Emergency Patch Issued: Adobe Acrobat Reader Zero-Day Under Active Exploitation Since late 2025

Adobe has issued an emergency out-of-band update to address a critical memory corruption vulnerability that allowed threat actors to exfiltrate data from targeted workstations for months. SAN JOSE, CA — Adobe has released emergency security updates for Acrobat and Acrobat Reader to patch a critical zero-day vulnerability, tracked as CVE-2026-34621, which

The Shadow Stream: Inside WebLoc, the Ad-Based Surveillance System Tracking 500M Devices

A joint investigation by Citizen Lab and several news outlets has pulled back the curtain on WebLoc, an Israeli-developed geo-surveillance tool that transforms the global real-time bidding (RTB) ad ecosystem into a high-resolution tracking network for law enforcement. BUDAPEST, HU — While the cybersecurity world has been focused on high-profile spyware

"Password123": Bellingcat Investigation Reveals Massive Credentials Leak for Hungarian Officials

In a staggering display of poor digital hygiene, nearly 800 Hungarian government email accounts — including those belonging to national security and counter-terrorism experts — were found circulating online due to the use of easily guessable passwords. BUDAPEST, HU — Ahead of Hungary's high-stakes parliamentary elections scheduled for April 12, an

Operation Atlantic: Global Task Force Disrupts $45M Crypto Fraud Network, Freezes Millions

In one of the largest coordinated crackdowns on decentralized finance (DeFi) crime to date, the NCA, U.S. Secret Service, and Canadian authorities have identified 20,000 victims and halted a massive multi-national "drainer" scheme. LONDON, UK — A massive international law enforcement effort dubbed Operation Atlantic has successfully

Rockstar Games Confirms Third-Party Breach as ShinyHunters Issues Ransom Ultimatum

The studio behind Grand Theft Auto has confirmed a security incident involving the unauthorized access of corporate data, with the notorious ShinyHunters group claiming responsibility and threatening a massive leak if a ransom is not paid by April 14. NEW YORK, NY — Rockstar Games has confirmed it is investigating a

Hardened Sessions: Google Chrome 146 Rolls Out Hardware-Bound Protection to Kill Cookie Theft

In a significant blow to the infostealer ecosystem, Google has officially integrated Device Bound Session Credentials (DBSC) into Chrome 146, fundamentally changing how authentication cookies are protected on Windows and macOS. MOUNTAIN VIEW, CA — For over a decade, session hijacking has been the "skeleton key" for cybercriminals. By

Integrated Infection: Glassworm Campaign Evolves with "ZigDropper" to Target Developer Environments

A persistent threat cluster known as Glassworm has significantly upgraded its arsenal, deploying a specialized "ZigDropper" to compromise software developers by infecting the very IDEs used to build modern applications. AMSTERDAM, NL — Security researchers have uncovered a major evolution in the tactics of the Glassworm threat campaign. Previously

Supply Chain Sabotage: Popular PC Tools CPU-Z and HWMonitor Hijacked to Distribute Malware

In a sophisticated six-hour window of compromise, the official CPUID website was hijacked to serve malicious payloads to thousands of enthusiasts and IT professionals downloading system monitoring utilities. PARIS, FRANCE — The cybersecurity community is on high alert after CPUID, the developer of the ubiquitous system-profiling tools CPU-Z and HWMonitor, fell

Exposed at the Edge: 4,000 U.S. Industrial Controllers Vulnerable to State-Sponsored Attacks

A new analysis of internet-facing infrastructure has identified nearly 4,000 Industrial Control Systems (ICS) in the United States that remain exposed to cyberattacks, specifically from threat actors targeting critical infrastructure. ANN ARBOR, MI — Security researchers have issued a stark warning after identifying approximately 4,000 industrial control devices — including

Sky-High Risk: Federal Audit Finds FAA Delinquent in Critical Cybersecurity Protections

A sweeping Office of Inspector General (OIG) report has revealed significant "governance and technical weaknesses" within the systems managing U.S. airspace, labeling the FAA’s current security posture as non-compliant with federal standards. WASHINGTON, D.C. — The Federal Aviation Administration (FAA) is facing intense scrutiny following a

Bridging the Moat: U.S. Treasury Grants Crypto Firms Access to Bank-Grade Cyber Intelligence

In a significant policy shift, the Department of the Treasury is expanding its "Project Fortress" initiative to include digital asset firms, providing them with the same high-level threat telemetry previously reserved for traditional tier-one banks. WASHINGTON, D.C. — The U.S. Department of the Treasury has officially opened

The AI Arms Race: OpenAI Counter-Programs Anthropic’s "Mythos" with New Cyber Pilot

As the industry shifts toward "AI-First" defense, the two titans of Silicon Valley are taking different paths to the same goal: automating the discovery and patching of global software vulnerabilities. SAN FRANCISCO, CA — The battle for the future of cybersecurity has entered a restricted phase. Following the bombshell