RC RANDOM CHAOS

The Wire

Curated cybersecurity and tech news — AI-summarized, source attributed.

cybersecurityvulnerability

ThreatsDay: Defender 0-day, SonicWall brute-force campaign, 17-year-old Excel RCE surface

A cluster of active threats hit simultaneously this week. A zero-day in Microsoft Defender is being exploited in the wild, while SonicWall appliances face a coo

via The Hacker News ·
cybersecuritymalware

Turkish Homes and SMBs Hit by Six-Year Ransomware Campaign

A long-running ransomware operation has been quietly targeting Turkish households and small-to-medium businesses for six years, according to Dark Reading. The s

via Dark Reading ·
cybersecurityidentity

Two-Factor Authentication Moves Beyond the Desktop

Two-factor authentication is shifting away from its traditional desktop-bound implementations as organizations adopt mobile-first and device-agnostic approaches

via Dark Reading ·
malwareidentity

108 Malicious Chrome Extensions Caught Harvesting Google and Telegram Credentials

Security researchers at Socket have uncovered a coordinated campaign of over 100 malicious Chrome Web Store extensions designed to steal OAuth tokens, hijack ac

via BleepingComputer ·
aitech-culture

Adobe Launches AI Assistant That Orchestrates Workflows Across Creative Cloud Apps

Adobe is rolling out Firefly AI Assistant, a chat-based interface that can coordinate complex, multi-step projects spanning Photoshop, Illustrator, Premiere, an

via Ars Technica ·
aicloud

Allbirds Ditches Shoes, Rebrands as GPU Cloud Provider 'NewBird AI'

Sustainable footwear company Allbirds is abandoning its core business to chase the AI infrastructure gold rush. The company secured $50 million in convertible f

via Ars Technica ·
cybersecurityvulnerability

April 2026 Patch Tuesday: 167 Microsoft Fixes, SharePoint Zero-Day, BlueHammer Exploit

Microsoft shipped its second-largest Patch Tuesday ever, addressing 167 vulnerabilities across Windows and related products. The headline flaw is CVE-2026-32201

via Krebs on Security ·
vulnerabilitycybersecurity

April 2026 Patch Tuesday Delivers Critical Fixes From SAP, Adobe, Microsoft, and Fortinet

The April 2026 Patch Tuesday cycle brought a heavy round of security updates from multiple major vendors. Microsoft addressed dozens of vulnerabilities across W

via The Hacker News ·
cybersecuritymalware

Attackers Turn n8n Webhooks Into Phishing Infrastructure Since October 2025

Threat actors have been weaponizing n8n, the popular low-code workflow automation platform, as a delivery layer for phishing campaigns since October 2025. By re

via The Hacker News ·
privacypolicy

Audit Finds Big Tech Routinely Ignores California Privacy Opt-Out Requests

An audit has revealed that major technology companies frequently fail to honor opt-out requests submitted under California's privacy law. Despite legal requirem

via Dark Reading ·
cybersecurityvulnerability

CISA Adds Windows Task Host Flaw to KEV Catalog Amid Active Exploitation

CISA has added a Windows Task Host vulnerability to its Known Exploited Vulnerabilities catalog after confirming active exploitation in the wild. The Task Host

via BleepingComputer ·
cybersecuritytech-culture

Constantinople's Walls: A Masterclass in Layered Defense

Bruce Schneier highlights the defensive architecture of Constantinople as a physical blueprint for defense in depth. The system stacked four distinct barriers:

via Schneier on Security ·