A relatively unknown ransomware group called Payouts King has emerged as a serious cybersecurity threat, carrying the torch of the now-defunct BlackBasta operation. Since its appearance in April 2025, the group has quietly carried out targeted attacks while remaining largely under the radar, combining aggressive data theft with selective file encryption. BlackBasta was one of […]
The post Payouts King Rises as New Ransomware Threat Linked to Former BlackBasta Affiliates appeared first on Cyber Security News.
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding a critical security defect in Apache ActiveMQ. On April 16, 2026, the agency officially added the vulnerability, tracked as CVE-2026-34197, to its Known Exploited Vulnerabilities (KEV) catalog. Federal agencies and private security teams are now under tight deadlines to patch their systems […]
The post CISA Warns of Apache ActiveMQ Input Validation Vulnerability Exploited in Attacks appeared first on Cyber Security News.
An active in-the-wild exploitation of three recently leaked Windows Defender privilege escalation vulnerabilities, with threat actors deploying proof-of-concept exploit code sourced directly from public GitHub repositories against real enterprise targets. On April 2, 2026, a security researcher operating under the alias Nightmare-Eclipse (also known as Chaotic Eclipse) published the BlueHammer exploit on GitHub following a […]
The post Leaked Windows Defender 0-Day Vulnerability Actively Exploited in Attacks appeared first on Cyber Security News.