Significant cybersecurity M&A deals announced by Airbus, Cyera, Fortra, Palo Alto Networks, Silverfort, and Socket. The post Cybersecurity M&A Roundup: 33 Deals Announced in April 2026 appeared first on SecurityWeek .
This report from Palo Alto Networks Unit 42 emphasizes that relying solely on endpoint detection and response (EDR) tools creates security blind spots that attackers exploit. Modern attacks often span multiple IT zones, including cloud services, identity and access management, operational technology, and IoT, making comprehensive telemetry ingestion and correlation essential. The report identifies scenarios where endpoint-only monitoring fails, such as cloud-to-endpoint pivots, covert command and control using identity theft, and threats from unmanaged rogue assets. Unit 42 advocates for a unified, AI-driven security operations center (SOC) platform that consolidates logs and alerts from all IT zones to improve detection and response. This approach reduces alert fatigue and enhances visibility, enabling faster and more effective threat mitigation. The report does not describe a specific vulnerability or exploit but highlights strategic detection challenges and recommendations for modern enterprise security.
Unit 42 has identified high-risk AI browser extensions that masquerade as productivity tools but actually steal user data, intercept prompts, and exfiltrate passwords. These malicious extensions pose a significant privacy and security risk to users by accessing sensitive information within the browser. No specific affected versions or patches are currently documented. The threat is categorized as high severity due to the potential for data theft and unauthorized access.
This entry is a thematic newsletter article from Cisco Talos emphasizing the importance of empathy in cybersecurity rather than describing a specific technical vulnerability. It discusses the human factors in security, the challenges posed by automated attacks, and strategic priorities for defenders. No concrete vulnerability details, affected versions, or exploit information are provided.
This blog post from Cisco Talos discusses the use of generative AI to create adaptive honeypots that simulate vulnerable systems such as Linux shells or IoT devices. These AI-powered honeypots can be rapidly deployed using simple text prompts and are designed to deceive AI-driven attacks, which often prioritize speed over stealth. By exploiting the lack of awareness in AI attackers, defenders can manipulate and study automated threats in real-time within controlled environments. The approach shifts defense strategies from passive detection to active engagement and deception of malicious AI agents. The blog includes example code demonstrating how to implement such a honeypot using an AI model to simulate system responses. This technique is intended to level the playing field against AI-automated attacks by turning attacker automation into a liability. No specific vulnerabilities or exploits are described, and no patch or remediation is applicable.
The Cisco Talos 2025 Year in Review highlights evolving attacker tactics emphasizing rapid exploitation, identity-based attacks, and persistent legacy vulnerabilities. Attackers increasingly abuse valid credentials, MFA workflows, and trusted systems to move laterally and evade detection. The report stresses prioritizing identity infrastructure protection, focusing on vulnerabilities with high exposure, addressing legacy embedded risks, securing critical management systems, and detecting anomalous behavior patterns despite automation and AI-driven attacks. While attackers move faster and leverage AI, their behavior still produces detectable anomalies distinct from normal users. Defenders are advised to focus on practical, prioritized controls and monitoring to detect and mitigate these threats effectively.
For the latest discoveries in cyber research for the week of 27th April, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Vercel, a frontend cloud platform, has disclosed a security incident linked to a compromise at Context.ai, where stolen OAuth tokens enabled unauthorized access through a connected app. The company reported access to employee […] The post 27th April – Threat Intelligence Report appeared first on Check Point Research .
TGR-STA-1030 is an active threat group observed by Unit 42 with ongoing activity primarily focused in Central and South America since February 2026. The group continues to use previously observed tactics, techniques, and procedures. There is no detailed technical vulnerability or exploit information provided, and no known exploits in the wild are reported. The threat is assessed as medium severity based on current observations.
For the latest discoveries in cyber research for the week of 20th April, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Booking.com, the Amsterdam-based travel platform, has confirmed a data breach after unauthorized parties accessed reservation data linked to some customers. Exposed information included names, email addresses, phone numbers, physical addresses, and booking […] The post 20th April – Threat Intelligence Report appeared first on Check Point Research .
Claims that “Microsoft is running one of the largest corporate espionage operations in modern history” face scrutiny as researchers analyze LinkedIn’s browser extension probing The post BrowserGate: Claims of LinkedIn ‘Spying’ Clash With Security Research Findings appeared first on SecurityWeek .
For the latest discoveries in cyber research for the week of 13th April, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES The Los Angeles Police Department has reported a data breach involving a digital storage system used by the L.A. City Attorney’s Office. The exposure included 7.7 terabytes and more than 337,000 files, […] The post 13th April – Threat Intelligence Report appeared first on Check Point Research .
We explore the risks of smart sex toys — from data breaches and tracking to vulnerabilities — and offer practical tips to keep your intimate life both private and secure.
For the latest discoveries in cyber research for the week of 30th March, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES The European Commission, the European Union’s executive body, has confirmed a data breach after its Europa.eu platform was compromised through a third-party exchange linked to the Trivy supply chain attack. The incident […] The post 6th April – Threat Intelligence Report appeared first on Check Point Research .
