A 26-year-old Illinois man was sentenced to 76 months in prison for hacking into over 750 women's Snapchat accounts to steal nude photos.
CISA has added CVE-2025-60710, a Windows Task Host privilege escalation vulnerability patched by Microsoft in November 2025, to its actively exploited vulnerabilities catalog, giving federal agencies two weeks to patch.
Microsoft has confirmed that installing the April 2026 KB5082063 security update can push certain Windows Server 2025 machines into BitLocker recovery mode on first reboot, affecting systems with specific Group Policy configurations.
Siemens, Schneider Electric, Aveva, Rockwell Automation, ABB, Phoenix Contact, Mitsubishi Electric, and Moxa have all published new ICS security advisories, addressing vulnerabilities ranging from critical Wi-Fi flaws to privilege escalation and denial-of-service issues.
A new audit by privacy organization webXray found that 194 online advertising services ignore legally defined opt-out signals under California law, with Google allegedly non-compliant 86% of the time.
Security researchers at Socket uncovered more than 100 malicious Chrome Web Store extensions operating as part of a coordinated campaign to steal Google OAuth2 Bearer tokens, hijack sessions, and commit ad fraud.
Microsoft's April 2026 Patch Tuesday addresses 167 security vulnerabilities, including an actively exploited SharePoint Server zero-day and the publicly disclosed BlueHammer flaw in Windows Defender. Google Chrome and Adobe Reader also received urgent security fixes this cycle.
Crypto exchange Kraken is being extorted by a criminal group threatening to release videos of its internal systems containing client data, following two insider access incidents affecting roughly 2,000 accounts.
Microsoft's April 2026 cumulative updates for Windows 10 and Windows 11 introduce new safeguards against phishing attacks that weaponize Remote Desktop Protocol (.rdp) files, including security warnings and disabled resource redirections by default.
CISA has notified CyberCorps: Scholarship for Service participants that summer 2025 internships are canceled due to a DHS funding lapse, leaving hundreds of cyber scholars in limbo for a second consecutive year.