TechLogHub Blog — Page 19 of 25
Insights, guides, and product strategy for builders and product teams.
Storm infostealer moves browser decryption server-side to hijack sessions
Varonis details Storm, a 2026 infostealer that decrypts stolen browser data on attacker servers and replays Google refresh tokens to take over sessions.
Critical Marimo Pre‑Authentication RCE Flaw Now Under Active Exploitation
Critical RCE flaw CVE‑2026‑39987 in Marimo open‑source Python notebook platform was actively exploited within 10 hours of disclosure, allowing unauthenticated attackers to gain full shell access via the /terminal/ws WebSocket endpoint and exfiltrate .env credentials and SSH keys; users are urged to upgrade to v0.23.…
Over 20,000 crypto fraud victims identified in international crackdown
International law enforcement, led by the UK’s National Crime Agency in “Operation Atlantic,” identified over 20,000 cryptocurrency fraud victims across Canada, the UK and the US, froze more than $12 million in illicit proceeds from approval‑phishing scams, and uncovered $45 million in stolen crypto. The joint effor…
ChatGPT launches a $100 Pro plan to compete with Claude's subscription.
OpenAI has introduced a new $100 ChatGPT Pro subscription tier, aligning its pricing with Anthropic’s Claude plan and filling the gap between its existing $20 Plus and $200 Max plans. The new Pro tier targets coders and enterprises needing higher usage limits—offering five times the limits of Plus and ten times Code…
Microsoft: Canadian employees targeted in payroll pirate attacks
Microsoft reports that the threat actor Storm‑2755 is targeting Canadian employees by hijacking Microsoft 365 accounts through phishing‑like sign‑in pages, stealing authentication tokens and bypassing MFA to gain full session access. Once inside, attackers create hidden inbox rules, intercept HR emails about direct …
LucidRook: Lua-based malware hits Taiwanese NGOs and universities
Cisco Talos details LucidRook, a Lua-scripted backdoor from UAT-10362 spread by phishing to Taiwanese NGOs. Infection chains, IOCs and detection tips.
VENOM phishing kit targets executives' Microsoft 365 logins with AiTM and device codes
Abnormal found VENOM, a closed phishing-as-a-service kit using Unicode QR codes, AiTM and device-code phishing to hijack C-suite Microsoft 365 accounts.
ChipSoft ransomware attack: Dutch EHR vendor's patient portals offline, data stolen
A 7 April 2026 ransomware attack on Dutch EHR vendor ChipSoft took Zorgportaal, HiX Mobile and Zorgplatform offline and exposed patient data, Z-CERT says.
Chrome 146 ships Device Bound Session Credentials to stop cookie theft
Chrome 146 on Windows ships DBSC, binding session cookies to a TPM-held key so stolen cookies quickly expire. How it works and how to add it to your app.
Smart Slider updates hijacked to push malicious WordPress and Joomla versions
Hackers hijacked the Smart Slider 3 Pro update system, distributing a malicious version (3.5.1.35) that installs multiple backdoors, creates hidden admin accounts, and steals data on WordPress and Joomla sites. The malware persists through hidden MU‑plugins, theme functions.php, and core‑file‑like PHP files that byp…
When attackers already have the keys, MFA is just another door to open
When attackers have already stolen email addresses, multi‑factor authentication (MFA) is just another door that can be opened. The recent Figure breach exposed 967,200 email records without any exploit, but those emails enable credential stuffing, AI‑generated phishing, and real‑time relay attacks that bypass MFA. L…
Webinar: From noise to signal – What threat actors are targeting next
BleepingComputer will host a live webinar titled “From Noise to Signal – What Threat Actors Are Targeting Next” on Thursday, April 30, 2026 at 2:00 PM ET with Tammy Harper, Threat Intelligence Researcher at RansomLook. The session explores how security teams can detect early warning signs from underground communitie…
Eurail Reports December Data Breach Affecting 300,000 Travelers
Eurail B.V. disclosed that attackers breached its customer database on December 26, 2025, compromising the personal information of about 308,777 people—including names, passport numbers, ID details, bank IBANs, health data and contact info—some of whom obtained passes through the EU’s DiscoverEU program. The stolen …
Hackers exploiting Acrobat Reader zero‑day flaw since December
Hackers have been exploiting an unpatched zero‑day flaw in Adobe Reader since December by delivering malicious PDFs that automatically steal data and can lead to remote code execution or sandbox escape, according to researcher Haifei Li; the attack uses a sophisticated “fingerprinting” technique, targets users witho…
Hackers Steal $3.6 Million From Crypto‑ATM Giant Bitcoin Depot
Bitcoin Depot, one of the world’s largest Bitcoin ATM operators, disclosed that attackers stole $3.665 million worth of Bitcoin—about 50.9 coins—from its crypto wallets after breaching its systems in March 2026. The breach was detected on March 23, prompting immediate incident response, external cyber‑security assis…
Microsoft suspends dev accounts for high‑profile open source projects
Microsoft has suspended developer accounts used to sign and publish updates for several high‑profile open‑source projects—including WireGuard, VeraCrypt, MemTest86 and Windscribe—after a mandatory account verification deadline that was missed. The suspensions occurred without prior notice or an easy appeal process, …
ActiveMQ CVE-2026-34197: 13-year-old Jolokia bug enables remote code execution
CVE-2026-34197 lets Jolokia calls make ActiveMQ Classic load a remote Spring XML and run commands. Affected versions, IOCs and how to patch and harden.
Is a $30,000 AI GPU better at password cracking than an RTX 5090?
Specops' hashcat benchmarks show an RTX 5090 beats Nvidia H200 and AMD MI300X at MD5, NTLM, bcrypt and SHA-2. What it means for how you hash passwords.
Microsoft fixes Windows 11 23H2 Start menu search broken by a Bing update
A server-side Bing change broke Start menu search on some Windows 11 23H2 PCs from 6 April 2026. Microsoft rolled it back; why web search policy matters.
Ninja Forms File Uploads flaw CVE-2026-0740 exploited to plant PHP webshells
Attackers exploit CVE-2026-0740, an unauthenticated file upload in Ninja Forms File Uploads up to 3.3.26, to drop PHP webshells. Update to 3.3.27 now.
Showing 20 of 485 articles