box_new_attack_surfaces_in/
MCPwned: a Burp Suite extension for auditing MCP servers
https://www.reddit.com/r/netsec/comments/1swxhu6/mcpwned_a_burp_suite_extension_for_auditing_mcp/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Reddit
From the netsec community on Reddit: Thinking Outside The Box: New Attack Surfaces in Sandboxed AI Agents
Posted by youmarye - 1 vote and 0 comments
Top Security News for Today
MCPwned: a Burp Suite extension for auditing MCP servers
https://www.reddit.com/r/netsec/comments/1swxhu6/mcpwned_a_burp_suite_extension_for_auditing_mcp/
Medieval Encrypted Letter Decoded
https://www.schneier.com/blog/archives/2026/04/medieval-encrypted-letter-decoded.html
27th April – Threat Intelligence Report
https://research.checkpoint.com/2026/27th-april-threat-intelligence-report/
[arXiv] Enhancing REST API Fuzzing with Access Policy Violation Checks and Injection Attacks
https://arxiv.org/abs/2604.22001
Hackers impersonate Microsoft Teams help desk to breach corporate networks
https://therecord.media/microsoft-teams-hackers-mandiant
Context windows are breaking multi-agent security workflows
https://www.reddit.com/r/netsec/comments/1sx3eav/context_windows_are_breaking_multiagent_security/
Italy extradites alleged Chinese state hacker to US
https://therecord.media/chinese-hacker-italy-extradited
Disinformation campaign targeted Tibetan parliament-in-exile elections
https://therecord.media/disinformation-campaign-targeted-tibetan-elections
Money launderer for crypto thieves given 5-year sentence
https://therecord.media/cryptocurrency-launderer-sentenced-californai
Tennessee becomes second state to ban cryptocurrency ATMs over scam concerns
https://therecord.media/tennessee-bans-cryptocurrency-atms-over-scams
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
MCPwned: a Burp Suite extension for auditing MCP servers
https://www.reddit.com/r/netsec/comments/1swxhu6/mcpwned_a_burp_suite_extension_for_auditing_mcp/
Medieval Encrypted Letter Decoded
https://www.schneier.com/blog/archives/2026/04/medieval-encrypted-letter-decoded.html
27th April – Threat Intelligence Report
https://research.checkpoint.com/2026/27th-april-threat-intelligence-report/
[arXiv] Enhancing REST API Fuzzing with Access Policy Violation Checks and Injection Attacks
https://arxiv.org/abs/2604.22001
Hackers impersonate Microsoft Teams help desk to breach corporate networks
https://therecord.media/microsoft-teams-hackers-mandiant
Context windows are breaking multi-agent security workflows
https://www.reddit.com/r/netsec/comments/1sx3eav/context_windows_are_breaking_multiagent_security/
Italy extradites alleged Chinese state hacker to US
https://therecord.media/chinese-hacker-italy-extradited
Disinformation campaign targeted Tibetan parliament-in-exile elections
https://therecord.media/disinformation-campaign-targeted-tibetan-elections
Money launderer for crypto thieves given 5-year sentence
https://therecord.media/cryptocurrency-launderer-sentenced-californai
Tennessee becomes second state to ban cryptocurrency ATMs over scam concerns
https://therecord.media/tennessee-bans-cryptocurrency-atms-over-scams
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Reddit
From the netsec community on Reddit: MCPwned: a Burp Suite extension for auditing MCP servers
Explore this post and more from the netsec community
Top Security News for Today
Ukrainian police detain hackers suspected of stealing thousands of Roblox accounts for resale
https://therecord.media/ukraine-police-detain-hackers-suspected-of-stealing-roblox-accounts
Video site Vimeo blames security incident on Anodot breach
https://therecord.media/vimeo-blames-security-incident-on-anodot-breach
Cyber Command, NSA chief warns foreign adversaries likely to target midterms
https://therecord.media/cyber-command-nsa-chief-midterm-election-threat
What Anthropic’s Mythos Means for the Future of Cybersecurity
https://www.schneier.com/blog/archives/2026/04/what_anthropics_mythos_means_for_the_future_of_cybersecurity.html
VECT: Ransomware by design, Wiper by accident
https://research.checkpoint.com/2026/vect-ransomware-by-design-wiper-by-accident/
Simplifying AWS defense with Microsoft Sentinel UEBA
https://www.microsoft.com/en-us/security/blog/2026/04/28/simplifying-aws-defense-microsoft-sentinel-ueba/
89 vulnerabilities in XAPI / Citrix XenServer
https://www.reddit.com/r/netsec/comments/1sxtz42/89_vulnerabilities_in_xapi_citrix_xenserver/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Ukrainian police detain hackers suspected of stealing thousands of Roblox accounts for resale
https://therecord.media/ukraine-police-detain-hackers-suspected-of-stealing-roblox-accounts
Video site Vimeo blames security incident on Anodot breach
https://therecord.media/vimeo-blames-security-incident-on-anodot-breach
Cyber Command, NSA chief warns foreign adversaries likely to target midterms
https://therecord.media/cyber-command-nsa-chief-midterm-election-threat
What Anthropic’s Mythos Means for the Future of Cybersecurity
https://www.schneier.com/blog/archives/2026/04/what_anthropics_mythos_means_for_the_future_of_cybersecurity.html
VECT: Ransomware by design, Wiper by accident
https://research.checkpoint.com/2026/vect-ransomware-by-design-wiper-by-accident/
Simplifying AWS defense with Microsoft Sentinel UEBA
https://www.microsoft.com/en-us/security/blog/2026/04/28/simplifying-aws-defense-microsoft-sentinel-ueba/
89 vulnerabilities in XAPI / Citrix XenServer
https://www.reddit.com/r/netsec/comments/1sxtz42/89_vulnerabilities_in_xapi_citrix_xenserver/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
therecord.media
Ukrainian police detain hackers suspected of stealing thousands of Roblox accounts for resale
Police said on Monday the victims included both Ukrainian and foreign players whose accounts contained valuable digital items, rare equipment and in-game currency purchased with real money.
Top Security News for Today
Claude Mythos Has Found 271 Zero-Days in Firefox
https://www.schneier.com/blog/archives/2026/04/claude-mythos-has-found-271-zero-days-in-firefox.html
What Should Frontier AI Developers Disclose About Internal Deployments?
https://arxiv.org/abs/2604.23065
CAN-QA: A Question-Answering Benchmark for Reasoning over In-Vehicle CAN Traffic
https://arxiv.org/abs/2604.24935
Prime-Field PINI: Machine-Checked Composition Theorems for Post-Quantum NTT Masking
https://arxiv.org/abs/2604.25878
Semantic Denial of Service in LLM-controlled robots
https://arxiv.org/abs/2604.24790
V.O.I.C.E (Voice, Ownership, Identity, Control, Expression): Risk Taxonomy of Synthetic Voice Generation From Empirical Data
https://arxiv.org/abs/2604.24794
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Claude Mythos Has Found 271 Zero-Days in Firefox
https://www.schneier.com/blog/archives/2026/04/claude-mythos-has-found-271-zero-days-in-firefox.html
What Should Frontier AI Developers Disclose About Internal Deployments?
https://arxiv.org/abs/2604.23065
CAN-QA: A Question-Answering Benchmark for Reasoning over In-Vehicle CAN Traffic
https://arxiv.org/abs/2604.24935
Prime-Field PINI: Machine-Checked Composition Theorems for Post-Quantum NTT Masking
https://arxiv.org/abs/2604.25878
Semantic Denial of Service in LLM-controlled robots
https://arxiv.org/abs/2604.24790
V.O.I.C.E (Voice, Ownership, Identity, Control, Expression): Risk Taxonomy of Synthetic Voice Generation From Empirical Data
https://arxiv.org/abs/2604.24794
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Schneier on Security
Claude Mythos Has Found 271 Zero-Days in Firefox - Schneier on Security
That’s a lot. No, it’s an extraordinary number: Since February, the Firefox team has been working around the clock using frontier AI models to find and fix latent security vulnerabilities in the browser. We wrote previously about our collaboration with Anthropic…