Cyber Security News


  • Apple fixes iOS bug that kept deleted notifications, including chat previews

    April 23, 2026

    Apple has released a software update that deals with an issue that could allow deleted notifications to be retrieved. Something that, in at least one reported case, was used by law enforcement during forensic analysis. Apple fixed the issue in iOS and iPadOS versions 18.7.8 and 26.4.2 (check availability for your device at those links). The ...

  • Stolen medical data from 500,000 UK volunteers advertised for sale on a Chinese website

    April 23, 2026

    Health information belonging to 500,000 people in the United Kingdom has been stolen and offered for sale on the Chinese website Alibaba, the UK’s technology minister Ian Murray has confirmed. The medical data comes from participants of UK Biobank, the world’s most comprehensive dataset of biological, health, and lifestyle information, compiled from volunteers and used by ...

  • France confirms data breach at government agency that manages citizens’ IDs

    April 22, 2026

    The French government agency that handles the issuing and management of citizens’ identity documents, including national IDs, passports, and immigration documents, confirmed Wednesday that it experienced a data breach. In an announcement, the Agence Nationale des Titres Sécurisés (ANTS) said the data stolen in the breach could include full names, dates and places of birth, mailing ...

  • NATO teams up with Norway and Iceland in world’s largest live-fire cyber defence exercise

    April 22, 2026

    From 21 to 23 April 2026, a NATO team of cyber experts joined forces NATO Allies Norway and Iceland to participate in Exercise Locked Shields from the Norwegian Cyber Command in Lillehammer, Norway. Organized annually by the NATO Cooperative Cyber Defence Centre of Excellence (CCDCOE), Locked Shields is the live-fire largest cyber defence and cyber resilience ...

  • When Wi-Fi Encryption Fails: Protecting Your Enterprise from AirSnitch Attacks

    April 22, 2026

    Enterprises have long trusted Wi-Fi encryption and client isolation to secure their wireless infrastructure. However, Palo Alto conducted research presented at the NDSS Symposium 2026 that reveals that these safeguards can be breached by a novel set of attack techniques that they call AirSnitch. These techniques exploit subtle security issues in protocol-infrastructure interactions to undermine the ...

  • Void Dokkaebi uses fake job interview lure to spread malware via code repositories

    April 21, 2026

    Void Dokkaebi, also tracked as Famous Chollima, is a North Korea-aligned intrusion set that systematically targets software developers who hold cryptocurrency wallet credentials, signing keys, and access to continuous integration/continuous delivery (CI/CD) pipelines and production infrastructure. As previously documented by TrendAI Research, the group poses as recruiters from cryptocurrency and AI firms, luring developers into cloning ...

  • Lotus Wiper: A new threat targeting the energy and utilities sector

    April 21, 2026

    In light of geopolitical tensions that occurred in the Caribbean region in late 2025 and early 2026, artifacts associated with the attack chain of a destructive wiping campaign targeting the energy and utilities sector in Venezuela were identified on a publicly available resource. They were uploaded in mid-December. Two batch scripts are responsible for initiating the ...

  • Adaptavist Group breach spawns imposter emails as ransomware crew claims mega-haul

    April 21, 2026

    UK enterprise software consultancy The Adaptavist Group is investigating a security breach after an intruder logged in with stolen credentials, while a ransomware crew claims it grabbed far more than the company is currently admitting. In a letter to customers, Adaptavist’s CEO Simon Haighton-Williams said the biz detected an “IT security incident” in late March after ...

  • Iran claims US used backdoors to knock out networking equipment during war

    April 21, 2026

    Iranian media is claiming that the US used backdoors and/or botnets to disable networking equipment during the current war, and Chinese state media is dining out on the allegations. Reports from Iran claim hardware made by Cisco, Juniper, Fortinet, and MikroTik either rebooted or disconnected during recent attacks on Iran – despite the regime disconnecting the ...

  • Amtrak data breach exposes 2.1M records, reports suggest larger leak

    April 20, 2026

    Booking a train ticket shouldn’t come with a side of data exposure, but that’s the situation Amtrak customers are now facing. The rail service is dealing with a breach after hackers claimed to have accessed and released millions of customer records online. The exposed dataset was confirmed to contain at least 2.1 million unique accounts, although ...

  • North Korean hackers blamed for $290M crypto theft

    April 20, 2026

    Over the weekend, hackers stole more than $290 million in cryptocurrency from Kelp DAO, a protocol that allows users to earn yields on idle crypto investments. By Monday, LayerZero, one of the projects affected by the hack, accused North Korea of carrying out the heist. The hack is now the largest crypto theft of the year ...