New: Trump's proposed FY2027 CISA budget would slash everything from vulnerability scans and security training for critical infrastructure operators to nationwide stakeholder outreach and engagement and governmentwide shared services. My story: www.cybersecuritydive.com/news/cisa-tr...

Russian internet freedom deteriorates to historic levels, with Russia's internet freedom score falling to a lowly 4/100, on par with China and Iran, and only surpassed by the DPRK's 0/100 www.cloudwards.net/internet-cen...

FBI warns of Iranian cyberattacks on PLCs PDF: www.ic3.gov/CSA/2026/260...

Russian espionage group APT28 compromised MikroTik and TP-Link routers to redirect traffic for certain authentication operations to AitM phishing kits This botnet was taken down today by the FBI, DOJ, Lumen, and Microsoft www.lumen.com/blog-and-new...

ComfyUI and Flowise servers are seeing some active exploitation these days Censys: censys.com/blog/comfyui... VulnCheck: www.linkedin.com/feed/update/...

FBI's yearly cybercrime report is out Cybercrime losses passed $20b last year PDF: www.ic3.gov/AnnualReport...

A threat actor is abusing misconfigured ComfyUI backends to deploy cryptocurrency miners on high-capacity cloud servers. Compromised systems are also enrolled in a proxy network. Censys says the attacker is also exploiting Redis databases in a separate campaign. censys.com/blog/comfyui...

I think this is a good precautionary analysis but I’d bet huge amounts of money against a relevant quantum computer by 2029 or even 2035.

unsurprisingly, this is just AWS shitting the bed again maybe letting one company host the whole internet isn't a great idea

Convicted spyware maker Bryan Fleming avoids jail at sentencing https://techcrunch.com/2026/04/06/convicted-spyware-maker-bryan-fleming-avoids-jail-at-sentencing/

Is the BKA under a DDoS after doxing him?

Telegram's AI editor corrects you.

Trump just said "Militarily, one of the best Easters ever." In case we're keeping track of the whole Christ part of Christianity.

-New Cambodian law will put scam compound operators in prison for life -Italy's top museum moves high-value items to bank vaults after hack; -Exploitation wave targets Vite apps and sites; -Supply chain attack at BuddyBoss Newsletter: news.risky.biz/risky-bullet... Podcast: risky.biz/RBNEWS547/

-US Army reduces mandatory cybersecurity training -White House cuts $700m from CISA's budget -Employee hacks and extorts employer -Fruitfly malware dev released from jail -Device code phishing kits proliferate -Major open-source devs targeted by North Korean hackers -Nova RaaS interview

For Riddle Russia, @ruboyinthehood.bsky.social does a weekly Russian economic news analysis. Today's piece clearly states that extra Iran-related oil cash is not fixing the many war-related problems. Russian economy is in recession that is only going to get worse. ridl.io/off-the-rails/

⚠️ Update: #Iran's internet blackout is now the longest nation-scale internet shutdown on record in any country, exceeding all other comparable incidents in severity having entered its 37th consecutive day after 864 hours.

Germany Doxes “UNKN,” Head of RU Ransomware Gangs REvil, GandCrab as 31-year-old Russian Daniil Maksimovich Shchukin krebsonsecurity.com/2026/04/germ...

-New Cambodian law will put scam compound operators in prison for life -Italy's top museum moves high-value items to bank vaults after hack; -Exploitation wave targets Vite apps and sites; -Supply chain attack at BuddyBoss Newsletter: news.risky.biz/risky-bullet... Podcast: risky.biz/RBNEWS547/

In Copenhagen a few weeks ago, I was shown a Danish app that tells users which products are American, so that they know not to buy them. At the time it was the most popular app in the country. www.theatlantic.com/ideas/2026/0...

NEW: I spoke to cybersecurity legend Mikko Hyppönen about his decades-long fight against computers viruses first, and then malware — and how computers have gotten safer over time. Mikko also told me why he has decided to now turn his focus to fight another enemy: killer drones.

This is just further proof that women are too emotional for high office.

As Russia is cracking down on the use of Telegram, Whatsapp, and VPNs, citizens are moving to other apps that have an IM and calling feature included, such as KokoaTalk, Duolingo, or dating apps www.kommersant.ru/doc/8533515 In some cases, even smart cat feeders: gubdaily.ru/news/ne-duma...

Four Dutch municipalities have entered a pilot program and will test moving their work infrastructure to a Linux and MyOffice setup -Amsterdam -Ede -Hertogenbosch -Zaanstad vng.nl/nieuws/gemee...

New Fortinet zero-day on Easter eve... precious timing fortiguard.fortinet.com/psirt/FG-IR-...

The Dutch government is developing an anti–phishing filter to help telcos block malicious links The new "Anti Phishing Shield" was tested in a pilot program last year with 200,000 users and blocked more than two million attempts to access malicious sites www.ncsc.nl/nieuws/ruim-...

A GPU-based rowhammer attack achieved root access on a Linux system gpubreach.ca

Here's 20 reasons why BlueSky won't survive the next hour (1/21)

NEW RESEARCH: Yesterday, our team at @domaintools.bsky.social Investigations published a holistic analysis of DPRK malware trajectories, providing a cross-connected understanding of the adversarial landscape in Pyongyang. #infosec #cybersecurity #threatintel dti.domaintools.com/research/dpr...

There's a new unauth remote code execution bug in the CentOS Control Web Panel web hosting toolkit, tracked as CVE-2025-70951, that will need patching in the coming days fenrisk.com/rce-centos-w...

Elastic's security team has released Supply Chain Monitor, an internal tool that monitors top npm and PyPI packages for supply chain compromises, a tool that also caught the recent Axios incident www.elastic.co/security-lab... github.com/elastic/supp...

Someone stored the Doom game in DNS records then used DNS queries to retrieve and load the game into memory

After the EvilTokens PhaaS made some headlines last week for being able to phish M365 device codes, Push Security says there's actually 10 of these phishing kits used in the wild... a new rising trend, with device code phishing going up by 37.5 times this year pushsecurity.com/blog/device-...

Italy's top art museum has moved its top items to secure bank vaults after a cyberattack in February www.ansa.it/sito/notizie...

Trend Micro and Zscaler have published reports looking how threat actors moved rapidly to distribute malware-laced versions of the Claude Code AI agent source code, hours after it leaked online www.trendmicro.com/en_us/resear... www.zscaler.com/blogs/securi...

This campaign is massive and a great reminder that behind your favorite Open Source dependencies are humans too! I was also targeted, lucky that it takes me years to check my inbox 💀

Wanted to warn the #NodeJS community: This campaign is active. Thank you to the maintainers who shared their stories - some of these came frighteningly close. One got all the way to the fake meeting before walking away. The more we talk about this, the harder it is for these attacks to succeed.

Are GitHub Issue comments the new HackerNews comments section? Most large issues are just clueless people arguing and insulting each other about side-topics they have no idea about 😂

Serious internet scan underway targeting Vite-based apps and websites.: isc.sans.edu/diary/32860 Exploits target a bug to bypass blocklists and retrieve files that store creds and tokens: github.com/vitejs/vite/...

A Chinese man behind a residential proxy network has registered a whopping 28 fibre ISPs in the UK Can you guess for what? No traffic originated from them.... (yet) mastodon.social/@spamhaus@in...

Putin and Orban coordinating on a desperate false flag operation that everyone knew was coming.

The US Federal Communications Commission has proposed a $4.5 million fine against Voxbeam for routing robocall scams through its network and failing to implement the US Robocall Mitigation Database allow-list www.fcc.gov/document/fcc...

There's been a supply chain attack at the BuddyBoss WordPress e-learning platform A French threat actor told Claude to use compromised dev credentials to bypass the developer's security measures and upload a backdoored update package to BuddyBoss ctrlaltintel.com/research/Bud...

The US Army has reduced the frequency of mandatory cybersecurity training from once a year to once every five years defensescoop.com/2026/03/31/a...

SparkCat, the Android and iOS malware that uses OCR to steal crypto-wallet seed phrases, has returned with new versions, per a Kaspersky tweet: x.com/kaspersky/st...

Dear journalists, Just because Durov says Russia's bank outage was caused by their attempts to ban VPNs and Telegram doesn't mean it's true. Durov has a history of saying false things. A really long one too!

Polish gov't think tank OSW proposes that the West conduct more offensive cyber operations against Russia to weaken its gov't system & mess with its security services Along with dozens other recommendations to exploit Russia's "weak points" www.osw.waw.pl/pl/publikacj...

actual LOL

President's FY27 budget request drops around $700 million from CISA