Illinois Representative Delia Ramirez has been appointed as the top Democrat on the House Homeland Security Committee's Cybersecurity and Infrastructure Protection Subcommittee, replacing Eric Swalwell following his resignation from Congress.
Incident responders at Expel have exposed a North Korean state-linked operation that drained over $12 million in cryptocurrency from 26,584 wallets using fake job offers and multi-strain malware.
Apple pushed out-of-band security updates on April 22, 2026, to address CVE-2026-28950, a Notification Services bug that allowed deleted notifications to persist on iPhone and iPad devices.
Kaspersky researchers uncovered a previously unknown wiper malware called Lotus Wiper that was deployed in destructive attacks against Venezuela's energy and utilities sector, erasing data across physical drives and rendering affected machines unrecoverable.
A 20-year-old known online as HexDex was detained in western France on Monday, suspected of orchestrating roughly 100 data breaches targeting sports federations, government databases, and private firms.
A Mirai-based botnet is actively exploiting CVE-2025-29635, a command injection vulnerability in discontinued D-Link DIR-823X routers that no longer receive security updates. Akamai researchers warn that the attacks mirror a proof-of-concept exploit previously published on GitHub.
More than 1,300 Microsoft SharePoint servers remain unpatched against CVE-2026-32201, a spoofing vulnerability that was exploited as a zero-day before patches arrived and continues to be abused in ongoing attacks.
A surge of attacks targeting a critical unauthenticated RCE flaw in BeyondTrust's Bomgar Remote Support has compromised MSPs and downstream customers, with LockBit ransomware deployed in multiple incidents.
The UK's online safety regulator has launched formal investigations into Telegram, Chat Avenue, and Teen Chat over allegations of child sexual abuse material and grooming facilitation.
A newly identified data-wiping malware called Lotus was used in targeted attacks against Venezuelan energy and utility organizations, leaving systems in an unrecoverable state through multi-stage disk destruction.