1h ago
Gmail Dot Alias Fuels Convincing Robinhood Phishing Scam
Scammers exploit Gmail's dot-ignoring feature:
- Create fake Robinhood account with victim's email minus dot (e.g., janesmith@gmail.com for...
••
Cybersecurity News Digest
Created by Jeremy DeRoy
Corporate and consumer cyber security news, threats, breaches, research, and policy updates
Digest Calendar
April 2026Sun
Mon
Tue
Wed
Thu
Fri
Sat
Recent Posts
Explore the latest content tracked by Cybersecurity News Digest
1h ago
Databricks Security Analysis Tool: Deep Dive for SOC 2 & HITRUST Compliance
Enterprise SOC boost: Databricks' Security Analysis Tool, built by field engineers, improves deployment security posture against threats.
- Expert...
1h ago
ShinyHunters' Rampage: Healthcare and Security Firms Leak Millions
ShinyHunters escalates targeting healthcare (Medtronic) and security (ADT) firms via Salesforce exploits, hitting ~40 orgs since January 2026.
-...
1h ago
Safe Dark Web Simulator Exposes Live Cybercrime Markets
New Dark Web Threat Intel Simulator lets you view real-time cybercrime without Tor risks:
- 214+ active forums trading stolen data
- 15.4B leaked...
1h ago
Nigeria 2026: AI Scams Surge, Zero Trust Push, NDPA Hurdles
- Nigeria's digital economy boomed in 2025, but cybercrime exploded with AI-powered scams, ransomware, and identity fraud.
- Organisations struggle to...
1h ago
Emergency Privacy Injunctions: Block Data Threats Preemptively
Key legal tool against privacy threats: Stop exposure of private images, false claims, or sensitive info urgently.
- Harassment protection: Threats...
1h ago
CVE-2026-7220: Remote OS Command Injection in Fastly CLI
Critical vuln in FastlyMCP CLI (fastly-mcp.mjs):
- Manipulation of 'command' argument enables remote OS command injection
- Affects up to commit...
1h ago
Medium-Risk Chrome Flaws Enable Info Disclosure and Security Bypasses
Urgent Chrome update needed: Multiple medium-risk vulnerabilities allow remote attackers to disclose sensitive info and bypass security...
1h ago
26 Fake iOS Apps Target Seed Phrases via Trojan Wallets
App Store crypto risk exposed: 26 counterfeit iOS apps mimicked MetaMask, Ledger, Trust Wallet, Coinbase, TokenPocket, imToken, and Bitpie since fall...
1h ago
Why Boards Doubt Cyber Metrics Despite High Visibility
Boards see cyber risks everywhere – ransomware headlines, regulators, customers – yet 90% lack confidence in cybersecurity value.
Key reasons:
-...
1h ago
Employee Admin Rights: Ransomware's Hidden Master Key
Over-privileged endpoints are fueling most ransomware attacks, as employees hold local admin rights granting master access to the entire...
7h ago
Cosmos Validators Face Node-Lock Risk from CometBFT 0-Day Vulnerability
- 0-Day Disclosure: Researcher Doyeon Park revealed a CVSS 7.1 vulnerability in CometBFT, Cosmos's consensus layer, causing nodes to lock up during...
7h ago
HIPAA No Longer Healthcare's Toughest Regulation
Key insights from healthcare attorney Matt Fisher on evolving compliance challenges:
- HIPAA is 'no longer the hard part' of healthcare regulation;...
7h ago
SANS Guide: CISOs Prep for GenAI Threats & Ransomware
Key strategies from SANS-aligned playbook:
- GenAI attack multipliers: Automate phishing, deepfakes, vuln discovery
- Risk-first approach: Align...
7h ago
Ex-FBI Cyber Chief Urges Terrorism Label for Hospital Ransomware Attacks
- Bold proposal: Former FBI deputy Cynthia Kaiser calls for terrorism designations on ransomware actors targeting hospitals, as they knowingly...
7h ago
UK MP Sir David Davis' Website Hit by China-Traceable DDoS Attack
Key details of the attack on daviddavismp.com:
- Massive DDoS: 142 million requests consuming 800GB data in 24 hours, starting last Thursday.
-...
7h ago
Coinbase Cartel: 100+ Breaches Powered by Old Infostealer Credentials
Coinbase Cartel has claimed over 100 targets since September 2025, using extortion-only tactics—no encryptors.
- Relies on stolen infostealer logs...
7h ago
⚡ Weekly Cyber Threats: Pre-Stuxnet Fast16, FIRESTARTER Backdoor & More
Key highlights from this week's cybersecurity shakeup:
- Fast16 malware predates Stuxnet: Lua-based framework from 2005 targets high-precision...
7h ago
UK Targets Corporate Boards with Cyber Pledge Amid AI Threat Surge
- Just 1% of UK businesses hold Cyber Essentials certification, leaving most exposed to AI-sharpened threats.
- Ministers challenge 200 top execs to...
7h ago
SD Gov. Rhoden Issues Guidance on Officer Privacy Law
South Dakota bolsters law enforcement privacy amid threats:
- HB 1084 lets officers opt out of public personal info sharing.
- Gov. Rhoden & AG...