Latest IT News, Cybersecurity Alerts & Tech Innovations

Fake Claude AI Site Spreads PlugX RAT via DLL Sideloading

Cybercriminals are distributing PlugX remote access trojan through fake Anthropic Claude AI websites using sophisticated DLL sideloading techniques.

APT37 Deploys RokRAT via Facebook Social Engineering

North Korean APT37 hackers use Facebook friend requests to deliver RokRAT malware through sophisticated social engineering attacks.

Marimo RCE Flaw Under Active Attack Hours After Disclosure

Critical pre-authentication remote code execution vulnerability in Marimo notebook platform exploited for credential theft within hours of public disclosure.

Adobe Patches Critical Acrobat Reader Zero-Day Under Attack

Adobe released emergency patches for CVE-2026-34621, a critical Acrobat Reader vulnerability actively exploited by attackers worldwide.

UK-Led Operation Exposes 20,000 Crypto Fraud Victims

International law enforcement operation coordinated by UK's National Crime Agency identifies over 20,000 cryptocurrency fraud victims across three countries.

Iranian Hackers Target Thousands of Rockwell PLCs in US Grid

Iranian-linked threat groups are actively targeting thousands of exposed Rockwell Automation programmable logic controllers across US critical infrastructure networks.

CPUID Website Compromised: CPU-Z Downloads Serve Malware

Attackers compromised CPUID's API to replace legitimate CPU-Z and HWMonitor downloads with malicious executables on the official website.

Storm-2755 Hackers Target Canadian Payroll Systems

Storm-2755 threat group hijacks Canadian employee accounts to steal salary payments through sophisticated payroll system attacks.

Windows 11 Update Issues Persist Despite Clean Documentation

Microsoft's official documentation claims Windows 11 has no known issues, but users continue reporting post-update glitches across multiple system configurations.

Chrome 147 Patches 60 Vulnerabilities Including Critical WebML Flaws

Google releases Chrome 147 with fixes for 60 security vulnerabilities, including two critical WebML component flaws worth $86,000 in bug bounties.

Gmail E2EE Now Available on All Android and iOS Devices

Google enables end-to-end encryption for Gmail on mobile devices, allowing enterprise users to secure emails without additional tools.

LucidRook Malware Targets Taiwan NGOs in Spear-Phishing Attacks

Chinese threat actors deploy new Lua-based LucidRook malware against Taiwanese NGOs and universities through sophisticated spear-phishing campaigns.

VENOM PhaaS Platform Targets C-Suite Credentials

Threat actors deploy VENOM phishing-as-a-service platform to steal executive credentials across multiple industries through sophisticated social engineering campaigns.

Zero-Day Windows Exploit Released by Disgruntled Researcher

Security researcher 'Chaotic Eclipse' published proof-of-concept code for an undisclosed Windows zero-day vulnerability enabling local privilege escalation attacks.

ChipSoft Healthcare Software Hit by Ransomware Attack

Dutch healthcare software vendor ChipSoft suffered a ransomware attack forcing offline services for patients and healthcare providers.

Chrome 146 Adds Device Bound Session Credentials on Windows

Google deploys Device Bound Session Credentials in Chrome 146 for Windows to prevent malware from stealing authentication cookies.

EngageLab SDK Flaw Exposed Millions of Crypto Wallets

Microsoft discovered a critical vulnerability in EngageLab SDK that allowed Android apps to bypass security sandboxes and access cryptocurrency wallet data.

Smart Slider 3 Pro Plugin Hijacked via Supply Chain Attack

Attackers compromised the Smart Slider 3 Pro plugin update system, pushing malicious backdoors to WordPress and Joomla sites worldwide.

Apple Patches iOS 26.4.1 iCloud Sync Bug

Apple released iOS 26.4.1 and iPadOS 26.4.1 on April 8, 2026 to fix critical iCloud data syncing failures affecting third-party apps.

Microsoft Replaces Copilot with AI Writing Tools in Notepad

Microsoft begins reducing Copilot's presence on Windows 11 by introducing AI-powered writing tools in Notepad for Windows Insiders.

Xbox Edge Browser Gets Major Security Enhancement

Microsoft's Edge browser on Xbox consoles receives a significant security update that addresses multiple vulnerabilities affecting gaming sessions.