The Wire
Curated cybersecurity and tech news — AI-summarized, source attributed.
Press freedom hits record low; US drops below Ukraine in 2026 RSF Index
Reporters Without Borders' 2026 World Press Freedom Index shows the global landscape for journalism deteriorating to its worst state in the survey's 25-year his
PyTorch Lightning and intercom-client poisoned in Mini Shai-Hulud supply chain wave
Attackers pushed malicious 2.6.2 and 2.6.3 releases of PyTorch Lightning to PyPI on April 30, 2026, hiding a downloader and an 11MB obfuscated JavaScript payloa
Ransomware Negotiator Pleads Guilty to Working for the Gang He Was Negotiating With
A ransomware negotiator has pleaded guilty to secretly working for the same ransomware gang whose payments he was supposed to be helping victims minimize. The n
Romanian swatting ringleader gets 4 years for targeting 75+ US officials
Thomasz Szabo, a 27-year-old Romanian extradited to the US in November 2024, drew a four-year federal sentence plus three years of supervised release for runnin
Russia hides Plesetsk launch schedule as Ukrainian drones probe northern spaceport
Roscosmos chief Dmitry Bakanov told Vladimir Putin in an April 11 Kremlin meeting that the Plesetsk Cosmodrome, roughly 500 miles north of Moscow, faced 'seriou
Sleeper Ruby Gems and Go Modules Hijack CI Pipelines for Credential Theft
A GitHub account operating as BufferZoneCorp seeded RubyGems and Go module ecosystems with typosquatted packages mimicking well-known libraries like activesuppo
SMS blasters, npm brandsquatting, and 3.4M exposed RDP/VNC servers headline weekly threat roundup
Canadian authorities arrested three men running an SMS blaster — a fake cellular tower that forces nearby phones to connect and delivers phishing texts imperson
Sygnia, DigitalMint insiders get 4 years for moonlighting as BlackCat affiliates
Two incident response professionals who were supposed to defend victims instead joined the attackers. Ryan Clifford Goldberg, a former Sygnia IR manager, and Ke
TeamPCP hijacks SAP npm packages in scaled-down Shai-Hulud-style worm attack
A threat actor tracking as TeamPCP compromised npm packages tied to SAP, deploying a self-propagating payload that researchers are calling a 'Mini Shai-Hulud' d
Trump pulls Means surgeon general pick, taps Fox News radiologist Saphier
Trump withdrew Casey Means's stalled surgeon general nomination and replaced her with Nicole B. Saphier, a Memorial Sloan Kettering breast radiologist, Fox News
UK AISI: GPT-5.5 matches Claude Mythos on vuln-finding, and it's shipping now
The UK's AI Security Institute has published its evaluation of OpenAI's GPT-5.5, focusing on the model's ability to discover security vulnerabilities. AISI prev
Windows 11 admins get dynamic uninstall list for preinstalled Store apps
Microsoft has expanded its RemoveDefaultMicrosoftStorePackages policy so IT admins can specify any preinstalled MSIX/APPX app for removal by Package Family Name