SecurityWeek Briefing

"After Bluesky, Mastodon targeted for DDoS attack."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 23 April 2026, 0249 UTC.

Content and Source provided by email subscription from https://feedly.com.

https://feedly.com/i/subscription/content/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

Please check subscription link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

97K followers47 articles per week

#security#tech

24

Today

After Bluesky, Mastodon Targeted in DDoS Attack

2 TTPs

•

by Eduard Kovacs / 12h

The DDoS attack caused a major outage, but Mastodon mitigated it within a few hours. The post appeared first on SecurityWeek .

Most Serious Cyberattacks Against the UK Now From Russia, Iran and China, Cyber Chief Says

UK faces rising cyber threats

•

by Associated Press / 13h

British businesses need to prepare themselves to defend against cyberattacks because the U.K. could be targeted “at scale,” if it became involved in an international conflict. The post appeared first on SecurityWeek .

New Wiper Malware Targeted Venezuelan Energy Sector Prior to US Intervention

by Ionut Arghire / 14h

Dubbed Lotus Wiper, the malware targets recovery mechanisms, overwrites drives, and systematically deletes files. The post appeared first on SecurityWeek .

Mirai Botnet Targets Flaw in Discontinued D-Link Routers

TP-Link routers targeted by Mirai malware

•

by Ionut Arghire / 14h

The exploitation of the command injection vulnerability started one year after public disclosure and PoC exploit code publication. The post appeared first on SecurityWeek .

Are SBOMs Failing? Supply Chain Attacks Rise as Security Teams Struggle With SBOM Data

by Kevin Townsend / 15h

Researcher says the missing piece is a governance-driven intelligence layer that turns SBOM and VEX data into explainable security decisions. The post appeared first on SecurityWeek .

Claude Mythos Finds 271 Firefox Vulnerabilities

by Eduard Kovacs / 15h

All the flaws could have also been found by an elite human researcher, according to Mozilla. The post appeared first on SecurityWeek .

North Korean Hackers Use AppleScript, ClickFix in Fresh macOS Attacks

by Ionut Arghire / 15h

The campaigns focus on financial organizations, including cryptocurrency, venture capital, and blockchain entities. The post appeared first on SecurityWeek .

Yesterday

Google Antigravity in Crosshairs of Security Researchers, Cybercriminals

by Eduard Kovacs / 16h

Researchers discovered a remote code execution vulnerability and cybercriminals are using its reputation to deliver malware. The post appeared first on SecurityWeek .

Oracle Patches 450 Vulnerabilities With April 2026 CPU

by Ionut Arghire / 18h

The company released 481 new security patches across 28 product families, including over 300 fixes for remotely exploitable, unauthenticated flaws. The post appeared first on SecurityWeek .

Third US Security Expert Admits Helping Ransomware Gang

by Eduard Kovacs / 1d

Angelo Martino of Florida has pleaded guilty to collaborating with the BlackCat cybercrime group while working as a ransomware negotiator. The post appeared first on SecurityWeek .

Dozens of Malicious Crypto Apps Land in Apple App Store

by Ionut Arghire / 1d

Masquerading as popular cryptocurrency wallets, the apps can hijack recovery phrases and private keys. The post appeared first on SecurityWeek .

Unsecured Perforce Servers Expose Sensitive Data From Major Orgs

by Eduard Kovacs / 1d

Things are improving, but a researcher has still identified over 1,500 Perforce P4 instances allowing attackers to read files on the server. The post appeared first on SecurityWeek .

Progress Patches Multiple Vulnerabilities in MOVEit WAF, LoadMaster

by Ionut Arghire / 1d

The security defects could be exploited for remote code execution, OS command injection, and WAF detection bypass. The post appeared first on SecurityWeek .

Organizations Warned of Exploited Cisco, Kentico, Zimbra Vulnerabilities

by Ionut Arghire / 1d

CISA expanded the KEV catalog with eight flaws, but five of them have been flagged as exploited before. The post appeared first on SecurityWeek .

Data Breaches at Healthcare Organizations in Illinois and Texas Affect 600,000

by Eduard Kovacs / 1d

Data breaches were disclosed by Southern Illinois Dermatology, Saint Anthony Hospital, and North Texas Behavioral Health Authority. The post appeared first on SecurityWeek .

$290 Million Kelp DAO Crypto Heist Blamed on North Korea

KelpDAO hack leads to fund laundering

•

by Ionut Arghire / 1d

The hackers targeted LayerZero’s DVN, compromising certain RPCs and DDoSing others to trigger failover to the poisoned infrastructure. The post appeared first on SecurityWeek .

Apr 20, 2026

Serial-to-IP Converter Flaws Expose OT and Healthcare Systems to Hacking

by Eduard Kovacs / 2d

Forescout researchers discovered 20 new vulnerabilities in Lantronix and Silex products and described theoretical attack scenarios. The post appeared first on SecurityWeek .

British Scattered Spider Hacker Pleads Guilty in the US

Scattered Spider hacker pleads guilty

•

by Ionut Arghire / 2d

Tyler Buchanan admitted in court to hacking into various companies, defrauding them, and stealing cryptocurrency from multiple individuals. The post appeared first on SecurityWeek .

Hackers Abuse QEMU for Defense Evasion

by Ionut Arghire / 2d

The machine emulator has been abused in at least two different campaigns distributing ransomware and remote access tools. The post appeared first on SecurityWeek .

Bluesky Disrupted by Sophisticated DDoS Attack

2 TTPs

•

by Eduard Kovacs / 2d

•

Bluesky experiences widespread feed outage

A pro-Iran hacker group has taken credit for the attack on Bluesky, which appears to have lasted 24 hours. The post appeared first on SecurityWeek .

Senate Extends Surveillance Powers Until April 30 After Chaotic Votes in House

House extends surveillance powers temporarily

•

by Associated Press / 2d

The Senate approved a short-term renewal until April 30 of a controversial surveillance program used by U.S. spy agencies. The post appeared first on SecurityWeek .

Apr 19, 2026

Half of the 6 Million Internet-Facing FTP Servers Lack Encryption

Nearly six million FTP servers exposed

•

by Ionut Arghire / 2d

The continued use of the half-century-old protocol exposes enterprises and end users to various types of attacks. The post appeared first on SecurityWeek .

Next.js Creator Vercel Hacked

Vercel suffers data breach attack

•

by Eduard Kovacs / 2d

Vercel confirmed suffering a breach after a hacker claiming to be part of ShinyHunters offered to sell stolen data for $2 million. The post appeared first on SecurityWeek .

Hackers Fail to Exploit Flaw in Discontinued TP-Link Routers

TP-Link routers targeted by Mirai malware

•

by Ionut Arghire / 2d

In-the-wild exploitation has been ongoing for a year, but no successful payload execution has been observed. The post appeared first on SecurityWeek .

End of feed