Author: Staff Writer

Fast Facts Meta will discontinue its optional end-to-end encrypted Instagram DMs on May 8, 2026, citing low user adoption. Post-deadline, all DMs will revert to standard transport encryption, enabling Meta to access and analyze message data for moderation and legal purposes. The removal of encryption increases risks of data exposure from server breaches, prompting users to export their chats before the cutoff. Privacy advocates criticize the change, urging users to shift sensitive conversations to secure platforms like Signal or WhatsApp. Key Challenge Meta has announced that starting May 8, 2026, Instagram will no longer support its optional end-to-end encrypted direct…

Summary Points Instructure experiences a data breach impacting its Canvas platform, with attackers stealing data from up to 275 million users, though passwords and financial info remain secure. DigiCert revoked around 60 SSL certificates after a malware exploit via customer support, reinforcing controls like MFA to prevent further incidents. Chinese-linked APT group Silver Fox launched a phishing campaign targeting Indian and Russian organizations with malware like ABCDoor and ValleyRAT. The FBI warns of a rise in cyber-enabled cargo theft involving phishing and account hijacking, causing losses of approximately $725 million in 2025. Problem Explained Recently, Instructure, a provider of educational…

Top Highlights Attackers implant CloudZ RAT and a custom plugin "Pheno" to steal credentials, OTPs, and intercept SMS data via abuse of Windows Phone Link app. The intrusion uses a Rust-based dropper and a .NET loader to establish persistence, evade detection, and dynamically execute malicious modules in memory. CloudZ communicates with its C2 servers through layered download methods, rotatable user-agents, and exfiltrates browser and mobile data, enabling remote control and credential theft. Threat, Attack Techniques, and Targets Cisco Talos discovered an active intrusion since at least January 2026. The attacker implanted a Remote Access Tool called CloudZ RAT and a…

Summary Points North Korean hackers are shifting from exploiting code vulnerabilities to conducting long-term social engineering campaigns, gaining trust before deploying malware and compromising wallets without triggering conventional alerts. Ripple and Crypto ISAC are sharing detailed threat data—including domains, wallet addresses, and personal identifiers—to improve early detection and response to insider-driven attacks across the crypto industry. Russian-linked threat actors, such as the Lazarus Group, are behind significant incidents like the Drift and Kelp exploits, resulting in over $500 million in losses and increasingly influencing legal actions and asset seizures. Threat, Techniques, and Targets Ripple has started sharing its internal threat…

Summary Points A new threat targeting government, military, MSPs, and hosting providers in Southeast Asia and other regions exploits CVE-2026-41940 in cPanel, leading to potential remote control compromises. Attackers have used multiple techniques, including a customized exploit chain against an Indonesian defense portal and publicly available PoCs for cPanel, to gain unauthorized access. The threat actor employs advanced tools like AdaptixC2, OpenVPN, Ligolo, and persistence methods to maintain access and exfiltrate sensitive data, including Chinese railway documents. Evidence suggests rapid weaponization of the vulnerability post-disclosure, with reports of mass scanning, brute-force attacks, and deployment of malware such as Mirai and…

Summary Points Widespread Skills Shortage: 95% of cybersecurity professionals report at least one skills gap, with AI, cloud security, and risk assessment being the top areas needing expertise. Challenges in Talent Acquisition: Finding cybersecurity talent is difficult due to the specialized mindset needed, rapid tech changes, and the demanding nature of cybersecurity studies, prompting reliance on in-house training and upskilling. Impact of AI on Security Workforce: AI helps automate tasks but also increases attack volume and complexity, potentially worsening the talent shortage by enabling sophisticated cyberattacks at scale. Strategic Response to Gaps: CISOs see skills shortages as organizational risks, influencing…

Essential Insights Attackers are abusing trusted tools like Windows Defender and system privileges to escalate privileges and conceal activities, making detection difficult. Recent techniques, such as the RedSun proof of concept, demonstrate how attackers can misuse legitimate security workflows to gain SYSTEM-level access. Organizations must enhance monitoring, restrict privileged access, and implement rapid containment measures to mitigate sophisticated, trust-based cyber threats. Threat Overview, Attack Techniques, and Targets Recent research shows that attackers are now using trusted security tools to compromise networks in Australia. These attackers do not rely only on malware; instead, they abuse trusted controls like Windows Defender, built-in…

Fast Facts In 2025, AI-powered tools drastically lowered the barrier to conducting sophisticated cyberattacks, enabling even non-technical individuals to execute large-scale breaches. Cyber threats surged across metrics: malicious packages increased by 735% since 2022, with exploits now occuring within 44 days of vulnerability disclosure—faster than ever. AI advances have enabled attackers to develop exploits in less than two months, often before patches are available, accelerating the attack cycle and increasing severity. To combat this escalating threat, organizations are advised to eliminate entire attack categories—like dependency confusion—by implementing structural defenses such as Chainguard Libraries, which block most malicious packages. The Rise…

Quick Takeaways North Korean hackers are targeting crypto firms through social engineering, insider recruitment, and repeated application attempts after failed background checks, increasing insider access risks. DPRK-linked cyber groups focus on manipulating staff and hiring channels, not just system attacks, to gain insider access and compromise organizational security. Sharing threat intelligence accelerates sector-wide detection and response, helping firms identify suspicious hiring patterns and insider threats before damage occurs. Threat, Attack Techniques, and Targets Ripple has shared North Korean threat intelligence with Crypto ISAC to help crypto firms. The goal is to identify and respond to cyber threats faster. The threat…

Essential Insights Tenable introduces a flexible pricing model for its Tenable One platform, enabling organizations to start at their current level and expand as needed. The new structure addresses AI-driven cybersecurity complexities, providing unified visibility, faster threat prioritization, and simplified procurement. Offers two main packages—Foundation and Advanced—catering to different stages of exposure management, with a ‘count once’ licensing for cost predictability. Designed to help organizations swiftly adapt to evolving threats, the model emphasizes immediate value, scalable insights, and tailored security goals. Making Exposure Management More Accessible and Adaptable Tenable has launched a new flexible pricing model for its Exposure Management…