BreachLock Named Representative Vendor in the 2026 Gartner Market Guide for Adversarial Exposure Validation

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

New York, United States, April 21st, 2026, CyberNewswire BreachLock, a global leader in offensive security, today announced it has been named a representative vendor in the 2026 Gartner Market Guide for Adversarial Exposure Validation.   This recognition marks the first time BreachLock …

The Ungoverned Workforce: Cybersecurity Insiders Finds 92% Lack Visibility Into AI Identities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Washington D.C., USA, April 21st, 2026, CyberNewswire Cybersecurity Insiders, in collaboration with Saviynt, has released new research indicating that AI identities are increasingly operating within core enterprise systems, often without established governance or visibility. The study finds that while 71% …

‘Scattered Spider’ Member ‘Tylerb’ Pleads Guilty

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

A 24-year-old British national and senior member of the cybercrime group “Scattered Spider” has pleaded guilty to wire fraud conspiracy and aggravated identity theft. Tyler Robert Buchanan admitted his role in a series of text-message phishing attacks in the summer …

Hackers Abuse GitHub Issue Notifications to Phish Developers Through Malicious OAuth Apps

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity researchers have uncovered a sophisticated phishing technique that targets software developers by abusing GitHub’s own notification system to deliver malicious OAuth app authorization requests. This attack is particularly dangerous because it uses GitHub’s trusted infrastructure, making it extremely hard …

CISA Warns of Cisco Catalyst SD-WAN Manager Vulnerabilities Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

CISA has added three critical Cisco Catalyst SD-WAN Manager vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, urging federal agencies and organizations to act immediately. All three flaws were added on April 20, 2026, with a tight remediation deadline of …

6000+ Apache ActiveMQ Instances Vulnerable to CVE-2026-34197 Exposed Online

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

More than 6,000 internet-exposed Apache ActiveMQ instances are still vulnerable to CVE-2026-34197. This newly tracked security flaw has now been added to the U.S. Cybersecurity and Infrastructure Security Agency’s Known Exploited Vulnerabilities (KEV) catalog. The exposure data comes from The Shadowserver Foundation, which …

Gentlemen RaaS Attacking Windows, Linux With additional locker written in C for ESXi

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new ransomware-as-a-service (RaaS) operation known as “The Gentlemen” has emerged as a serious threat to corporate networks worldwide. Since appearing around mid-2025, this group has rapidly grown into a well-organized criminal platform, publicly claiming over 320 victims, with most …

AI-Powered Exploitation May Collapse the Patch Window for Defenders

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Artificial intelligence is reshaping cybercrime in ways that defenders can no longer treat as distant or theoretical. New frontier AI models are showing a growing ability to find software flaws, understand attack paths, and help move an intrusion from one …

Claude Code, Gemini CLI, and GitHub Copilot Vulnerable to Prompt Injection via GitHub Comments

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical cross-vendor vulnerability class dubbed “Comment and Control” is a new category of prompt injection attacks that weaponizes GitHub pull request titles, issue bodies, and issue comments to hijack AI coding agents and steal API keys and access tokens directly from …

SideWinder Uses Fake Chrome PDF Viewer and Zimbra Clone to Steal Government Webmail Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A well-known advanced persistent threat group called SideWinder has launched a highly targeted phishing campaign against South Asian government organizations, using a fake Chrome PDF viewer and a pixel-perfect clone of the Zimbra email login portal to steal employee credentials. …