AI Deception: How Tech Companies Are Fooling Us

https://www.youtube.com/watch?v=vQChW_jgMMM

US government says security flaw in Chirp Systems’ app lets anyone remotely control smart home locks

https://techcrunch.com/2024/04/22/cisa-chirp-systems-remotely-unlock-smart-locks/

MITRE ATT&CKED: InfoSec's Most Trusted Name Falls to Ivanti Bugs

https://www.darkreading.com/endpoint-security/mitre-attacked-infosecs-most-trusted-name-falls-to-ivanti-bugs

New rules that allow UK law enforcement agencies to seize, destroy, or transfer crypto holdings used for crime before making an arrest take effect

https://www.coindesk.com/policy/2024/04/25/uk-law-enforcement-agencies-can-now-seize-crypto-more-easily-as-new-rules-take-effect/

Feds Bust Privacy-Centric Samourai Wallet Over BTC Money Laundering

https://www.hackread.com/feds-bust-samourai-wallet-btc-money-laundering/

Q-Day approaching: Can Ethereum survive a quantum emergency?

https://cointelegraph.com/news/ethereum-quantum-emergency-cryptography

Cyberattack Strikes Simone Veil Hospital In Cannes, France

https://www.lemondeinformatique.fr/actualites/lire-cannes-cyberattaque-contre-l-hopital-simone-veil-93509.html

Almost every Chinese keyboard app has a security flaw that reveals what users type

https://www.technologyreview.com/2024/04/24/1091740/chinese-keyboard-app-security-encryption/

Google and Apple use passkeys to capture users by locking credentials into their platforms and have made the UX of passkeys worse than that of password managers

https://fy.blackhats.net.au/blog/2024-04-26-passkeys-a-shattered-dream/

ToddyCat APT Is Stealing Data on 'Industrial Scale'

https://www.darkreading.com/cyber-risk/-toddycat-apt-is-stealing-data-on-an-industrial-scale-

It All Went Wrong

https://dailyreckoning.com/what-happened-to-bitcoin/

Popular Keyboard Apps Leak User Data: Billion Potentially Exposed

https://www.hackread.com/keyboard-apps-leak-user-data-billion-exposed/

Microsoft cannot keep its own security in order, so what hope for its add-ons customers?

https://www.theregister.com/2024/04/24/microsoft_security_addons/

Nespresso Domain Serves Up Steamy Cup of Phish, No Cream or Sugar

https://www.darkreading.com/cyberattacks-data-breaches/nespresso-domain-phish-cream-sugar

Source: UnitedHealth's Change Healthcare was compromised on February 12, nine days before the ransomware attack; the company paid a ransom to the hackers

https://www.wsj.com/articles/change-healthcare-hackers-broke-in-nine-days-before-ransomware-attack-7119fdc6?st=f8jgsar36jvj533

5 Attack Trends Organizations of All Sizes Should Be Monitoring

https://www.darkreading.com/threat-intelligence/5-attack-trends-organizations-of-all-sizes-should-be-monitoring

Hackers infect users of antivirus service that delivered updates over HTTP

https://arstechnica.com/security/2024/04/hackers-infect-users-of-antivirus-service-that-delivered-updates-over-http/

UK-based users sue Grindr in the UK for allegedly sharing personal data, such as their HIV status, with ad companies like Localytics from May 2018 to April 2020

https://www.bloomberg.com/news/articles/2024-04-22/grindr-sued-in-london-for-sharing-users-hiv-status-with-ad-firms

N. Korean hackers breached 10 defense contractors in South for months, police say

https://english.hani.co.kr/arti/english_edition/e_national/1137990

How G.M. Tricked Millions of Drivers Into Being Spied On

https://www.nytimes.com/2024/04/23/technology/general-motors-spying-driver-data-consent.html

US charges Iranians with cyber snooping on government, companies

https://www.theregister.com/2024/04/24/iranians_charged_cyber_espionage/

Russian APT28 Exploiting Windows Vulnerability with GooseEgg Tool

https://www.hackread.com/russia-apt28-windows-vulnerability-gooseegg-tool/

Windows vulnerability reported by the NSA exploited to install Russian malware

https://arstechnica.com/security/2024/04/kremlin-backed-hackers-exploit-critical-windows-vulnerability-reported-by-the-nsa/

Cyber attack on a city government in France

https://www.bfmtv.com/grand-lille/la-ville-de-gravelines-victime-d-une-cyberattaque-l-acces-a-internet-restreint-pour-les-services-communaux_AN-202404250886.html

Cyber attack on a traffic management system in Missouri, USA

https://www.facebook.com/MoDOTStatewide/posts/pfbid02MaaK3n3zbZ5ESYYkvD82wEUhasqXZ7gkw6R5oQXyPjL6pZyDbaQnHH1fLgfPu9ppl

Microsoft must take security seriously again by being transparent about breaches and no longer charging subscribers for core security and compliance features

https://www.directionsonmicrosoft.com/members/blog/2024-04-23/microsoft-must-stop-selling-security-premium-offering

Facebook page of the local branch of a political party in Austria hacked

https://www.meinbezirk.at/eisenstadt/c-lokales/hackerangriff-auf-facebookseite-der-spoe-muellendorf_a6653325

Hackers are using developing countries for ransomware practice

https://arstechnica.com/security/2024/04/hackers-are-carrying-out-ransomware-experiments-in-developing-countries/

On April 23, 2024, the cross-chain infrastructure Magpie Protocol @magpieprotocol got exploited for ~$129k belonging to 221 wallets.

https://www.immunebytes.com/blog/list-of-largest-crypto-hacks-in-2024/

Cyberattack Takes Down Kansas City Traffic Cameras And Highway Message Boards

https://www.kansascity.com/news/local/article288018525.html

This Website is Selling Billions of Private Messages of Discord Users

https://www.hackread.com/website-selling-private-messages-of-discord-users/?web_view=true

US prosecutors charge two founders of the Samourai Wallet crypto mixing service, saying it facilitated more than $100M in money laundering transactions

https://www.bloomberg.com/news/articles/2024-04-24/crypto-mixing-service-founders-charged-in-money-laundering-case

Cisco details a hacking campaign that penetrated multiple governments' networks using two zero-day flaws in its VPN and firewall Adaptive Security Appliances

https://www.wired.com/story/arcanedoor-cyberspies-hacked-cisco-firewalls-to-access-government-networks/

Popular File Transfer Software CrushFTP Hit by Zero-Day Exploit

https://www.hackread.com/crushftp-file-transfer-software-zero-day-exploit/

Hackers Publish Fake Story About Ukrainians Attempting To Assassinate Slovak President

https://therecord.media/hackers-breach-news-website-false-article-slovakia-assassination

LA County Health Services: Patients' data exposed in phishing attack

https://www.bleepingcomputer.com/news/security/la-county-health-services-thousands-of-patients-data-exposed-in-email-breach/

El Salvador: Hackers leak code of state Bitcoin wallet

https://cointelegraph.com/news/el-salvador-hacks-leak-state-bitcoin-wallet

Mail account of a city government in Belgium hacked

https://www.nieuwsblad.be/cnt/dmf20240425_95228372

Sweden's liquor shelves to run empty this week due to ransomware attack

https://therecord.media/sweden-ransomware-liquor-shortage-skanlog-systembolaget

A municipality in Argentina loses 19 million pesos due to hacker attack

https://canal1.com.ar/ciberataque-a-la-comuna-de-san-agustin-hackearon-y-robaron-20-millones-de-pesos/

Thousands of Qlik Sense Servers Open to Cactus Ransomware

https://www.darkreading.com/cyber-risk/more-than-3-000-qlik-sense-servers-vuln-to-cactus-ransomware-attacks

Website of a Czech news agency hacked

https://www.ctk.cz/novinky/?id=3790

Cyber attack on a logistics company in Sweden

https://e24.no/internasjonal-oekonomi/i/5EJxXE/hackerangrep-kan-gi-tomme-hyller-hos-systembolaget

Kaiser Permanente: Data breach may impact 13.4 million patients

https://www.bleepingcomputer.com/news/security/kaiser-permanente-data-breach-may-impact-134-million-patients/

North Korean Lazarus hacker group using LinkedIn to target and steal assets: Report

https://cointelegraph.com/news/north-korean-lazarus-linkedin-target-steal-assets

Military Tank Manual, 2017 Zero-Day Anchor Latest Ukraine Cyberattack

https://www.darkreading.com/cyberattacks-data-breaches/military-tank-manual-zero-day-ukraine-cyberattack

Cyberattack forces Georgia county to sever connection to state voter registration system

https://www.cnn.com/2024/04/26/politics/georgia-coffee-county-cyberattack-voter-system/index.html

Philippines Pummeled by Assortment of Cyberattacks & Misinformation Tied to China

https://www.darkreading.com/cyberattacks-data-breaches/philippines-pummeled-by-assortment-of-cyberattacks-tied-to-china

Apple users are being locked out of their Apple IDs with no explanation

https://9to5mac.com/2024/04/26/signed-out-of-apple-id-account-problem-password/