Cyber Security News

Hacking Editorial Brief – April 23, 2026

Nation-State Operations Target Crypto, Infrastructure, and Government Data

North Korean threat actors successfully siphoned over $12 million from cryptocurrency users in a widespread campaign deploying multiple malware families including BeaverTail, OtterCookie, and InvisibleFerret across 26,584 victims. Separately, the Harvester APT group deployed the Linux-based GoGra backdoor in South Asian operations, leveraging Microsoft Graph API for command and control. France confirmed a significant breach at France Titres, the national ID management agency, with threat actors claiming access to 19 million citizen records now circulating on hacking forums. Chinese threat actors continue demonstrating operational security failures, with researchers identifying hardcoded credentials embedded directly in backdoor tools—a pattern reflecting the overlapping contractor ecosystem driving China's offensive cyber operations.

AI-Driven Vulnerabilities and Critical Infrastructure Exposures

Anthropic's Claude Mythos AI model identified 271 zero-day vulnerabilities in Mozilla Firefox, marking the largest single vulnerability disclosure in the browser's history and fueling ongoing debate about AI-enabled offensive capabilities. Former Acting National Cyber Director Kemba Walden warned that Mythos can compromise "nearly anything," while South Korea's cybersecurity agency issued advisories about AI functioning as autonomous threat actors rather than mere hacking assistants. In hardware security, Forescout disclosed BRIDGE:BREAK, a set of 22 vulnerabilities affecting Lantronix and Silex serial-to-IP converters with nearly 20,000 devices exposed globally. Microsoft shipped out-of-band patches for a critical privilege escalation flaw in ASP.NET Core, while warning that Teams collaboration features are increasingly exploited for helpdesk impersonation attacks. Cloud platform Vercel disclosed a breach stemming from the Context.ai supply chain compromise, exposing internal systems and customer credentials through a compromised employee account.

Sources: Fortune · GovInfoSecurity · The Record · TechCrunch · The Hacker News · Dark Reading · Cybersecurity News · Bleeping Computer · Security Affairs