Secure Cloud | OpenText Cybersecurity Community

Over 100 Chrome extensions in Web Store target users accounts and data

April 14, 2026, By Bill Toulas More than 100 malicious extensions in the official Chrome Web Store are attempting to steal Google OAuth2 Bearer tokens, deploy backdoors, and carry out ad fraud.Researchers at application security company Socket discov

00

11 minutes ago

Jasper_The_RasperModerator

US, UK and Canada disrupt $45M crypto theft in Operation Atlantic

April 14, 2026, By Pierluigi Paganini US, UK and Canada ran Operation Atlantic, uncovering $45M in crypto theft and freezing $12M to return to victims.An international law enforcement operation from the US, UK and Canada, codenamed Operation Atlanti

10

38 minutes ago

Jasper_The_RasperModerator

Ransomware Spotlight

No honor among thieves as 0APT threatens rival ransomware gang Krybit

Honey, the skids are fighting again April 14, 2026, By Connor Jones Two rival ransomware gangs have locked horns after 0APT threatened to expose people affiliated with Krybit.Dark web watchers spotted the move on Sunday, though 0APT's motive for exto

Attackers target unpatched ShowDoc servers via CVE-2025-0520

50 minutes ago

Jasper_The_RasperModerator

Vulnerability Vault

April 14, 2026, By Pierluigi Paganini A critical RCE flaw, tracked as CVE-2025-0520, in ShowDoc is being actively exploited, putting unpatched servers at serious risk.A critical remote code execution flaw, tracked as CVE-2025-0520 (CVSS score of 9.4)

54 minutes ago

Jasper_The_RasperModerator

Someone planted backdoors in dozens of WordPress plug-ins used in thousands of websites

April 14, 2026, By Zack Whittaker Dozens of plug-ins for the widely used open source web blogging software WordPress are now offline after a backdoor was discovered in them, used to push malicious code to any website that relied on the plug-ins. The

20

Jasper_The_RasperModerator

Fake Ledger Live app on Apple’s App Store stole $9.5M in crypto

April 14, 2026, By Bill Toulas A malicious Ledger Live app for macOS available from Apple’s App Store has drained approximately $9.5 million in cryptocurrency from 50 victims in just a few days this month.Users who downloaded the fake Ledger app were

New ‘JanaWare’ ransomware targeting Turkish citizens as cybercriminal ecosystem fragments

Jasper_The_RasperModerator

Ransomware Spotlight

April 14, 2026, By Jonathan Greig Cybercriminals are using a new ransomware strain called JanaWare to target people in Turkey, according to a new report from cybersecurity firm Acronis.The researchers said the ransomware operation has been ongoing si

Jasper_The_RasperModerator

Omnistealer uses the blockchain to steal everything it can

April 14, 2026, By Pieter Arntz A new infostealer dubbed Omnistealer is turning the blockchain into a permanent malware hosting platform, which is bad news for both companies and everyday users.It’s pretty common for malware to store its payload on

10

Jasper_The_RasperModerator

Personal data of 1 million gym members compromised in Basic-Fit security incident

April 14, 2026, By Pierluigi Paganini A breach at Basic-Fit exposed data of 1M members, including names, birth dates and bank details after unauthorized access.Basic-Fit, Europe’s largest gym chain, has disclosed a data breach affecting around 1 mil

10

Jasper_The_RasperModerator

McGraw-Hill confirms data breach following extortion threat

April 14, 2026, By Bill Toulas Education company McGraw-Hill has confirmed in a statement to BleepingComputer that hackers exploited a Salesforce misconfiguration and accessed its internal data.The company assured that the breach did not affect its S

20