News that matters, without the noise.

76% of All Crypto Stolen in 2026 Is Now in North Korea

North Korean threat actors are pulling off historic cryptocurrency heists on a yearly, sometimes weekly basis now. AI

Turning 30,000 Findings Into 50 That Matter with Dan Pagel and Brad Hibbert

DSA-6242-1 thunderbird – security update

https://security-tracker.debian.org/tracker/DSA-6242-1

DSA-6240-1 imagemagick – security update

https://security-tracker.debian.org/tracker/DSA-6240-1

Ubuntu infrastructure has been down for more than a day

Servers operated by Ubuntu and its parent company Canonical were knocked offline on Thursday morning and have remained

Malicious Ad for Homebrew Leads to MacSync Stealer, (Fri, May 1st)

Introduction

30,000 Facebook Accounts Hacked via Google AppSheet Phishing Campaign

A newly discovered Vietnamese-linked operation has been observed using a Google AppSheet as a “phishing relay” to distribute

JetBrains security advisory (AV26-412)

<article data-history-node-id="7638" about="/en/alerts-advisories/jetbrains-security-advisory-av26-412" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder

15-year-old detained over French govt agency data breach

French authorities have detained a 15-year-old suspected of selling data stolen in a cyberattack on France Titres (ANTS),

DSA-6197-3 dovecot – regression update

https://security-tracker.debian.org/tracker/DSA-6197-3

Story retracted

BleepingComputer initially published a story about a new data breach at Instructure. Shortly after publication, we determined that

ZDI-26-307: FlowiseAI Flowise Airtable_Agent Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Flowise. Authentication is not required