Latest IT News, Cybersecurity Alerts & Tech Innovations

iOS 26.4 Adds Age Verification for UK Apple Users
Apple's iOS 26.4 update introduces mandatory age verification requirements for UK users accessing certain services and account features.

Kali Linux 2026.1 Adds BackTrack Mode, 8 New Security Tools
Kali Linux 2026.1 launches with BackTrack mode for Kali-Undercover, eight new penetration testing tools, and refreshed desktop themes.

Russian Hacker Gets 2 Years for BitPaymer Ransomware Attacks
Aleksei Volkov sentenced to two years in prison for managing phishing botnet that enabled BitPaymer ransomware attacks against 72 U.S. companies.

HackerOne Employee Data Exposed in Navia Breach
HackerOne confirms hundreds of employee records were compromised in a cyberattack targeting third-party vendor Navia Benefits Solutions.

Microsoft Fixes Outlook Gmail Sync Bug After Months
Microsoft resolved persistent Outlook synchronization errors with Gmail and Yahoo accounts that generated 0x800CCC0F and 0x80070057 error codes.

PTC Patches Critical RCE Flaw in Windchill PLM Software
PTC Inc. fixed a critical remote code execution vulnerability in Windchill and FlexPLM that threatens manufacturing organizations worldwide.

Torg Grabber Infostealer Targets 728 Crypto Wallets via ClickFix PowerShell Attack
A newly identified infostealer named Torg Grabber is actively targeting 728 cryptocurrency wallet extensions across 25 browsers, using ClickFix-based PowerShell lures for initial access. Researchers at Gen Digital discovered 334 unique samples developed in just three months, with new command-and-control infrastructure deployed weekly.

TeamPCP Hackers Compromise LiteLLM Python Package in Supply Chain Attack
TeamPCP hacking group compromised the popular LiteLLM Python package on PyPI, claiming to have stolen data from hundreds of thousands of devices.

Firefox 149 Launches Built-in VPN with 50GB Monthly Data
Mozilla releases Firefox 149 featuring integrated VPN protection offering users up to 50GB of monthly encrypted traffic at no additional cost.

Chrome 146 Patches Eight High-Severity Memory Safety Flaws
Google released Chrome 146 on March 24, 2026, fixing eight high-severity memory safety vulnerabilities across seven browser components.

Windows 11 Emergency Patch KB5085516 Fixes Microsoft Account Sign-In Failures
Microsoft has released an out-of-band update (KB5085516) for Windows 11 versions 25H2 and 24H2 to resolve a sign-in failure affecting personal Microsoft accounts across multiple apps, including Teams Free and OneDrive. The issue was introduced by the March 2026 Patch Tuesday update and is now fully resolved.

Crunchyroll Investigates Data Breach After Hacker Claims 6.8M Records Stolen
Crunchyroll is investigating a security incident after a threat actor claimed to have exfiltrated personal data from approximately 6.8 million users via a compromised support agent account at a third-party BPO provider, Telus International.

FBI Warns of Iranian Hackers Using Telegram as Malware Command Infrastructure
The FBI has issued a warning about Iranian hackers linked to the Ministry of Intelligence and Security using Telegram as command-and-control infrastructure to deploy malware targeting journalists, dissidents, and opposition groups worldwide.

Exchange Online Virtual Account Bug Blocks Email on Mobile and Mac Apps
Microsoft is investigating an ongoing Exchange Online service disruption that has intermittently blocked users from accessing their cloud mailboxes via Outlook mobile and Mac apps since Thursday, caused by a newly introduced virtual account that is now being rolled back across affected environments.

CISA Orders Federal Agencies to Patch DarkSword iOS Flaws Exploited in Active Attacks
CISA has ordered U.S. federal agencies to patch three critical iOS vulnerabilities exploited by the DarkSword exploit kit, a sophisticated framework used in cryptocurrency theft and cyber-espionage campaigns linked to Russian intelligence and Turkish commercial surveillance actors.

Trivy Scanner Hit by Supply Chain Attack via GitHub Actions
TeamPCP threat actors compromised the popular Trivy vulnerability scanner, distributing credential-stealing malware through official releases and GitHub Actions workflows.

Android Advanced Flow Adds 24-Hour Wait for Sideloaded APKs
Google introduces Advanced Flow security mechanism requiring 24-hour delays before installing unverified APKs on Android devices.

Microsoft Targets File Explorer Performance Issues in Windows 11
Microsoft confirms it's actively working to fix File Explorer performance problems affecting menus, folders, and search functionality in Windows 11.

Windows 11 Gets Indefinite Update Deferral Option
Microsoft will allow Windows 11 users to indefinitely postpone system updates, restoring user control not seen since Windows 8.

Quest KACE CVE-2025-32975 Exploited in Education Attacks
Critical Quest KACE vulnerability CVE-2025-32975 has been actively exploited in targeted attacks against educational institutions worldwide.

FBI Warns of Russian Phishing Targeting Signal, WhatsApp Users
FBI alerts that Russian intelligence-linked attackers are actively compromising thousands of encrypted messaging app accounts through sophisticated phishing campaigns.

