- Device code phishing emerges as scalable threat to Microsoft 365 and Entra ID access 2026-04-30 08:50 ETCISO.in Research from Barracuda outlines how attackers are exploiting device code authentication to gain persistent access to services such as Microsoft 365 and Entra ID. The technique is becoming more widespread as phishing-as-a-service tools make device code …
- SMS phishing campaign targets Australia & New Zealand 2026-04-30 07:39 SecurityBrief Bitdefender has identified a large SMS phishing campaign targeting consumers in Australia and New Zealand. It uses fake toll and traffic fine messages that imitate trusted transport operators and government agencies. The cyber security company tracked more …
- Vertu Motors lands multi-million payout from JLR cyber-attack 2026-04-30 07:29 City A.M. Thursday 30 April 2026 8:19 am JLR's cyber attack cost £500m (Photo by BEN STANSALL/AFP via Getty Images) Vertu Motors has landed a multi-million pound payout after suffering from the disruption caused by a cyber-attack at Jaguar Landrover. The AIM …
- Cyberattack on NJ School Forces Debt Sale to Cover Stolen Funds 2026-04-30 06:33 Insurance Journal A cyberattack that stole $4.8 million in taxpayer money has spurred a New Jersey suburb to issue short-term debt as officials try to recover the funds. Spotswood, located roughly 40 miles outside New York City, was targeted by hackers last year in a scheme …
- Medical Device Giant Medtronic Hit by Data Breach 2026-04-30 05:14 Image and Data Manager Medical device manufacturer Medtronic has confirmed that an unauthorised party accessed data within its corporate IT systems, triggering incident response protocols and an ongoing investigation into the scope of the breach. Medtronic disclosed the incident …
- Anti‑Ransomware Awareness Day (12 May): Why Australian businesses must shift from prevention to cyber resilience 2026-04-30 04:22 iTWire As organisations become reliant on data to operate reliably and effectively, Anti-Ransomware Awareness Day (12 May) invites businesses to recognise that ransomware has become a real, persistent risk, not just a hypothetical. With Australia experiencing …
- Vermont governor signs bill to combat sextortion 2026-04-30 03:33 WCAX - Vermont MONTPELIER, Vt. (WCAX) - Vermont Governor Phil Scott has signed a law aimed at preventing sexual extortion. The measure signed Tuesday creates a new crime of sexual extortion, making it illegal to threaten to release sexual images to compel someone to do …
- Polymarket Denies Dark Web Claims of a Massive Data Breach Involving 300,000 Records 2026-04-30 02:46 Crypto Economy TL;DR: The prediction market platform called the allegations “complete and utter nonsense” and assured that there was no compromise of its internal systems. The alleged attacker claimed to have obtained 300,000 records, but the company demonstrated that …
- Swedish hacker arrested in Pattaya for hotel data breach scam targeting tourists 2026-04-30 02:46 Pattaya Mail Cyber police arrest a Swedish suspect in Pattaya accused of hacking a hotel database and sending fake payment demands to tourists, highlighting growing concerns over online scams targeting visitors in Thailand. PATTAYA, Thailand – Cyber police have …
- Phishing in contaminated water: Mountain View warns residents of scams after water main breach 2026-04-30 01:58 Mountain View Voice - California A construction crew works at the corner of Cuesta Drive and Bonita Avenue on April 24. Photo by Zoe Morgan. Amid uncertainty surrounding when Mountain View might be able to restore safe drinking water for the dozens of households that have been without it …
- Vimeo Confirms Data Breach After Hackers Access User Database 2026-04-30 01:47 GBHackers Vimeo has officially confirmed a data breach affecting its user database. The security incident did not originate with Vimeo, but rather with Anodot, a third-party analytics vendor used by the video hosting platform. This event highlights the ongoing risks …
- SLOTAGENT Malware Hides API Calls and Strings to Thwart Analysis 2026-04-30 01:47 GBHackers A previously unknown remote access trojan (RAT), dubbed SLOTAGENT, after analyzing a suspicious ZIP archive uploaded from Japan to a public malware repository in early 2026. The malware demonstrates advanced evasion techniques and flexible post- …
- VECT 2.0 Ransomware Wipes Large Files Across Windows, Linux & ESXi 2026-04-30 01:47 GBHackers The “new” VECT 2.0 ransomware is essentially a cross‑platform data wiper that permanently destroys most enterprise files rather than encrypting them for recovery. For any file larger than 131,072 bytes (128 KB), VECT processes four separate chunks using …
- Lazarus Targets macOS Users With New “Mach-O Man” Malware Kit 2026-04-30 01:47 GBHackers Lazarus Group is abusing “ClickFix” social engineering to push a new macOS malware kit dubbed “Mach-O Man,” giving attackers a direct path to credentials, Keychain secrets, and corporate access in fintech and crypto environments. This research is authored …
- Researchers unearth industrial sabotage malware that predated Stuxnet by 5 years 2026-04-30 01:45 CSO The third potential target that matched the rules, Modelo Hidrodinâmico (MOHID), is an open-source water modeling system developed at the Instituto Superior Técnico in Lisbon, Portugal. The software covers hydrodynamics, water quality simulation, sediment …
- Senators Seek Answers to School Tip Line Data Breach 2026-04-30 01:16 Homeland Security Today Sens. Maggie Hassan, D-N.H., and Jim Banks, R-Ind., are seeking answers from school safety company Navigate360 after a hacker said it compromised the company’s tip line platform and exposed sensitive student data. In a letter to the company, the senators …
- Small municipalities 'fairly easy target' for criminals, expert says after RM of Gimli targeted in cyberattack 2026-04-30 01:10 CBC/Radio-Canada Play Listen to this article Estimated 3 minutes The audio version of this article is generated by AI-based technology. Mispronunciations can occur. We are working with our partners to continually review and improve the results. A cybersecurity expert says …
- What Is A DDoS Attack In Cybersecurity? How It Works And How To Prevent It 2026-04-30 01:10 Tech Times A DDoS attack overwhelms a target server or network by flooding it with massive traffic from multiple compromised systems, making legitimate access nearly impossible. These network security threats are often powered by botnets made of hacked devices that …
- Winona County reports data breach from April ransomware attack 2026-04-29 23:59 WKBT - Wisconsin • Cybercriminals released information stolen during Winona County's April 7 ransomware attack • County officials are reviewing with law enforcement to determine what personal information was compromised • Affected individuals will be notified once the …
- CAC denies manipulation of DAAR Communications records after cyber attack 2026-04-29 23:32 Nairametrics The Corporate Affairs Commission has denied allegations that it manipulated the records of DAAR Communications PLC following a recent cyberattack on its system. The Commission disclosed this in a public notice shared on its X page on April 29, 2026. The …
- The latest phishing scam? Fake party invitations. Here’s how to spot them. 2026-04-29 23:11 WBAL - Maryland Who doesn’t love getting invited to a party? Unfortunately, scammers are now exploiting that excitement — and preying on your fear of missing out — with phishing emails disguised as digital invitations. Many of these emails spoof legitimate platforms such …
- Phishing scams continue to target Wisconsin DMV customers 2026-04-29 22:44 Tribune Phonograph - Wisconsin The Wisconsin Department of Transportation (WisDOT) Division of Motor Vehicles (DMV) is warning consumers of another wave of fraud attempts where scammers pretend to be from WisDOT. Some scams dupl...
- New ransomware wipes every file larger than 128 KB 2026-04-29 22:12 Mashable A newly identified ransomware strain is accidentally destroying the very files it's supposed to hold for ransom. And for the victims who end up paying, they're getting nothing back. Cybersecurity firm Check Point Research published findings Tuesday …
- China-Linked Hackers Orchestrate Phishing Campaigns Targeting Journalists and Activists Using Over 100 Malicious Domains 2026-04-29 22:10 FAME Delivered Freelance hackers connected to the Chinese government have executed extensive phishing campaigns, utilizing more than 100 malicious domains to target journalists and opposition activists over a nine-month span. This troubling trend, uncovered through …
- City Of Laramie Issues Warning On Phony Invoice Phishing Scam 2026-04-29 22:06 106.3 NOW FM - Wyoming The City of Laramie is warning the public about an email phishing scam aimed at city residents and business owners. According to a news release, emails that are made to appear to be from the Laramie Community and Economic Development Department are being …
- Ransomware posts rise 22% as leak sites proliferate 2026-04-29 22:06 SecurityBrief ReliaQuest reported a rise in ransomware and cyber extortion activity in the first quarter of 2026, with posts on data-leak sites reaching 2,638. That was up 22% from 2,161 in the same quarter a year earlier, reflecting a more fragmented threat landscape …
- SLOTAGENT Malware Uses API Hashing and Encrypted Strings to Hinder Reverse Engineering 2026-04-29 21:36 Cyber Security News A newly identified malware called SLOTAGENT has drawn attention in the cybersecurity community for its strong ability to resist analysis and avoid detection. The malware does not rely on brute force tactics. Instead, it uses two precise techniques, API …
- Stelia Aerospace hacked in ransomware attack 2026-04-29 21:17 Aviation Business News Cabin equipment manufacturer Stelia Aerospace has been hacked in an apparent ransomware attack. In a statement, Steila confirmed the attack, saying: “Upon detection, we immediately activated our cyber defence protocols and took proactive measures, …
- GrayRobinson Faces More Suits Over 2025 Data Breach 2026-04-29 21:06 Law360 By Adrian Cruz ( April 29, 2026, 3:40 PM EDT) -- After being hit with a proposed class action accusing GrayRobinson PA of negligence following the revelation of a March 2025 data breach, the Florida-based firm is now facing two further suits regarding the …
- Polymarket Rejects Data Breach Claims as Hacker Alleges 300K Records Stolen 2026-04-29 20:00 Hackread A hacker called Xorcat claims to have stolen a massive 300,000 records from Polymarket. It is the world’s largest decentralised cryptocurrency-based prediction market where users bet on world events. The alleged stolen data was posted on a cybercrime forum …
- New AI-Powered Bluekit Phishing Kit Targets Major Platforms with MFA Bypass Attacks 2026-04-29 20:00 Hackread Varonis Threat Labs has discovered a new phishing-as-a-service kit called Bluekit that is making it much easier for cyberattackers to bypass security, even when users have extra protections turned on. This kit is basically like a one-stop shop for hackers …
- New Wave of DPRK Attacks Uses AI-Inserted npm Malware, Fake Firms, and RATs 2026-04-29 20:00 The Hacker News Cybersecurity researchers have discovered malicious code in an npm package after a malicious package as a dependency to the project by Anthropic's Claude Opus large language model (LLM). The package in question is "@validate-sdk/v2," …
- Ransomware Responsible for 90% of Manufacturing Cyber Losses 2026-04-29 19:49 Security Magazine With a critical role in today’s interconnected economy and a low threshold for sustained downtime, the manufacturing sector is an attractive target for cybercriminals due to the potential for widespread impact and increased urgency to pay financial ransoms …
- ‘No data manipulation during cyber attack’ — CAC denies tampering with DAAR records 2026-04-29 19:25 The Cable Stay connected via Google News The Corporate Affairs Commission (CAC) has denied allegations that the records of DAAR Communications Plc were manipulated on its portal following a recent cyberattack, describing the claims as “false and misleading”. The …
- CAC finally speaks on manipulation of firms’ data after cyber attack in Nigeria 2026-04-29 19:13 Daily Post Nigeria’s Corporate Affairs Commission, CAC, has finally reacted to claims that the records of DAAR Communications on its database was manipulated after recent cyber attacks. In a statement on Wednesday, the Commission said the allegation is false and …
- Amtrak data breach exposes millions of customer records 2026-04-29 18:55 WTAT-TV FOX 24 Charleston - South Carolina
- Critical Flaw Turns Vect Ransomware into Data Destroying Wiper 2026-04-29 18:40 Infosecurity Magazine Vect 2.0 ransomware has been found to wipes large, compromised files instead of merely encrypting them, making recovery impossible – even for the attackers. This is due to a critical flaw in the encryption implementation. The bug, likely an unintended …
- Moldova Reports Major Cyberattack on National Medical Database Affecting 30% of Data 2026-04-29 18:32 UNITED24 Media Russian special services have carried out one of the largest cyberattacks on Moldova's healthcare system since the beginning of the year. The strike targeted the national medical database, according to the Center for Countering Disinformation on April …
- The latest phishing scam? Fake party invitations. Here's how to spot them. 2026-04-29 18:32 WCVB Channel 5 Boston - Massachusetts Who doesn't love getting invited to a party? Unfortunately, scammers are now exploiting that excitement — and preying on your fear of missing out — with phishing emails disguised as digital invitations. Many of these emails spoof legitimate platforms …
- illumifin Corporation Data Breach Claims Investigated by Lynch Carpenter 2026-04-29 18:09 EIN Presswire PITTSBURGH, April 29, 2026 (GLOBE NEWSWIRE) -- illumifin Corporation (“illumifin”), a a South Carolina-based insurance technology firm and third-party administrator,1 recently announced a cybersecurity incident, which impacted the personal information of …
- Manitoba community hit by cyberattack 2026-04-29 17:57 CTV News
- Amtrak data breach exposes millions of customer records 2026-04-29 17:27 Fox News Fox News Flash top headlines are here. Check out what's clicking on FoxNews.com. NEWYou can now listen to Fox News articles! Booking a train ticket is usually something most people don't think twice about. Now it could come with real privacy risks …
- Buggy Vect ransomware is effectively a data wiper, researchers find 2026-04-29 16:45 Help Net Security Due to a bug in the ransomware, affiliates of the Vect Ransomware-as-a-Service operation are irretrievably encrypting victims’ data. “Victims who pay the ransom cannot receive a functional decryptor for their most critical files – not because the operator …
- Vect 2.0 Ransomware Acts as Wiper, Thanks to Design Error 2026-04-29 15:55 Dark Reading The latest variant of an emerging ransomware may be far more destructive than its operators intended, acting as a wiper that deletes many of an organization's captured files instead of encrypting them, as typical ransomware does. This scenario makes …
- NeuShield Partners with Data Guards to Deliver Instant Ransomware Recovery for MSP Clients 2026-04-29 15:00 EIN Presswire FREMONT, Calif., April 29, 2026 (GLOBE NEWSWIRE) -- NeuShield, creators of the industry’s first Mirror Shielding™ technology, today announced a strategic partnership with Data Guards, a Canada-based managed service provider (MSP), to deliver instant …
- Customers sue Citizens, Frost over third-party data breach 2026-04-29 14:56 American Banker - New York Key insight: Both banks blame the breach on an unnamed third-party vendor. The lawsuits target the banks anyway. What's at stake: One Citizens complaint goes beyond damages and asks the court to declare the bank's current data security inadequate. …
- Cybercrime Hits Record Scale with 2.86 Billion Credentials Stolen in 2025 as Ransomware Evolves Beyond Extortion, KELA Finds 2026-04-29 14:33 EIN Presswire Tel Aviv, Israel, April 29, 2026 (GLOBE NEWSWIRE) -- [Tel Aviv, Israel – April 29, 2026] — KELA, a global leader in cyber threat intelligence and external threat exposure management, today released The State of Cybercrime 2026: Emerging Threats & …
- Ardmore notifies residents about recent ransomware attack possibly impacting some personal information 2026-04-29 14:14 KXII - Texas ARDMORE, Okla. (KXII) - The City of Ardmore is notifying residents about a recent data security incident that may have impacted personal information of some citizens. The city said that on April 8, it learned that it suffered a ransomware attack on some …
- Polymarket dismisses 'nonsense' claims of data breach by dark web seller 2026-04-29 13:43 Cryptopolitan Polymarket has dismissed claims of a massive data breach by a dark web seller, calling the reports “nonsense.” The threat actor using the handle “xorcat” claimed to have leaked a database affecting over 300K records and an Exploit Kit, containing roughly …
- Australian travellers may be caught up in Euro rail pass data breach 2026-04-29 13:41 9News A European rail pass service frequently used by Australians has faced a massive data breach impacting more than 300,000 travellers. Travellers' private information such as phone numbers, passport numbers, email and home addresses, full names and dates …