US Gov: Iran-Linked Actors Targeting Critical Infrastructure PLCs
The advisory comes amid the ongoing conflict between the U.S. and Iran. CISA said Iran-linked APT campaigns targeting U.S. orgs have recently escalated.
Archives for April 2026
All topics
Articles
23 Posts
The $285M Drift Protocol Heist Was ‘6 Months in the Making’
During the largest DeFi hack of 2026, it only took attackers 12 minutes to drain millions in user assets - but the build up to the attack took six months of meticulously planned social engineering.
Fortinet CVE-2026-35616 Actively Exploited
The company published an advisory on Saturday and urged all customers who are running affected versions of the software to install the hotfix as quickly as possible. The bug affects versions 7.4.5 and 7.4.6 of FortiClient EMS.
The Rapid Rise of AI Exploit Development and More Axios Compromise Effects
It’s been quite a week in security news, and Dennis and Lindsey dig into the continued effects of the axios supply chain attack, the incredibly fast adoption of AI tools for vulnerability research and what that means for software makers and defenders, and what the future holds for vulnerability research and exploit development. Security Theater […]
The Fallout From the Nasty Axios NPM Supply Chain Attack
Dennis and Lindsey dig into what we know do far about the supply chain attack on the axios NPM package, including how the attacker gained access to the maintainer’s account, the window of exposure for the malicious packages, the behavior of the RAT that’s installed on victims’ machines, and what the downstream effects may be.