Cloud platform Vercel says company breached through third-party AI tool Vercel released a statement acknowledging a breach and warning a “limited subset of customers” that their Vercel credentials were compromised.

Cloud platform Vercel says company breached through third-party AI tool

Vercel released a statement acknowledging a breach and warning a “limited subset of customers” that their Vercel credentials were compromised.

Panasonic creates device-locked QR codes for biometrics : Admins are tired of taking photos, so this enables secure on-site unattended enrolment

Panasonic creates device-locked QR codes to speed facial biometric capture

Admins are tired of taking photos, so this enables secure on-site unattended enrolment

Japanese industrial giant Panasonic has created a new form of QR code it says will only work on designated devices and environments.…

Iran claims US used backdoors in networking equipment : And China is loving it

Iran claims US used backdoors to knock out networking equipment during war

And China is loving it

Iranian media is claiming that the US used backdoors and/or botnets to disable networking equipment during the current war, and Chinese state media is dining out on the allegations.…

Crypto infrastructure company blames $290 million theft on North Korean hackers A theft of nearly $300 million worth of cryptocurrency has been attributed to hackers from North Korea, as the industry grapples with the fallout of a wide-ranging incident involving multiple prominent platforms.

Crypto infrastructure company blames $290 million theft on North Korean hackers

A theft of nearly $300 million worth of cryptocurrency has been attributed to hackers from North Korea, as the industry grapples with the fallout of a wide-ranging incident involving multiple prominent platforms.

Elon Musk fails to appear for questioning by French police over sexualized AI images on X Musk, the billionaire owner of X, and the company's chief executive Linda Yaccarino had both been summoned for voluntary interviews with police on April 20 in Paris.

Elon Musk fails to appear for questioning by French police over sexualized AI images on X

Musk, the billionaire owner of X, and the company's chief executive Linda Yaccarino had both been summoned for voluntary interviews with police on April 20 in Paris.

Cyberattack at French identity document agency may have exposed personal data A cyberattack targeting a French government website used to manage identity documents and driver’s licenses may have exposed users’ personal data, the Interior Ministry said.

Cyberattack at French identity document agency may have exposed personal data

A cyberattack targeting a French government website used to manage identity documents and driver’s licenses may have exposed users’ personal data, the Interior Ministry said.

Bluesky blames app outage on ‘sophisticated’ DDoS attack The decentralized social network said the incident began on April 15, when the company received reports of intermittent outages affecting the app.

Bluesky blames app outage on ‘sophisticated’ DDoS attack

The decentralized social network said the incident began on April 15, when the company received reports of intermittent outages affecting the app.

Nevada police may be tracking your phone's location without a warrant. Here's how. Nevada quietly signed an agreement earlier this year with a company that collects location data from cellphones, allowing police to track a device virtually in real time — all without a warrant.

apnews.com/article/neva...

Microsoft releases Windows Server update to fix April update : Out-of-band or out of control?

Microsoft releases Windows Server update fix to fix its April update fixes

Out-of-band or out of control?

Microsoft has pushed out an out-of-band update to address the restart loop that hit some Windows Server devices after its April update.…

British hacker tied to Scattered Spider campaign pleads guilty in $8M scheme A British hacker pleaded guilty in U.S. federal court to participating in a sweeping cybercrime campaign that siphoned at least $8 million in cryptocurrency from companies and individuals, federal prosecutors said.

British hacker tied to Scattered Spider campaign pleads guilty in $8M scheme

A British hacker pleaded guilty in U.S. federal court to participating in a sweeping cybercrime campaign that siphoned at least $8 million in cryptocurrency from companies and individuals, federal prosecutors said.

Researchers Say Fiverr Left User Files Open to Google Search Private Fiverr user documents, including tax records and IDs, were reportedly found in Google search results due to a storage configuration issue.

hackread.com/fiverr-left-...

French cops free mother and son after crypto kidnapping : Latest in a string of cases that have earned France an unfortunate title

www.theregister.com/2026/04/15/c...

US tech firms successfully lobbied EU to keep datacentre emissions secret Legally questionable confidentiality clause adopted almost word for word from demands of Microsoft and trade groups

www.theguardian.com/technology/2...

Four arrested in latest ‘PowerOFF’ DDoS-for-hire takedown More than 20 countries participated in a coordinated takedown of platforms selling cheap access to distributed denial-of-service (DDoS) attacks.

Four arrested in latest ‘PowerOFF’ DDoS-for-hire takedown

More than 20 countries participated in a coordinated takedown of platforms selling cheap access to distributed denial-of-service (DDoS) attacks.

Ukraine confirms suspected APT28 campaign targeting prosecutors, anti-corruption agencies The intrusions exploited vulnerabilities in the open-source Roundcube webmail platform that allow attackers to execute malicious code when a victim simply opens an email in their inbox.

Ukraine confirms suspected APT28 campaign targeting prosecutors, anti-corruption agencies

The intrusions exploited vulnerabilities in the open-source Roundcube webmail platform that allow attackers to execute malicious code when a victim simply opens an email in their inbox.

What is Anthopic's Claude Mythos and what risks does it pose? The company's claim the AI tool can outperform humans at some hacking and cyber-security tasks has sparked fears in the financial world.

What is Claude Mythos and what risks does it pose?

https://ift.tt/w7Rsd4A

The company claims the AI tool can outperform humans at some hacking and cyber-security tasks.

via BBC News https://ift.tt/5WhqolR

April 17, 2026 at 09:38AM

In defeat for Trump, House extends electronic spying program for just 10 days The House passed stopgap legislation to extend a warrantless government surveillance power for 10 days, following a failed lobbying campaign by the Trump administration.

In defeat for Trump, House extends electronic spying program for just 10 days

The House passed stopgap legislation to extend a warrantless government surveillance power for 10 days, following a failed lobbying campaign by the Trump administration.

New Jersey men given lengthy sentences for running North Korean laptop farms The DOJ said Kejia Wang, 42, was sentenced to nine years in prison and Zhenxing Wang, 39, was given a nearly eight-year sentence for an operation that generated more than $5 million for the government of North Korea.

New Jersey men given lengthy sentences for running North Korean laptop farms

The DOJ said Kejia Wang, 42, was sentenced to nine years in prison and Zhenxing Wang, 39, was given a nearly eight-year sentence for an operation that generated more than $5 million for the government of North Korea.

Airbnb Hosts Don't Want to Talk to Guests Anymore, Are Outsourcing Messages to AI An entire industry of companies offers Airbnb hosts AI to speak to guests on their behalf. 404 Media poked around the industry after one AI tool offered a guest a recipe for French toast.

Airbnb Hosts Don't Want to Talk to Guests Anymore, Are Outsourcing Messages to AI www.404media.co/airbnb-hosts...

Cargo thieving hackers running sophisticated remote access campaigns, researchers find Losses from cargo theft in North America rose to $6.6 billion in 2025, driven largely by digital attacks, according to the fleet management company Geotab.

Cargo thieving hackers running sophisticated remote access campaigns, researchers find

Losses from cargo theft in North America rose to $6.6 billion in 2025, driven largely by digital attacks, according to the fleet management company Geotab.

Ukrainian emergency services and hospitals hit by espionage campaign using new AgingFly malware Hackers have targeted Ukrainian hospitals and local government bodies in a new espionage campaign using a malware tool dubbed AgingFly, researchers say.

Ukrainian emergency services and hospitals hit by espionage campaign using new AgingFly malware

Hackers have targeted Ukrainian hospitals and local government bodies in a new espionage campaign using a malware tool dubbed AgingFly, researchers say.

NIST to limit work on CVE entries as submissions surge NIST said it will only add details and information to the records of vulnerabilities that meet a certain threshold — changing a longstanding mission to categorize every CVE, which stands for cybersecurity vulnerabilities and exposures.

NIST to limit work on CVE entries as submissions surge

NIST said it will only add details and information to the records of vulnerabilities that meet a certain threshold — changing a longstanding mission to categorize every CVE, which stands for cybersecurity vulnerabilities and exposures.

Teen arrested in Northern Ireland over cyberattack on school network A 16-year-old boy has been arrested in Northern Ireland after a cyberattack disrupted access to educational systems used by potentially hundreds of thousands of students.

Teen arrested in Northern Ireland over cyberattack on school network

A 16-year-old boy has been arrested in Northern Ireland after a cyberattack disrupted access to educational systems used by potentially hundreds of thousands of students.

Autovista blames ransomware for service disruption : Some customer orgs tell staff to block inbound email from the provider

Automotive data biz Autovista blames ransomware for service disruption

Some customer orgs tell staff to block inbound email from the provider

Autovista confirms that it called in outside support to help clean up a ransomware infection currently affecting systems in Europe and Australia.…

UK warns businesses to address cyber risks amid Anthropic AI panic The British government warned businesses to strengthen their cyber defenses amid concerns prompted by the release of Anthropic's Mythos over how artificial intelligence could reshape the threat landscape.

UK warns businesses to address cyber risks amid Anthropic AI panic

The British government warned businesses to strengthen their cyber defenses amid concerns prompted by the release of Anthropic's Mythos over how artificial intelligence could reshape the threat landscape.

Educational company McGraw Hill says Salesforce misconfiguration led to data leak The data breach emerged this weekend when the ShinyHunters cybercriminal organization claimed to have stolen 45 million Salesforce records and threatened to leak the information by April 14 if a ransom was not paid.

Educational company McGraw Hill says Salesforce misconfiguration led to data leak

The data breach emerged this weekend when the ShinyHunters cybercriminal organization claimed to have stolen 45 million Salesforce records and threatened to leak the information by April 14 if a ransom was not paid.

Sweden says pro-Russian hackers attempted to breach thermal power plant A suspected pro-Russian hacker group attempted to disrupt operations at a thermal power plant in western Sweden last year, a Swedish defense official said.

Sweden says pro-Russian hackers attempted to breach thermal power plant

A suspected pro-Russian hacker group attempted to disrupt operations at a thermal power plant in western Sweden last year, a Swedish defense official said.

Raspberry Pi OS ends open-door policy for sudo : Command prefix will require password by default

Raspberry Pi OS ends open-door policy for sudo

Command prefix will require password by default

The latest version of Raspberry Pi OS now requires a password for sudo by default.…

UK told its Big Tech habit is now a national security risk : Open Rights Group says years of reliance on US giants have left Britain exposed

UK told its Big Tech habit is now a national security risk

Open Rights Group says years of reliance on US giants have left Britain exposed

Britain has spent years wiring its public sector into US Big Tech, and a new report says that dependence could quickly become a national security headache.…

Virginia enacts ban on precise geolocation data sales as momentum for similar prohibitions builds The legislation bars the sale of geolocation within a 1,750 foot radius, a buffer large enough to keep data brokers from pinpointing where consumers live, work, worship, shop and otherwise travel.

therecord.media/virginia-ena...