DPRK Fake Job Scams Self-Propagate in ‘Contagious Interview’ – Dark Reading
A compromised developer’s repository serves as a worm-like infection vector to spread remote access Trojans (RATs) and other malware. – Read More
April 2026
Electricity Is a Growing Area of Cyber Risk – Dark Reading
IT has long been concerned about ensuring systems receive the right amount of electricity. Cyberattackers are realizing they can manipulate voltage fluctuations for their purposes, too. – Read More
Electricity Is a Growing Area of Cyber Risk – Dark Reading
IT has long been concerned about ensuring systems receive the right amount of electricity. Cyberattackers are realizing they can manipulate voltage fluctuations for their purposes, too. – Read More
Is legal AI becoming ‘mandatory’ in criminal law? – Legal Futures
Catherine Gaynor of LEAP comments on the emotional toil for clients of being investigated or prosecuted and how it makes sense to harness AI tools available that can help legal…
Asda selects Definely to speed up complex contract reviews – Legal IT Insider
In a significant in-house legal win for Definely, British supermarket chain Asda has selected Definely’s specialist drafting and review tools to speed up complex contract reviews across its legal function.…
World-first NCSC-engineered device secures vulnerable display links – NCSC Blog
SilentGlass, a plug-and-play device, actively blocks any unexpected or malicious HDMI and Display Port connections. – Read More
NFC tap-to-pay gets tapped by hackers – CSO Online
Cyber crooks are abusing a trojanized Android payment application to steal near field communication (NFC) data and PINs, enabling cloning of payment cards and draining victim accounts. According to ESET…
Lotus Wiper Malware Targets Venezuelan Energy Systems in Destructive Attack – The Hacker News
Cybersecurity researchers have discovered a previously undocumented data wiper that has been used in attacks targeting Venezuela at the end of last year and the start of 2026. Dubbed Lotus…
Untitled [blogging] – Devon & Somerset Law Society Blog Updates
DASLS welcomed Nick Gallagher CEO of The Solicitors Charity at the AGM on the 21st April. Nick spoke about the Charity’s work for 2025 and how the nature of what…
Toxic Combinations: When Cross-App Permissions Stack into Risk – The Hacker News
On January 31, 2026, researchers disclosed that Moltbook, a social network built for AI agents, had left its database wide open, exposing 35,000 email addresses and 1.5 million agent API…
Sullivan & Cromwell apologises after AI hallucinations appear in court document – Legal Cheek
Elite firm left red-faced One of the US’s most prestigious law firms has apologised to a New York judge after AI-hallucinated citations were found in a court filing it had…
Ben Darby elected as DASLS President for 2026/2027 at AGM [blogging] – Devon & Somerset Law Society Blog Updates
DASLS Presidential Team Elected for 2026/2027We are delighted to announce Ben Darby of Darby Darby accepted the role of President for the coming year at the DASLS AGM on Tuesday…
Microsoft Patches Critical ASP.NET Core CVE-2026-40372 Privilege Escalation Bug – The Hacker News
Microsoft has released out-of-band updates to address a security vulnerability in ASP.NET Core that could allow an attacker to escalate privileges. The vulnerability, tracked as CVE-2026-40372, carries a CVSS score…
Anthropic bets on EPSS for the coming bug surge – CSO Online
Anthropic’s Mythos has intensified a problem that vulnerability management programs were already struggling to contain: too many vulnerabilities and not enough clarity about which ones matter. What changes with Mythos…
Mustang Panda’s New LOTUSLITE Variant Targets India Banks, South Korea Policy Circles – The Hacker News
Cybersecurity researchers have discovered a new variant of a known malware called LOTUSLITE that’s distributed via a theme related to India’s banking sector. “The backdoor communicates with a dynamic DNS-based…