Daily cybersecurity briefing for CISOs and security leaders — synthesized from 16 leading publications every morning.
Each dot is a story tracked in the last 30 days · Mon–Fri + Week in Review Saturday
Full screen →Wednesday, April 22, 2026 · 8:49
KelpDAO suffers $290 million heist tied to Lazarus hackers · ZionSiphon Malware Targets Water Infrastructure Systems · Adversaries hijacked AI security tools at 90+ organizations. The next wave has write access to the firewall · Vercel’s security breach started with malware disguised as Roblox cheats
Researchers Detect ZionSiphon Malware Targeting Israeli Water, Desalination OT Systems · Finance Chiefs Warn New AI Models May Rattle Global Banking · EU pushes for stronger cloud sovereignty, awards €180 million to four providers · AI platform ATHR makes voice phishing a one-person job
Sweden blames Russian hackers for attempting ‘destructive’ cyberattack on thermal plant · ZionSiphon malware designed to sabotage water treatment systems · US nationals sentenced for aiding North Korea’s tech worker scheme · FBI and Indonesian Police Dismantle W3LL Phishing Network Behind $20M Fraud Attempts
US nationals sentenced for aiding North Korea’s tech worker scheme · ZionSiphon malware designed to sabotage water treatment systems · Ukrainian emergency services and hospitals hit by espionage campaign using new AgingFly malware · New ATHR vishing platform uses AI voice agents for automated attacks
Sweden blames Russian hackers for attempting ‘destructive’ cyberattack on thermal plant · Two US nationals jailed over scheme that generated $5 million for the North Korean regime · UK warns businesses to address cyber risks amid Anthropic AI panic · Microsoft patched a Copilot Studio prompt injection. The data exfiltrated anyway.
CISA Workers Recalled Despite Shutdown · Sweden says pro-Russian hackers attempted to breach thermal power plant · We’re only seeing the tip of the chip-smuggling iceberg · OpenAI Touts Wider Access to Its New Cyber Model
APT41 Delivers 'Zero-Detection' Backdoor to Harvest Cloud Credentials · FBI takedown of W3LL phishing service leads to developer arrest · CSA: CISOs Should Prepare for Post-Mythos Exploit Storm · OpenAI’s Mac apps need updates thanks to the Axios hack
Iranian hackers launching disruptive attacks at U.S. energy, water targets, feds warn · Feds quash widespread Russia-backed espionage network spanning 18,000 devices · Do Ceasefires Slow Cyberattacks? History Suggests Not · Tech giants launch AI-powered ‘Project Glasswing’ to identify critical software vulnerabilities
Iranian attacks on US critical infrastructure puts 3,900 devices in crosshairs · Inside the FBI’s router takedown that cut off APT28’s ‘tremendous access’ · Mythos autonomously exploited vulnerabilities that survived 27 years of human review. Security teams need a new detection playbook · To counter cookie theft, Chrome ships device-bound session credentials
Iran-linked hackers disrupt operations at US critical infrastructure sites · US operation evicts Russia from hacked SOHO routers used to breach critical infrastructure · APT28 Deploys PRISMEX Malware in Campaign Targeting Ukraine and NATO Allies · Breach exposes sensitive LAPD files stored in city attorney system
US Critical Infrastructure Facing Iranian-Linked OT Threats · Feds quash widespread Russia-backed espionage network spanning 18,000 devices · Anthropic's Claude Mythos Finds Thousands of Zero-Day Flaws Across Major Systems · Cybercrime losses jumped 26% to $20.9 billion in 2025
China-Linked Storm-1175 Exploits Zero-Days to Rapidly Deploy Medusa Ransomware · German police unmask two suspects linked to REvil ransomware gang · Iran-Linked Password-Spraying Campaign Targets 300+ Israeli Microsoft 365 Organizations · Over $17bn Lost to Cyber Fraud in the Last Year, Warns FBI
Risky Bulletin: Iranian password sprays came first, then came the missiles · Medtech giant Stryker says it’s back up after Iranian cyberattack · China-Linked TA416 Targets European Governments with PlugX and OAuth-Based Phishing · CISA gives agencies two weeks to patch video conferencing bug exploited by Chinese hackers
Medtech giant Stryker says it’s back up after Iranian cyberattack · House Dems decry confirmed ICE usage of Paragon spyware · Software supply chain hacks trigger wave of intrusions, data theft · Akira ransomware group can achieve initial access to data encryption in less than an hour
European-Chinese geopolitical issues drive renewed cyberespionage campaign · Iran-linked actors target Middle Eastern city governments to undermine missile-strike responses · Hackers slipped a trojan into the code library behind most of the internet. Your team is probably affected · In the wake of Claude Code's source code leak, 5 actions enterprise security leaders should take now
Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069 · Risky Bulletin: Iranian password sprays came first, then came the missiles · Iran Deploys 'Pseudo-Ransomware,' Revives Pay2Key Operations · ‘Missed opportunity’: US government’s absence from RSAC Conference leaves stark void
Iranian Cyberthreats Test US Infrastructure Defenses · ‘Missed opportunity’: US government’s absence from RSAC Conference leaves stark void · Axios npm packages backdoored in supply chain attack · Stryker restores most manufacturing after cyberattack
FBI confirms hack of Director Patel's personal email inbox · Three China-Linked Clusters Target Southeast Asian Government in 2025 Cyber Campaign · European Commission confirms data breach after Europa.eu hack · Healthcare software firm CareCloud informs SEC of potential patient data leak
DarkSword’s GitHub leak threatens to turn elite iPhone hacking into a tool for the masses · Coruna, DarkSword & Democratizing Nation-State Exploit Kits · FBI confirms theft of director’s personal emails by Iran-linked hacking group · China Upgrades the Backdoor It Uses to Spy on Telcos Globally
CISA Forced Into 'Reactive' Cyber Posture Amid Shutdown · US: FCC Bans Foreign-Made Routers Over National Security Concerns · Srsly Risky Biz: Why get a warrant when you have Kash? · Google moves post-quantum encryption timeline up to 2029
US: FCC Bans Foreign-Made Routers Over National Security Concerns · DarkSword’s GitHub leak threatens to turn elite iPhone hacking into a tool for the masses · UK cyber chief urges ‘full court press’ to counter rising cyber threats · Stryker says malware was involved in recent cyberattack as production lines reopen
Self-propagating malware poisons open source software and wipes Iran-based machines · DOE Sets 5-Year Plan to Harden US Grid Against Cyberattacks · FBI warns of Russian, Iranian cyber activity involving messaging platforms · Trivy supply-chain attack spreads to Docker, GitHub repos
FBI Seizes Iranian Online Leak Sites After Stryker Hack · Russian hackers go after high-value targets through Signal · Texas Gov. Orders State Review of Chinese-Made Medtech · Operation Alice Takes Down 370,000+ Dark Web Sites
FBI seizes Handala data leak site after Stryker cyberattack · CISA urges companies to secure Microsoft Intune systems after hackers mass-wipe Stryker devices · DarkSword iOS Exploit Kit Uses 6 Flaws, 3 Zero-Days for Full Device Takeover · Srsly Risky Biz: Successful war leaves Iran with one option, its cyber forces
Feds Disrupt IoT Botnets Behind Huge DDoS Attacks · The Danger Behind Meta Killing End-to-End Encryption for Instagram DMs · FBI, CISA warn on Microsoft Intune risks after Iran-linked cyberattack on Stryker · Meta's rogue AI agent passed every identity check — four gaps in enterprise IAM explain why
Srsly Risky Biz: Successful war leaves Iran with one option, its cyber forces · Hundreds of Millions of iPhones Can Be Hacked With a New Tool Found in the Wild · EU Sanctions Companies in China, Iran for Cyberattacks · EDR killers are now standard equipment in ransomware attacks
CISA official says agency has not seen uptick in cyber threats amid Iran war · EU Belatedly Sanctions Chinese and Iranian Hackers · Stryker says it’s restoring systems after pro-Iran hackers wiped thousands of employee devices · GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX
EU sanctions Chinese company behind 65,000-device hack · China-Nexus Hackers Skulk in Southeast Asian Military Orgs for Years · OpenClaw can bypass your EDR, DLP and IAM without triggering a single alert · Stryker attack wiped tens of thousands of devices, no malware needed
ISMG Editors: Iran Conflict Expands Into Cyber Warfare · Washington is right: Cybercrime is organized crime. Now we need to shut down the business model · The ransomware economy is shifting toward straight-up data extortion · Telus Digital confirms hack as ShinyHunters claims credit for massive data theft
Iran-Backed Hackers Claim Wiper Attack on Medtech Firm Stryker · US entities face heightened cyber risk related to Iran war · Iran MOIS Colludes With Criminals to Boost Cyberattacks · Risky Bulletin: Gen. Joshua Rudd confirmed as next CyberCom and NSA head
Stryker attack highlights nebulous nature of Iranian cyber activity amid joint U.S.-Israel conflict · Officials worry Salt Typhoon apathy is killing momentum for tougher telecom security rules · AI-generated Slopoly malware used in Interlock ransomware attack · Stryker tells SEC that timeline for recovery from cyberattack unknown
Medical device giant Stryker confirms cyberattack as employees say devices were wiped · Srsly Risky Biz: President Trump's best ever cyber strategy · ShinyHunters claims new campaign targeting Salesforce Experience Cloud sites · Modernizing HIPAA: Are You Ready?
Rudd confirmed to head NSA, Cyber Command after near year-long vacancy · US entities face heightened cyber risk related to Iran war · US military contractor likely built iPhone hacking tools used by Russian spies in Ukraine · DOGE employee stole Social Security data and put it on a thumb drive, report says
White House Cyber Strategy Prioritizes Offense · US entities face heightened cyber risk related to Iran war · Russian Hackers Target WhatsApp and Signal Accounts of Global Military and Government Officials · An iPhone-hacking toolkit used by Russian spies likely came from U.S military contractor
China-Linked Hackers Use Malware Trio for Telecom Espionage · Risky Bulletin: New White House EO prioritizes fight against scams and cybercrime · How AI Assistants are Moving the Security Goalposts · Why Claude Code Security Has Shaken the Cybersecurity Market
Tech Giants, Washington Rally for Anthropic in Pentagon Feud · Iran-Linked MuddyWater Hackers Target U.S. Networks With New Dindoor Backdoor · Tycoon 2FA Goes Boom as Europol, Vendors Bust Phishing Platform · From Ukraine to Iran, Hacking Security Cameras Is Now Part of War’s ‘Playbook’
Srsly Risky Biz: The four hour cyber war on Iran · 149 Hacktivist DDoS Attacks Hit 110 Organizations in 16 Countries After Middle East Conflict · Zurich Acquires Beazley in $11 Billion Deal to Lead Cyberinsurance · Google says 90 zero-days exploited in 2025 as commercial vendor activity grows
Risky Bulletin: Cyber Command conducted cyberattacks ahead of Iran strikes · Pro-Russia actors team with Iran-linked hackers in attacks · Possible U.S.-developed exploits linked to first known ‘mass’ iOS attack · Sprawling FBI, European operation takes down Leakbase cybercriminal forum
US and Israel Launch 'Major Combat Operations' Against Iran · Western Cybersecurity Experts Brace for Iranian Reprisal · US-Israel and Iran Trade Cyberattacks: Pro-West Hacks Cause Disruption as Tehran Retaliates · UK warns of Iranian cyberattack risks amid Middle-East conflict
New episodes every weekday morning — subscribe wherever you listen.
