• This week in cybersecurity from the editors at Cybercrime Magazine

    Sausalito, Calif. – Apr. 13, 2026

    Read the full story in Barron’s

    Cybersecurity stocks could be set for a massive boost from risks tied to Anthropic’s latest advances in artificial intelligence, stemming from the limited release of its newest AI model, known as Claude Mythos, which has stoked concerns in Washington and on Wall Street that a new generation of hackers could test the defenses of the country’s biggest banks.

    Cybercrime Magazine (published by Cybersecurity Ventures), forecast global cybercrime costs could reach $12.5 trillion annually (by 2031) in theft, losses, data and system damages, and reputational harm.

    Barron’s reports that banks are spending more to defend themselves against the growing risks that AI developments have injected into the cybersecurity mix.

    JPMorgan Chase told investors recently that its technology budget will increase by around $2 billion this year, with more than half of that allocated to AI initiatives that include cyber threats.

    Read the Full Story



    Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:

    • SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
    • NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
    • HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
    • VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
    • M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
    • BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
    • PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
    • PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
    • RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.

    Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.

    The post Anthropic’s New Mythos Agent Has Created A Stir In The Cybersecurity Market appeared first on Cybercrime Magazine.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Web server administrators need to prioritize a crucial update this week. The developers behind Nginx and the community-driven FreeNginx project have released new versions to address critical security flaws and introduce key enhancements. Released on April 7, 2026, Nginx version 1.29.8 brings a mix of important security patches, new directives, and deep technical bug fixes. […]

    The post New Nginx 1.29.8 and FreeNginx Versions Patch Critical Security Flaws appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A White House plan to fold the Department of Homeland Security’s primary intelligence unit into DHS headquarters for the coming fiscal year would not affect its oversight by the Office of the Director of National Intelligence, an administration official told Nextgov/FCW.

    The new reporting structure, unveiled last week in the president’s FY27 budget request, would combine the Office of Intelligence and Analysis and the department’s Office of the Secretary and Executive Management, Management Directorate and Office of Situational Awareness into a single unit reporting to the DHS secretary.

    But I&A would still be considered a member of the intelligence community, said the official, who was granted anonymity to discuss the changes. 

    “The planned, internal DHS structural changes noted in the president’s budget submission will not impact I&A’s membership in the [intelligence community] and will not impact ODNI’s oversight over I&A as a member of the IC,” the administration official said.

    I&A’s status as an official U.S. intelligence component under the budget proposal has not been previously reported. ODNI, led by Director of National Intelligence Tulsi Gabbard, manages the nation’s 18 spy agencies.

    The intent to keep I&A under ODNI management could be a reprieve for lawmakers and stakeholders concerned about future oversight of the office. The reorganization of the intelligence shop, which would require congressional approval in upcoming appropriations talks, would mark the most significant change to the office to date, following efforts made last year to sharply scale it back.

    I&A was slated for major workforce reductions in President Donald Trump’s second term, as Nextgov/FCW first reported last July. Those plans, which would have only kept some 275 people working at the office, drew major pushback from law enforcement organizations and Jewish groups that long relied on the agency to disseminate timely intelligence about threats that concern state, local, tribal and territorial communities. One international organization privately warned Congress that the proposed cuts would create “dangerous intelligence gaps.”

    The downsizing was put on hold just days later, but I&A reignited efforts soon after to more gradually shed its workforce. As of late last year, the office had around 500 full-time employees, a figure that preserved more staff than the initial plans to cap the workforce at 275, though that still halved the 1,000-person operation in place earlier last year. It’s possible that more people have since departed.

    The office falls within the purview of the Senate and House Intelligence committees, but its status as a DHS component also subjects it to oversight from the Homeland Security panels in both chambers.

    In November, Nextgov/FCW reported that the House Intelligence Committee privately weighed a measure in the annual intelligence community authorization bill to significantly curtail the size and scope of I&A. The provision would have barred the office from gathering and analyzing intelligence, effectively turning I&A into a clearinghouse for intelligence findings produced elsewhere and stripping it of standard spy agency collection authorities.

    As part of its mission, I&A helps manage a series of fusion centers around the country that facilitate intelligence sharing between federal agencies and state and local law enforcement, raising questions about stakeholder engagement under the proposed restructuring.

    I&A was born as part of the creation of the Department of Homeland Security after the Sept. 11 terrorist attacks to coordinate intelligence on homeland threats and expand information sharing with state and local authorities. For years, lawmakers on both sides of the aisle have sought to reform the unit amid concerns about domestic overreach and partisanship.

    Its placement in DHS has put it at the center of recurring jurisdictional tensions with the FBI, which drives much of the nation’s domestic intelligence, counterterrorism and counterintelligence work under the Justice Department.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cyber attackers are increasingly using Living Off the Land Binaries (LOLBins) to bypass security detection. By leveraging legitimate system tools, these attacks avoid signature-based defenses and operate without dropping traditional malware files. One such LOLBin now gaining attention is MSBuild.exe, a native Windows development tool signed by Microsoft. Originally designed to build and run C# code from XML-based […]

    The post Hackers Exploit MSBuild LOLBin to Evade Detection in Fileless Windows Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Anthropic restricted its Mythos Preview model last week after it autonomously found and exploited zero-day vulnerabilities in every major operating system and browser. Palo Alto Networks’ Wendi Whitmorewarned that similar capabilities are weeks or months from proliferation. CrowdStrike’s 2026 Global Threat Report puts average eCrime breakout time at 29 minutes. Mandiant’s M-Trends 2026

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Ghost APIs are deprecated endpoints left active, exposing systems to attack. Learn how they differ from shadow APIs and why they create hidden security risks

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Iran-linked threat group CyberAv3ngers is intensifying attacks on U.S. water utilities and industrial control systems, shifting from noisy hacktivism to sustained disruption of operational technology (OT) environments. CyberAv3ngers operates as a state-directed persona for Iran’s Islamic Revolutionary Guard Corps Cyber-Electronic Command (IRGC-CEC), not as an independent hacktivist crew. U.S. Treasury sanctions in February 2024 named six IRGC-CEC […]

    The post Iran-Linked CyberAv3ngers Target Water Utilities, Industrial Controllers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • European fitness operator Basic-Fit has confirmed a significant data breach affecting approximately one million members across its network. The incident heavily impacted users in the Netherlands, which accounted for 200,000 of the compromised accounts. This breach underscores the persistent targeting of consumer lifestyle platforms by threat actors seeking massive datasets. The cyber incident targeted the […]

    The post Basic-Fit Suffers Data Breach Affecting Millions Across Multiple Nations appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A critical security vulnerability has been discovered in Axios, one of the most widely used HTTP client libraries, exposing applications to Remote Code Execution (RCE) and full cloud infrastructure compromise. Tracked as CVE-2026-40175, this flaw carries a critical CVSS 3.1 score of 9.9 and allows attackers to bypass AWS IMDSv2 security controls to exfiltrate sensitive […]

    The post Critical Axios Vulnerability Enables Remote Code Execution, PoC Released appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Alleged German cybercrime figure behind Fluxstress and Neldowner arrested in Thailand after years running global DDoS-for-hire services across countries.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶