Hot Topic

A distributed denial-of-service attack hit a big user-content platform, sending an amazing 2.45 billion malicious requests in only 5 hours. Security company DataDome stopped the attack right away, so real users face no disruption. Experts looking into the event found that the attack used 1.2 million different IP addresses. The …

Key Points: The UK’s AI Security Institute (AISI) tested OpenAI’s GPT-5.5 and found it can perform cyberattacks like Anthropic’s Claude Mythos Preview. GPT-5.5 is the second model, after Mythos, to fully complete a complicated enterprise attack test. This was done on a network without any active defenses. AISI sees this …

Threat hunters say that the cybercrime group called VECT 2.0 is more like a wiper than ransomware. This is because of a big mistake in how it encrypts files on Windows, Linux, and ESXi systems, making recovery impossible even for the criminals. Check Point Research (CPR) looked at VECT 2.0 …

Jer Crane, the founder of PocketOS, explained how an AI agent delete his company’s production database. The agent, called Claude Opus 4.6 from Anthropic, used a regular access token to wipe out the production database and its backups on a platform called Railway. The founder posted his dilemma on a …

A recent April 2026 report from security expert Himaja Motheram at Censys says that nearly 6 million internet-connected hosts still use the File Transfer Protocol (FTP). This shows a big 40% drop from the 10.1 million servers seen in 2024. This old protocol still brings a risk because many users keep …

Threat actors are exploiting 3 new Windows security flaws in their attacks to get SYSTEM or higher administrator access. Since the beginning of the month, a security expert called “Chaotic Eclipse” or “Nightmare-Eclipse” has shared proof-of-concept exploit code for all three security problems. Two of the flaws, called BlueHammer and RedSun, …

Maine lawmakers have passed a bill that could make it the first ​U.S. state to put a moratorium on new data centers as ‌opposition to the electricity-hungry facilities grows across the country over their impact on household energy bills and the environment. The bill, which still needs final approval from …

Iran’s Islamic Revolutionary Guard Corps (IRGC) targeted the data center and information infrastructure of US company Oracle in the United Arab Emirates, the state-run IRNA news agency reported, but Dubai authorities denied the claim. According to IRNA, the Revolutionary Guard said the Oracle facility in the UAE was targeted in …

India is reportedly preparing to bar Chinese video surveillance giants such as Hikvision, Dahua, and TP-Link from selling internet-connected CCTV cameras and related hardware from April 1. This comes as starting next month, the new certification rules under the Standardisation Testing and Quality Certification (STQC) rule will take effect, making …