The largest DeFi exploit of 2026 has seen $293 million drained from Kelp DAO's LayerZero cross-chain bridge, triggering a $5.4 billion withdrawal panic across the broader ecosystem and exposing critical centralization flaws in modular security.
Another week, another frontier model. As Anthropic’s Claude Opus 4.7 chases enterprise depth and OpenAI turns ChatGPT, GPT‑6 and GPT‑Rosalind into the ambient verbs of digital work and lab science, the contest is no longer IQ scores. It is which unseen layer we quietly let sit beneath institutions.
ShinyHunters has exposed a critical weakness in cloud systems. The McGraw Hill breach shows how misconfigured Salesforce portals enabled large scale data leaks, with no software flaw to fix. This marks a shift toward exploiting common operational gaps rather than rare vulnerabilities.
Global threats and high-impact digital events.
A Western Australian man was sentenced to two years for using darknet-sourced data to commit identity theft and fraud, stealing over $17,500. Found with 20,000 compromised credentials, he admitted to six charges. Authorities urge vigilance against cybercrime and identity theft.
A zero-day vulnerability in Palo Alto Networks' PAN-OS, CVE-2024-3400, is under active attack, allowing unauthenticated root access. The flaw affects versions 10.2, 11.0, and 11.1, with patches due by April 14, 2024. Users should enable Threat Prevention ID 95187 or disable telemetry.
Indonesia's banking sector faces rising cyber threats, with an 85% increase in email attacks in Q3 2023. Bank Syariah Indonesia (BRI) has been criticized for inadequate security, as customers report significant losses from digital fraud, highlighting the need for stronger protections.
CISA added two Android Pixel vulnerabilities, CVE-2024-29745 (information disclosure) and CVE-2024-29748 (privilege escalation), to its Known Exploited Vulnerabilities Catalog. Prompt remediation is urged to protect against active exploitation.
A report exposed major security flaws at Microsoft, leading to a Chinese-backed cyberattack compromising 22 organisations, including U.S. officials. The Cyber Safety Review Board criticised Microsoft's security culture and urged immediate reforms. Microsoft has pledged to strengthen its defenses.
CISA issued two ICS advisories on April 4, 2024, highlighting vulnerabilities in Hitachi Energy's Asset Suite 9 (CVE-2024-2244) and Schweitzer's SEL 700 series relays (CVE-2024-2103). Users should review and apply recommended security measures.
In early 2024, cyber threats have escalated, exposing critical vulnerabilities in Saflok locks, AWS, and Ivanti products. Immediate updates and international collaboration are essential to combat these sophisticated attacks. Swift action is crucial to protect global digital infrastructure.
CISA was breached through Ivanti software vulnerabilities, compromising critical systems. The flaws allowed attackers to bypass security, emphasizing the need for strong cybersecurity and rapid responses. Ivanti has issued fixes, but organizations must review systems for potential breaches.
Politically driven cyberattacks, particularly DDoS, are rising in the financial sector, with a 154% increase in 2023. Hacktivists target banks in conflict zones, highlighting the urgent need for stronger cybersecurity to protect against these growing threats.
LockBit resurfaced days after a global takedown, relaunching on the dark web. While the group's return underscores the difficulty of permanent disruption, experts still view the takedown as a major win for law enforcement.
The i-SOON data leak exposes its role in China's cyber espionage, working with government agencies. Leaked documents reveal its involvement in cyber intrusions, highlighting the outsourcing of espionage tasks to private firms and the need for stronger global cybersecurity efforts.
Global law enforcement, including Australia, took down the ransomware group LockBit, seizing its dark web site. This marks a significant win in the fight against cybercrime and underscores the power of international collaboration.
Where cybersecurity meets innovation, the CNC team delivers AI and tech breakthroughs for our digital future. We analyze incidents, data, and insights to keep you informed, secure, and ahead. Sign up for free!
