Cyber Alert Security News Daily

Massive scale alert: Researchers uncovered 19 billion compromised passwords in RockYou2024, the largest credential trove ever from 200+ breaches. Only...

• Rockstar Games confirms data breach
• ShinyHunters claims responsibility, issues ultimatum
• Hackers targeting video game companies draws ire
  Gaming sector vulnerable – monitor for leaks.

Critical alert: Marimo's pre-auth RCE (CVE-2026-39987, CVSS 9.3) exploited just 10 hours post-disclosure, with 125 IPs scanning and credential theft...

• Consumer routers average 217 CVEs (2016-2026) vs. enterprise's 18—a 12:1 ratio—led by D-Link (~500), Netgear (~450), TP-Link (~409).
• Critical/High...

• Mythos threat: Anthropic’s model autonomously chains 3-5 vulnerabilities for end-to-end exploits, from discovery to exfiltration.
• Proven attacks:...

Supply-chain vulnerability exposed: ShinyHunters stole authentication tokens from Rockstar's third-party SaaS tool Anodot to access Snowflake data...

BlueHammer zero-day Windows LPE exploit PoC leaked on GitHub during Patch Tuesday – attackers can gain elevated privileges if unpatched. Microsoft urges organizations to prioritize patching now. Harden endpoints against this critical threat.

Urgent Axios risk: CVSS 10 CVE-2026-40175 turns prototype pollution in deps like qs into cloud takeover or RCE—no user input needed. Public PoC...

Key timeline of the breach via third-party Anodot:

• April 11, 2026: ShinyHunters claims access to Rockstar's Snowflake data using stolen Anodot...

AI breakthrough: Anthropic’s Mythos tool uncovered a critical remote code execution flaw (CVE-2026-4747) in FreeBSD’s NFS, embedded in data centers,...

Confirmed Data Breaches

• 🔥 Hallmark Breach: Hallmark suffered a breach on 2026-03-31 via Salesforce, exposing 1,736,520 unique email addresses,...

Early April 2026 sees a surge in breaches leaking credentials and internal data, highlighting needs for monitoring and extortion defenses:

• Rockstar...

Rising risks hit AI dev tools: code injection flaws and accidental exposures.

• MetaGPT vuln: CVE-2026-6110 enables remote code injection in...

Urgent vulnerability alert: CVE-2026-35385 published April 11, 2026, in Microsoft’s Security Update Guide.

• Enterprise impact: Affects systems,...

Critical Adobe Reader flaw exploited in the wild – update now to block PDF-based system takeover.

• Exploited since Dec 2025: Zero-day lets attackers...

Timeline of emerging threat:

• Claim: ShinyHunters breaches Rockstar, threatens data leak (financial details, marketing timelines) unless ransom paid...

Critical alert: Sole Global Admin of space/agri infrastructure tenant reports high-severity breach - unauthorized password change, config files erased...

Even outdated data powers modern scams—here's why ongoing breach monitoring is essential:

• Cybercriminals resell old databases as fresh hacks,...

Legacy D-Link DIR-513 routers face remote buffer overflow via crafted POST to /goform/formSetPassword (curTime arg), CVSS 8.8.

• Public PoC enables...

Gaming sector supply-chain peril: ShinyHunters accessed Rockstar data through third-party Snowflake compromise, via Anodot cloud platform.

• Rockstar...