News Archives

Operation PowerOFF Disrupts 53 DDoS Domains, Uncovers 3 Million Criminal Accounts

Operation PowerOFF disrupted 53 DDoS domains, led to four arrests, and exposed databases tied to more than 3 million criminal user accounts used by booter services. The coordinated international action involved 21 countries and included 25 search warrants and outreach to identified offenders.

April 17, 2026

n8n cloud webhooks exploited since October 2025 to spread malware

Attackers have been misusing n8n cloud webhooks since October 2025 to push malware and perform email-based device fingerprinting, researchers at Cisco Talos warn.

April 16, 2026

OpenAI Debuts GPT-5.4-Cyber and Broadens Access for Security Practitioners

OpenAI has introduced GPT-5.4-Cyber, a defense-focused variant of GPT-5.4, while expanding trusted access for security practitioners and teams. The move follows Anthropic’s Mythos preview and underscores dual-use risks, rollout safeguards, and OpenAI’s prior Codex Security impact.

April 15, 2026

Critical PHP Composer Flaws Enable Arbitrary Command Execution — Patches Released

Two high-severity command-injection bugs in Composer’s Perforce VCS driver can lead to arbitrary command execution. Patches are available; update immediately or apply mitigations.

April 14, 2026

Adobe Reader Zero-Day Abused by Malicious PDFs Since December 2025

Researchers say a previously unknown Adobe Reader zero-day has been weaponized in malicious PDFs since December 2025, using obfuscated JavaScript to steal data and fetch follow-on payloads.

April 11, 2026

Compromised Nextend Update Server Delivered Backdoored Smart Slider 3 Pro Release

Unknown attackers compromised Nextend’s update infrastructure and pushed a backdoored Smart Slider 3 Pro update (v3.5.1.35) that provided persistent remote access and credential exfiltration. Patchstack and Nextend advise urgent cleanup and updating to v3.5.1.36.

April 10, 2026