GlassWorm campaign uses Zig Dropper to infect multiple developer IDEs
Rabi LakshmananApril 10, 2026Malware/Blockchain Cybersecurity researchers have warned of further evolution of the ongoing GlassWorm campaign. It employs a new Zig dropper designed to covertly infect all integrated development environments (IDEs) on a developer’s machine. The technique was discovered in an Open VSX extension named “specstudio.code-wakatime-activity-tracker” that pretends to be WakaTime, a popular tool that […]
Browser extensions are the new AI consumption channel no one is talking about
While much of the discussion around AI security centers around protecting the consumption of “shadow” AI and GenAI, there is a wide open window that no one is guarding. It’s an AI browser extension. A new report from LayerX reveals just how deep this blind spot goes and why AI extensions may be the surface […]
Google deploys DBSC in Chrome 146 to block session theft on Windows
Ravi LakshmananApril 10, 2026Malware/Browser Security Google has made Device Bound Session Credentials (DBSC) generally available to all Windows users of its Chrome web browser, months after it began testing the security feature in open beta. Public availability is currently limited to Windows users on Chrome 146, with macOS expansion planned for future Chrome releases. “This […]
Marimo RCE flaw CVE-2026-39987 exploited within 10 hours of publication
Rabi LakshmananApril 10, 2026Vulnerability/Threat Intelligence A critical security vulnerability in Marimo, an open-source Python notebook for data science and analytics, was exploited within 10 hours of its publication, according to Sysdig findings. The vulnerability in question is CVE-2026-39987 (CVSS score: 9.3), a pre-authenticated remote code execution vulnerability that affects all versions of Marimo prior to […]
Backdoored Smart Slider 3 Pro update distributed via compromised Nextend servers
Ravi LakshmananApril 10, 2026Malware/website security An unknown attacker has hijacked the update system of the Smart Slider 3 Pro plugin for WordPress and Joomla and pushed a malicious version containing a backdoor. According to WordPress security firm Patchstack, this incident affects Smart Slider 3 Pro version 3.5.1.35 for WordPress. Smart Slider 3 is a popular […]
EngageLab SDK flaw exposes 50 million Android users, including 30 million crypto wallets
Ravi LakshmananApril 9, 2026Vulnerabilities / Mobile Security Details have emerged of a patched security vulnerability in a widely used third-party Android software development kit (SDK) called EngageLab SDK that could potentially put millions of cryptocurrency wallet users at risk. “This flaw allows apps on the same device to bypass the Android security sandbox and gain […]
UAT-10362 Spear phishing campaign uses LucidRook malware to target NGOs in Taiwan
Ravi LakshmananApril 9, 2026Malware / Windows Security A previously undocumented threat cluster called UAT-10362 is believed to have originated from a spear-phishing campaign targeting non-governmental organizations (NGOs) and universities in Taiwan that led to the introduction of a new Lua-based malware called LucidRook. “LucidRook is an advanced stager that embeds a Lua interpreter and a […]
Hybrid P2P Botnet, 13-Year-Old Apache RCE and 18 More Stories
Ravie LakshmananApr 09, 2026Hacking News / Cybersecurity News Thursday. Another week, another batch of things that probably should’ve been caught sooner but weren’t. This one’s got some range — old vulnerabilities getting new life, a few “why was that even possible” moments, attackers leaning on platforms and tools you’d normally trust without thinking twice. Quiet escalations more than […]
The hidden security risks of shadow AI in the enterprise
As AI tools become more accessible, employees are adopting them without formal approval from IT or security teams. These tools may increase productivity, automate tasks, and fill gaps in existing workflows, but they also operate behind the scenes of security teams, bypassing their controls and creating new blind spots for so-called shadow AI. Although similar […]
Starting in December 2025, Adobe Reader will be exploited as a zero-day via a malicious PDF
Ravi LakshmananApril 9, 2026Vulnerability/Threat Intelligence Threat actors have been using maliciously crafted PDF documents to exploit previously unknown zero-day vulnerabilities in Adobe Reader since at least December 2025. The discovery, detailed by EXPMON’s Haifei Li, is described as a highly sophisticated PDF exploit. This artifact (“Invoice540.pdf”) first appeared on the VirusTotal platform on November 28, […]