Latest Intelligence 1195 articles
Spain Busts $4.7M Manga Piracy Ring, Seizes Crypto, Tech Setup
Cybersecurity

Spanish authorities have dismantled what they describe as the largest Spanish-language manga piracy platform, which had illegally generated over $4.7 million in advertising revenue since 2014. The operation led to four arrests, the seizure of $470,000 in cryptocurrency from hidden cold wallets, and the uncovering of a sophisticated technological infrastructure. This major bust also revealed the platform's concerning use of aggressive, often pornographic, pop-up ads, many of which were likely viewed by a significant minor user base.

April 23, 2026 Bleepingcomputer 3 min
Apple Patches iOS Flaw: Deleted Signal Messages Exposed to FBI
Cybersecurity

Apple has rolled out critical patches for iOS and iPadOS, addressing a flaw that allowed forensic extraction of deleted Signal messages by entities like the FBI, even after the secure messaging app had been removed. The vulnerability, tracked as CVE-2026-28950, unexpectedly retained notifications marked for deletion, severely compromising user privacy and the perceived security of encrypted communications. The fix (iOS/iPadOS 26.4.2 and 18.7.8) is designed to prevent future retention and eliminate previously stored sensitive notification data.

April 23, 2026 Thehackernews 4 min
Kyber Ransomware Uses Post-Quantum Encryption to Hit US Defense Contractor
Cybersecurity

A multi-billion-dollar American defense contractor has become the sole listed victim of the emerging Kyber ransomware operation, which distinguishes itself by deploying a variant that implements Kyber1024 post-quantum encryption. Cybersecurity firm Rapid7 recently uncovered two distinct Kyber variants, one targeting Windows systems with this novel cryptographic feature and another for VMware ESXi environments, both used in a coordinated attack on the defense sector victim.

April 23, 2026 Bleepingcomputer 3 min
Sponsored
Critical Mirai Botnet Exploit Targets EoL D-Link RCE Flaw
Cybersecurity

A new Mirai botnet campaign is actively exploiting CVE-2025-29635, a critical command-injection RCE flaw in end-of-life D-Link DIR-823X routers. Detected by Akamai SIRT in March 2026, this marks the first observed in-the-wild exploitation of the high-severity vulnerability, over a year after its initial disclosure. The campaign deploys the 'tuxnokill' Mirai variant, rapidly enlisting vulnerable devices into a distributed denial-of-service botnet.

April 23, 2026 Bleepingcomputer 3 min
Apple Security Fix: iOS Kept Deleted Notifications, Privacy Risk
Cybersecurity

Apple has issued an urgent out-of-band security update for iOS and iPadOS, patching a critical vulnerability, CVE-2026-28950, that caused notifications marked for deletion to remain persistently stored on devices. This flaw presents a significant privacy risk, as sensitive information intended to be erased could potentially be recovered, aligning with recent reports of forensic recovery of Signal messages from iPhone notification storage.

April 23, 2026 Bleepingcomputer 3 min
Kimwolf Botnet Master Unmasked: Inside Jacob Butler's Cybercrime Reign
Cybersecurity

The individual behind the notorious Kimwolf botnet, responsible for a barrage of disruptive DDoS attacks, doxing, and swatting incidents, has been unmasked as Canadian teenager Jacob Butler, also known by the alias 'Dort'. This revelation follows an extensive OSINT investigation that meticulously pieced together online activities, aliases, and email addresses, connecting him to sophisticated cybercrime operations that escalated from Minecraft cheats to offering advanced attack tools. Butler's identity comes to light amidst a campaign of retaliation against the security researcher who initially exposed the vulnerability exploited by Kimwolf.

April 23, 2026 Krebsonsecurity 8 min
March 2026 Patch Tuesday: AI Bot Uncovers Critical RCE Flaw
Cybersecurity

Microsoft's March 2026 Patch Tuesday brings a significant update addressing 77 vulnerabilities, notably without any active zero-day threats this month. However, the most compelling discovery comes from XBOW, an autonomous AI penetration testing agent, which identified a critical Remote Code Execution (RCE) flaw in Office, underscoring the escalating role of AI in vulnerability research. Organizations should prioritize patches for critical RCEs in Office and a high-severity Elevation of Privilege (EoP) bug in SQL Server 2016+.

April 23, 2026 Krebsonsecurity 4 min
Defense Secretary Hegseth Fires Navy Sec Phelan, Shake-Up Continues
Military & Defense

Navy Secretary John Phelan has been abruptly removed from his post by the Pentagon, effective immediately, with U.S. Navy Undersecretary Hung Cao stepping in as acting secretary. This high-profile dismissal marks the latest in a series of leadership changes within the defense establishment under Secretary Hegseth and President Trump. The move, announced shortly after Phelan attended a major naval symposium, comes without an immediate public explanation from the Pentagon, though administration officials cite a need for "new leadership."

April 23, 2026 Defensenews 4 min
Navy Sec. Phelan's Abrupt Exit Shakes Leadership; Cao Takes Helm
Military & Defense

Secretary of the Navy John Phelan has abruptly departed his post, effective immediately, marking the first high-ranking political appointee exit from the Pentagon under the second Trump administration. Undersecretary Hung Cao, a former naval officer, will step in as Acting Secretary following an unexpected announcement from Pentagon spokesperson Sean Parnell. This sudden leadership change arrives shortly after Phelan publicly defended controversial naval initiatives, including the 'Trump-class battleship' and 'Golden Fleet'.

April 23, 2026 Breakingdefense 3 min
Vought's Broadside: OMB Demands Accountability from Shipbuilders
Military & Defense

Office of Management and Budget Director Russel Vought delivered a scathing critique of the shipbuilding industry, demanding greater accountability from contractors. His unexpected broadside concluded the Navy League's Sea-Air-Space 2026 conference, setting a confrontational tone for future defense procurement discussions. Breaking Defense editors Aaron Mehta and Diana Stancy weigh in on Vought's remarks and their key takeaways from the event.

April 23, 2026 Breakingdefense 2 min
Air Force Prioritizes Advanced Tanker Upgrades, Halts Next-Gen Fund
Military & Defense

The U.S. Air Force has controversially zeroed out funding for its Next-Generation Air Refueling System (NGAS) in the 2027 budget request, abruptly halting a key initiative for future aerial refueling capabilities. This significant budgetary shift diverts resources from developing new tanker platforms to instead allocate $13 million for 'Advanced Tanker Systems,' focusing solely on upgrading existing mission systems. The move underscores a strategic pivot towards incremental modernization over generational leaps, sparking immediate concern across defense circles.

April 23, 2026 Defenseone 4 min
Navy Sec. Phelan Ousted Immediately Over Shipbuilding Stance
Military & Defense

Navy Secretary John Phelan has been abruptly removed from his post, effective immediately, with Undersecretary Hung Cao stepping in as acting secretary. This sudden departure follows Phelan's recent controversial remarks suggesting the outsourcing of U.S. warship production abroad, made just yesterday at a major naval conference. His exit comes at a critical juncture for the Navy, amidst an unprecedented blockade of Iranian ports and as the new defense budget is about to be unveiled, underscoring significant tensions within the Pentagon.

April 23, 2026 Defenseone 4 min