Email privacy articles, Gmail security guides, and tracking protection insights from Gblock. https://www.gblock.app/articles en Mon, 04 May 2026 00:00:00 +0000 https://www.gblock.app/articles/mini-shai-hulud-sap-npm-claude-code-persistence https://www.gblock.app/articles/mini-shai-hulud-sap-npm-claude-code-persistence Mon, 04 May 2026 00:00:00 +0000 The npm Worm That Hit SAP Last Week Is the First One That Hides Inside Your Claude Code Settings https://www.gblock.app/articles/hallmark-shinyhunters-salesforce-1-7m-breach https://www.gblock.app/articles/hallmark-shinyhunters-salesforce-1-7m-breach Mon, 04 May 2026 00:00:00 +0000 ShinyHunters Just Leaked Every Email You Ever Sent Hallmark Support—And the 1.7 Million Records Came With Phone Numbers and Mailing Addresses https://www.gblock.app/articles/clickup-hardcoded-api-key-959-emails-leak https://www.gblock.app/articles/clickup-hardcoded-api-key-959-emails-leak Mon, 04 May 2026 00:00:00 +0000 ClickUp Left an API Key in Its Homepage JavaScript for 15 Months—959 Fortune 500 Emails Were on the Other End https://www.gblock.app/articles/belarus-stv-pratasevich-doxx-bic-exiled-journalists https://www.gblock.app/articles/belarus-stv-pratasevich-doxx-bic-exiled-journalists Sun, 03 May 2026 00:00:00 +0000 Belarus State TV Just Read 21 Exiled Journalists' Home Addresses on Air—The Host Was Pulled Off a Plane to Be Forced Into the Job https://www.gblock.app/articles/consentfix-v3-azure-cli-oauth-microsoft-365-phishing https://www.gblock.app/articles/consentfix-v3-azure-cli-oauth-microsoft-365-phishing Sun, 03 May 2026 00:00:00 +0000 If You're Already Logged Into Microsoft 365, This New Phishing Attack Doesn't Need Your Password to Take Over https://www.gblock.app/articles/instructure-canvas-may-2026-breach-student-data https://www.gblock.app/articles/instructure-canvas-may-2026-breach-student-data Sun, 03 May 2026 00:00:00 +0000 Canvas Just Got Breached for the Second Time in Eight Months—And This Time They Took the Messages Too https://www.gblock.app/articles/apt28-frostarmada-router-dns-outlook-tokens https://www.gblock.app/articles/apt28-frostarmada-router-dns-outlook-tokens Fri, 01 May 2026 00:00:00 +0000 Russia's GRU Stopped Using Malware—It Just Changed the DNS on 18,000 Home Routers to Steal Outlook Email https://www.gblock.app/articles/adobe-mr-raccoon-13m-support-tickets-bpo-breach https://www.gblock.app/articles/adobe-mr-raccoon-13m-support-tickets-bpo-breach Fri, 01 May 2026 00:00:00 +0000 One Phishing Email Walked Out With 13 Million Adobe Support Tickets—And Every Bug Bounty Adobe Hadn't Patched Yet https://www.gblock.app/articles/microsoft-q1-2026-phishing-83-billion-qr https://www.gblock.app/articles/microsoft-q1-2026-phishing-83-billion-qr Fri, 01 May 2026 00:00:00 +0000 Microsoft Just Blocked 8.3 Billion Phishing Emails in 90 Days—QR Codes Hidden in PDFs Drove a 146% Surge https://www.gblock.app/articles/eu-meta-dsa-child-safety-age-verification https://www.gblock.app/articles/eu-meta-dsa-child-safety-age-verification Thu, 30 Apr 2026 00:00:00 +0000 Brussels Just Told Meta Its Age Check Is a Birthday Field—And 12% of European Children Under 13 Are Already On Instagram https://www.gblock.app/articles/bluekit-ai-phishing-service-gmail-outlook-icloud https://www.gblock.app/articles/bluekit-ai-phishing-service-gmail-outlook-icloud Thu, 30 Apr 2026 00:00:00 +0000 Phishing Kits Now Ship With AI, Voice Cloning, and 40 Templates—Bluekit's Default Target Is Your Gmail https://www.gblock.app/articles/adkka-6-8-billion-email-leak-breachforums https://www.gblock.app/articles/adkka-6-8-billion-email-leak-breachforums Thu, 30 Apr 2026 00:00:00 +0000 A Hacker Just Posted 6.8 Billion Email Addresses to BreachForums—And Researchers Confirmed 3 Billion of Them Are Real https://www.gblock.app/articles/ifj-global-surveillance-journalists-2026-study https://www.gblock.app/articles/ifj-global-surveillance-journalists-2026-study Thu, 30 Apr 2026 00:00:00 +0000 The IFJ Just Mapped Every Way Governments Spy on Journalists—And the Tools Are Now Off the Shelf https://www.gblock.app/articles/bluenoroff-calendly-zoom-deepfake-crypto-phishing https://www.gblock.app/articles/bluenoroff-calendly-zoom-deepfake-crypto-phishing Thu, 30 Apr 2026 00:00:00 +0000 North Korean Hackers Spent Months Building Their Fake Zoom Trap—Five Minutes Was All They Needed Once You Clicked https://www.gblock.app/articles/teampcp-supply-chain-checkmarx-bitwarden-trivy https://www.gblock.app/articles/teampcp-supply-chain-checkmarx-bitwarden-trivy Thu, 30 Apr 2026 00:00:00 +0000 Hackers Spent Two Months Backdooring the Tools Developers Trust Most—LAPSUS$ Just Dumped 96GB of Checkmarx's Code https://www.gblock.app/articles/microsoft-entra-agent-id-silverfort https://www.gblock.app/articles/microsoft-entra-agent-id-silverfort Wed, 29 Apr 2026 00:00:00 +0000 Microsoft Built an Admin Role Just for AI Agents—Researchers Showed It Could Take Over Global Admin Accounts in 99% of Companies https://www.gblock.app/articles/paragon-italy-graphite-journalist-investigation https://www.gblock.app/articles/paragon-italy-graphite-journalist-investigation Wed, 29 Apr 2026 00:00:00 +0000 Paragon Sold Spyware to Italy, Then Refused to Help Investigate When Journalists' Phones Got Hacked—A Year Later It Still Has Not Replied https://www.gblock.app/articles/chrome-extensions-layerx-selling-data https://www.gblock.app/articles/chrome-extensions-layerx-selling-data Wed, 29 Apr 2026 00:00:00 +0000 82 Chrome Extensions Legally Sell Your Browsing Data—Ad Blockers and Streaming Tools Lead the List https://www.gblock.app/articles/carnival-shinyhunters-mariner-society-breach https://www.gblock.app/articles/carnival-shinyhunters-mariner-society-breach Wed, 29 Apr 2026 00:00:00 +0000 ShinyHunters Stole 7.5 Million Cruise Customers' Email Addresses—Carnival Says It Was Just One Compromised Inbox https://www.gblock.app/articles/supreme-court-geofence-warrant-chatrie-location-privacy https://www.gblock.app/articles/supreme-court-geofence-warrant-chatrie-location-privacy Tue, 28 Apr 2026 00:00:00 +0000 The Supreme Court Is Deciding Whether Police Can Demand Google Hand Over Every Phone's Location Near a Crime Scene https://www.gblock.app/articles/ftc-social-media-scams-2-billion-facebook-2025 https://www.gblock.app/articles/ftc-social-media-scams-2-billion-facebook-2025 Tue, 28 Apr 2026 00:00:00 +0000 Americans Lost $2.1 Billion to Social Media Scams Last Year—Facebook Was the Top Platform https://www.gblock.app/articles/medtronic-shinyhunters-9m-records-breach https://www.gblock.app/articles/medtronic-shinyhunters-9m-records-breach Tue, 28 Apr 2026 00:00:00 +0000 The World's Largest Medical Device Maker Got Breached—ShinyHunters Claimed 9 Million Records and Then Went Silent https://www.gblock.app/articles/robinhood-phishing-email-flaw-gmail-dot-trick https://www.gblock.app/articles/robinhood-phishing-email-flaw-gmail-dot-trick Tue, 28 Apr 2026 00:00:00 +0000 Hackers Got Robinhood to Send Phishing Emails for Them—Every Spam Filter Waved Them Through https://www.gblock.app/articles/fast16-pre-stuxnet-nsa-cyber-sabotage https://www.gblock.app/articles/fast16-pre-stuxnet-nsa-cyber-sabotage Mon, 27 Apr 2026 00:00:00 +0000 Researchers Found a Cyber Weapon Hidden for 20 Years—It Sabotaged Engineering Software Five Years Before Stuxnet https://www.gblock.app/articles/fbi-ransomware-terrorism-hospital-deaths-kaiser https://www.gblock.app/articles/fbi-ransomware-terrorism-hospital-deaths-kaiser Mon, 27 Apr 2026 00:00:00 +0000 A Former FBI Cyber Chief Says Hospital Ransomware Should Be Prosecuted as Terrorism—Congress Is Listening https://www.gblock.app/articles/unc6692-snow-malware-teams-chrome-extension https://www.gblock.app/articles/unc6692-snow-malware-teams-chrome-extension Mon, 27 Apr 2026 00:00:00 +0000 Hackers Flooded Inboxes With Spam, Then Called on Teams—The Chrome Extension They Installed Stole the Entire Active Directory https://www.gblock.app/articles/hospital-tracking-pixel-settlements-100m-patient-data https://www.gblock.app/articles/hospital-tracking-pixel-settlements-100m-patient-data Mon, 27 Apr 2026 00:00:00 +0000 Hospitals Tracked Patients With the Same Pixel That Reads Your Email—They Have Paid $100 Million So Far https://www.gblock.app/articles/beprime-cybersecurity-firm-hacked-no-mfa https://www.gblock.app/articles/beprime-cybersecurity-firm-hacked-no-mfa Sun, 26 Apr 2026 00:00:00 +0000 A Cybersecurity Firm Got Hacked Because It Had No Two Factor Authentication—Then It Threatened the Journalists Who Reported It https://www.gblock.app/articles/toronto-sms-blaster-fake-cell-tower-arrests https://www.gblock.app/articles/toronto-sms-blaster-fake-cell-tower-arrests Sun, 26 Apr 2026 00:00:00 +0000 Fake Cell Towers Hijacked Tens of Thousands of Phones in Toronto—Three Men Face 44 Charges https://www.gblock.app/articles/adt-shinyhunters-10m-records-vishing https://www.gblock.app/articles/adt-shinyhunters-10m-records-vishing Sun, 26 Apr 2026 00:00:00 +0000 America's Largest Home Security Company Got Breached by a Phone Call—ShinyHunters Stole 10 Million Records https://www.gblock.app/articles/zimbra-xss-10000-email-servers-cisa https://www.gblock.app/articles/zimbra-xss-10000-email-servers-cisa Sun, 26 Apr 2026 00:00:00 +0000 Opening an Email on 10,000 Zimbra Servers Runs an Attacker's Code—CISA Gave Agencies Three Days to Patch https://www.gblock.app/articles/uk-ncsc-100-countries-commercial-spyware https://www.gblock.app/articles/uk-ncsc-100-countries-commercial-spyware Sat, 25 Apr 2026 00:00:00 +0000 100 Countries Can Now Hack Your Phone, UK Intelligence Says—And the Targets Are No Longer Just Journalists https://www.gblock.app/articles/blackfile-extortion-vishing-retail-hospitality https://www.gblock.app/articles/blackfile-extortion-vishing-retail-hospitality Sat, 25 Apr 2026 00:00:00 +0000 This Extortion Gang Calls Before It Hacks—BlackFile Uses Voice Phishing to Breach Retail and Hotel Chains https://www.gblock.app/articles/gopherwhisper-apt-outlook-email-c2-mongolia https://www.gblock.app/articles/gopherwhisper-apt-outlook-email-c2-mongolia Sat, 25 Apr 2026 00:00:00 +0000 A Chinese Spy Group Hid Commands Inside Outlook Draft Emails—They Were Never Sent https://www.gblock.app/articles/everest-ransomware-citizens-frost-bank-vendor-breach https://www.gblock.app/articles/everest-ransomware-citizens-frost-bank-vendor-breach Sat, 25 Apr 2026 00:00:00 +0000 Ransomware Hit Citizens Bank and Frost Bank Through a Vendor Neither Will Name—Two Class Actions Were Filed in Four Days https://www.gblock.app/articles/citizen-lab-telecom-ss7-surveillance-vendors https://www.gblock.app/articles/citizen-lab-telecom-ss7-surveillance-vendors Fri, 24 Apr 2026 00:00:00 +0000 Citizen Lab Found Two Spy Campaigns Hiding Inside Telecom Networks—Your Carrier Helped Them Track You https://www.gblock.app/articles/cisa-firestarter-cisco-federal-agency-breach https://www.gblock.app/articles/cisa-firestarter-cisco-federal-agency-breach Fri, 24 Apr 2026 00:00:00 +0000 CISA Confirmed a Federal Agency Was Backdoored Through Its Cisco Firewall—Patching Didn't Remove It https://www.gblock.app/articles/bitwarden-cli-shai-hulud-supply-chain-attack https://www.gblock.app/articles/bitwarden-cli-shai-hulud-supply-chain-attack Fri, 24 Apr 2026 00:00:00 +0000 Hackers Turned Bitwarden's CLI Into a Credential Stealer—It Also Hunted for Your AI Coding Assistant https://www.gblock.app/articles/rituals-cosmetics-41m-membership-breach https://www.gblock.app/articles/rituals-cosmetics-41m-membership-breach Fri, 24 Apr 2026 00:00:00 +0000 Rituals Has 41 Million Loyalty Members—Hackers Just Downloaded Their Data https://www.gblock.app/articles/secure-data-act-federal-privacy-law-state-preemption https://www.gblock.app/articles/secure-data-act-federal-privacy-law-state-preemption Fri, 24 Apr 2026 00:00:00 +0000 Congress Wants One Privacy Law to Replace All 20 State Laws—The ACLU Says It's a Privacy Bill in Name Only https://www.gblock.app/articles/uk-biobank-medical-data-alibaba-china https://www.gblock.app/articles/uk-biobank-medical-data-alibaba-china Fri, 24 Apr 2026 00:00:00 +0000 500,000 Britons' Genetic Data Was Listed for Sale on Alibaba—The UK Government Says It Was a Legitimate Download https://www.gblock.app/articles/stealtok-tiktok-extensions-browser-spying https://www.gblock.app/articles/stealtok-tiktok-extensions-browser-spying Fri, 24 Apr 2026 00:00:00 +0000 12 TikTok Downloader Extensions Secretly Profiled 130,000 Chrome Users—Some Are Still in the Web Store https://www.gblock.app/articles/crunchyroll-telus-bpo-breach-email-data https://www.gblock.app/articles/crunchyroll-telus-bpo-breach-email-data Fri, 24 Apr 2026 00:00:00 +0000 A Hacker Infected One Call Center Agent's Laptop—6.8 Million Crunchyroll Users' Emails Spilled in 24 Hours https://www.gblock.app/articles/kyber-post-quantum-ransomware-defense-contractor https://www.gblock.app/articles/kyber-post-quantum-ransomware-defense-contractor Thu, 23 Apr 2026 00:00:00 +0000 A New Ransomware Gang Is Using Post Quantum Encryption—Their First Victim Is a US Defense Contractor https://www.gblock.app/articles/uk-high-court-facial-recognition-police-legal https://www.gblock.app/articles/uk-high-court-facial-recognition-police-legal Thu, 23 Apr 2026 00:00:00 +0000 The UK Just Ruled That Police Can Scan 3 Million Faces a Year With AI—The Man It Wrongly Identified Plans to Appeal https://www.gblock.app/articles/apple-ios-notification-cache-fix-cve-2026-28950 https://www.gblock.app/articles/apple-ios-notification-cache-fix-cve-2026-28950 Thu, 23 Apr 2026 00:00:00 +0000 Apple Just Patched the iOS Bug That Let the FBI Read Your Deleted Signal Messages https://www.gblock.app/articles/alabama-21st-state-privacy-law-loopholes https://www.gblock.app/articles/alabama-21st-state-privacy-law-loopholes Thu, 23 Apr 2026 00:00:00 +0000 Alabama's New Privacy Law Passed 104 to 0—Consumer Reports Urged the Governor to Veto It https://www.gblock.app/articles/france-musk-grok-ai-deepfakes-investigation https://www.gblock.app/articles/france-musk-grok-ai-deepfakes-investigation Wed, 22 Apr 2026 00:00:00 +0000 French Prosecutors Raided X's Office and Summoned Elon Musk Over Grok's AI Deepfakes—He Didn't Show Up https://www.gblock.app/articles/vivaticket-ransomhouse-louvre-museum-ransomware https://www.gblock.app/articles/vivaticket-ransomhouse-louvre-museum-ransomware Wed, 22 Apr 2026 00:00:00 +0000 Ransomware Shut Down Online Tickets for the Louvre, the Eiffel Tower, and 3,500 Other Venues https://www.gblock.app/articles/nhs-synnovis-ransomware-two-years-disruption https://www.gblock.app/articles/nhs-synnovis-ransomware-two-years-disruption Wed, 22 Apr 2026 00:00:00 +0000 A Single Ransomware Attack Is Still Disrupting London Hospitals Almost Two Years Later—One Patient Death Was Linked to the Breach https://www.gblock.app/articles/ransomware-negotiator-martino-blackcat-guilty-plea https://www.gblock.app/articles/ransomware-negotiator-martino-blackcat-guilty-plea Wed, 22 Apr 2026 00:00:00 +0000 The Ransomware Negotiator Hired to Help Victims Was Secretly Working for BlackCat—He Just Pleaded Guilty https://www.gblock.app/articles/italy-poste-italiane-app-surveillance-fine https://www.gblock.app/articles/italy-poste-italiane-app-surveillance-fine Tue, 21 Apr 2026 00:00:00 +0000 Italy's National Postal Service Scanned Every App on Your Phone—The Regulator Just Fined Them €12.5 Million https://www.gblock.app/articles/scattered-spider-buchanan-guilty-plea-8m https://www.gblock.app/articles/scattered-spider-buchanan-guilty-plea-8m Tue, 21 Apr 2026 00:00:00 +0000 The Alleged Leader of Scattered Spider Just Pleaded Guilty—The $8 Million Phishing Spree Hit MGM, Coinbase, and Mailchimp https://www.gblock.app/articles/canada-life-shinyhunters-salesforce-breach https://www.gblock.app/articles/canada-life-shinyhunters-salesforce-breach Tue, 21 Apr 2026 00:00:00 +0000 ShinyHunters Breached Canada Life Through One Employee Account—5.6 Million Salesforce Records Are the Ransom https://www.gblock.app/articles/france-ants-passport-breach-19m https://www.gblock.app/articles/france-ants-passport-breach-19m Tue, 21 Apr 2026 00:00:00 +0000 France's Passport Agency Got Hacked—19 Million Citizens' Identity Records Are Now for Sale https://www.gblock.app/articles/apple-id-account-change-phishing-bypass https://www.gblock.app/articles/apple-id-account-change-phishing-bypass Mon, 20 Apr 2026 00:00:00 +0000 Scammers Are Sending Phishing From Apple's Own Email Servers—And Every Spam Filter Waves Them Through https://www.gblock.app/articles/vercel-breach-shinyhunters-context-ai-supply-chain https://www.gblock.app/articles/vercel-breach-shinyhunters-context-ai-supply-chain Mon, 20 Apr 2026 00:00:00 +0000 One Compromised Google Account at an AI Startup Just Gave Hackers the Keys to Vercel https://www.gblock.app/articles/covenant-health-qilin-ransomware-478k-patients https://www.gblock.app/articles/covenant-health-qilin-ransomware-478k-patients Mon, 20 Apr 2026 00:00:00 +0000 478,188 Patients Waited 7 Months to Hear That Qilin Ransomware Stole Their Medical Records https://www.gblock.app/articles/nist-nvd-cve-enrichment-policy-change https://www.gblock.app/articles/nist-nvd-cve-enrichment-policy-change Mon, 20 Apr 2026 00:00:00 +0000 NIST Just Gave Up on Rating Most New Vulnerabilities—The National Vulnerability Database Became a Triage Queue https://www.gblock.app/articles/apt28-ukraine-prosecutors-roundcube-email https://www.gblock.app/articles/apt28-ukraine-prosecutors-roundcube-email Sun, 19 Apr 2026 00:00:00 +0000 Russia Is Reading the Emails of Ukraine's Top Anti-Corruption Prosecutors—No Click Required https://www.gblock.app/articles/montana-mcdpa-cure-period-ends-april-2026 https://www.gblock.app/articles/montana-mcdpa-cure-period-ends-april-2026 Sun, 19 Apr 2026 00:00:00 +0000 Montana Just Became the First State That Can Sue You for a Privacy Violation Without Warning https://www.gblock.app/articles/fiverr-cloudinary-google-indexed-exposure https://www.gblock.app/articles/fiverr-cloudinary-google-indexed-exposure Sun, 19 Apr 2026 00:00:00 +0000 Your Fiverr Tax Forms Are on Google—And Fiverr Says That's Not a Breach https://www.gblock.app/articles/ippc-pharmacy-breach-133k-patients https://www.gblock.app/articles/ippc-pharmacy-breach-133k-patients Sun, 19 Apr 2026 00:00:00 +0000 A Pharmacy Lost 133,862 Patients' Social Security Numbers and Medical Records—Then Waited 7 Months to Tell Them https://www.gblock.app/articles/zionsiphon-water-treatment-ot-malware https://www.gblock.app/articles/zionsiphon-water-treatment-ot-malware Sat, 18 Apr 2026 00:00:00 +0000 Someone Built Malware to Poison Israel's Water Supply—A Single Coding Mistake Stopped It https://www.gblock.app/articles/coppa-updated-rule-april-2026-children-privacy https://www.gblock.app/articles/coppa-updated-rule-april-2026-children-privacy Sat, 18 Apr 2026 00:00:00 +0000 The FTC's Updated Children's Privacy Rule Takes Effect April 22—Here's What Changed https://www.gblock.app/articles/google-play-contact-location-privacy-android https://www.gblock.app/articles/google-play-contact-location-privacy-android Sat, 18 Apr 2026 00:00:00 +0000 Google Just Told Android Apps to Stop Reading Your Entire Contact List https://www.gblock.app/articles/defender-three-zero-days-redsun-undefend https://www.gblock.app/articles/defender-three-zero-days-redsun-undefend Sat, 18 Apr 2026 00:00:00 +0000 One Researcher Dropped Three Windows Defender Zero Days in 13 Days—Microsoft Has Only Patched One https://www.gblock.app/articles/athr-ai-vishing-platform-callback-phishing https://www.gblock.app/articles/athr-ai-vishing-platform-callback-phishing Fri, 17 Apr 2026 00:00:00 +0000 ATHR: The $4,000 AI Vishing Platform That Hunts Gmail, Microsoft 365, and Crypto Users—And It All Starts With an Email https://www.gblock.app/articles/agingfly-uac0247-ukraine-hospital-chrome-whatsapp https://www.gblock.app/articles/agingfly-uac0247-ukraine-hospital-chrome-whatsapp Fri, 17 Apr 2026 00:00:00 +0000 AgingFly Malware Hits Ukrainian Hospitals and Drone Operators—It Writes Its Own Code After Landing https://www.gblock.app/articles/google-broke-notify-promise-ice-subpoena https://www.gblock.app/articles/google-broke-notify-promise-ice-subpoena Fri, 17 Apr 2026 00:00:00 +0000 Google Broke Its 10 Year Promise to Warn Users Before Handing Data to Police—Then ICE Got a Student Journalist's Entire Account https://www.gblock.app/articles/ftc-okcupid-match-clarifai-facial-recognition https://www.gblock.app/articles/ftc-okcupid-match-clarifai-facial-recognition Fri, 17 Apr 2026 00:00:00 +0000 OkCupid Handed 3 Million Users' Photos to a Facial Recognition Company—The FTC Just Said That's Illegal https://www.gblock.app/articles/fake-ledger-app-apple-store-crypto-theft https://www.gblock.app/articles/fake-ledger-app-apple-store-crypto-theft Thu, 16 Apr 2026 00:00:00 +0000 A Fake Ledger App Passed Apple's Review and Stole $9.5 Million in Crypto https://www.gblock.app/articles/virginia-geolocation-data-sale-ban https://www.gblock.app/articles/virginia-geolocation-data-sale-ban Thu, 16 Apr 2026 00:00:00 +0000 Virginia Banned the Sale of Your Location Data—Six More States Are Next https://www.gblock.app/articles/wordpress-essential-plugin-supply-chain-backdoor https://www.gblock.app/articles/wordpress-essential-plugin-supply-chain-backdoor Thu, 16 Apr 2026 00:00:00 +0000 Someone Bought 30 WordPress Plugins and Backdoored All of Them for Eight Months https://www.gblock.app/articles/anthropic-mythos-ai-zero-day-exploits https://www.gblock.app/articles/anthropic-mythos-ai-zero-day-exploits Thu, 16 Apr 2026 00:00:00 +0000 Anthropic's AI Found a 27 Year Old Bug in 1,000 Tries—Now Every Patch Cycle Is a Race Against the Machine https://www.gblock.app/articles/chrome-108-malicious-extensions-oauth-telegram https://www.gblock.app/articles/chrome-108-malicious-extensions-oauth-telegram Wed, 15 Apr 2026 00:00:00 +0000 108 Malicious Chrome Extensions Are Stealing Google and Telegram Logins—They Are Still in the Chrome Web Store https://www.gblock.app/articles/russia-forest-blizzard-router-office-tokens https://www.gblock.app/articles/russia-forest-blizzard-router-office-tokens Wed, 15 Apr 2026 00:00:00 +0000 Russia Hijacked 18,000 Home Routers to Steal Microsoft Office Tokens—No Malware Required https://www.gblock.app/articles/big-tech-opt-out-signals-ignored https://www.gblock.app/articles/big-tech-opt-out-signals-ignored Wed, 15 Apr 2026 00:00:00 +0000 Google Ignores Your Privacy Opt-Out 86% of the Time—and It Is Not Alone https://www.gblock.app/articles/mcgraw-hill-shinyhunters-salesforce-breach https://www.gblock.app/articles/mcgraw-hill-shinyhunters-salesforce-breach Wed, 15 Apr 2026 00:00:00 +0000 McGraw-Hill Got Breached Through Salesforce—ShinyHunters Threatened to Leak 45 Million Records https://www.gblock.app/articles/fbi-w3ll-phishing-takedown-arrest https://www.gblock.app/articles/fbi-w3ll-phishing-takedown-arrest Tue, 14 Apr 2026 00:00:00 +0000 The FBI Just Shut Down a $500 Phishing Kit That Stole $20 Million—and Arrested Its Creator https://www.gblock.app/articles/booking-com-breach-reservation-data-pin-reset https://www.gblock.app/articles/booking-com-breach-reservation-data-pin-reset Tue, 14 Apr 2026 00:00:00 +0000 Booking.com Hackers Got Your Name, Address, and Every Message You Sent Your Hotel https://www.gblock.app/articles/basic-fit-breach-1-million-members-bank-data https://www.gblock.app/articles/basic-fit-breach-1-million-members-bank-data Tue, 14 Apr 2026 00:00:00 +0000 Basic-Fit Lost 1 Million Gym Members' Bank Details—The Breach Was Over in Minutes But the Damage Was Done https://www.gblock.app/articles/wolfssl-cve-2026-5194-certificate-forgery https://www.gblock.app/articles/wolfssl-cve-2026-5194-certificate-forgery Tue, 14 Apr 2026 00:00:00 +0000 The TLS Library Behind 5 Billion Devices Accepted Forged Certificates for Months https://www.gblock.app/articles/fbi-signal-iphone-notification-deleted-messages https://www.gblock.app/articles/fbi-signal-iphone-notification-deleted-messages Mon, 13 Apr 2026 00:00:00 +0000 The FBI Read Deleted Signal Messages on an iPhone—Without Breaking Encryption https://www.gblock.app/articles/marimo-rce-cve-2026-39987-ai-notebook https://www.gblock.app/articles/marimo-rce-cve-2026-39987-ai-notebook Mon, 13 Apr 2026 00:00:00 +0000 A Python AI Notebook Had No Password on Its Terminal—Hackers Found It in 10 Hours https://www.gblock.app/articles/signature-healthcare-anubis-ransomware-patient-data https://www.gblock.app/articles/signature-healthcare-anubis-ransomware-patient-data Mon, 13 Apr 2026 00:00:00 +0000 Anubis Ransomware Stole 2TB of Patient Data—Then Gave the Hospital Two Weeks to Pay or Lose It Forever https://www.gblock.app/articles/chrome-146-dbsc-cookie-theft-protection https://www.gblock.app/articles/chrome-146-dbsc-cookie-theft-protection Mon, 13 Apr 2026 00:00:00 +0000 Chrome 146 Ties Your Login to Your Hardware—Stolen Cookies Are Now Useless https://www.gblock.app/articles/uk-jail-tech-bosses-ai-nudification-deepfakes https://www.gblock.app/articles/uk-jail-tech-bosses-ai-nudification-deepfakes Sun, 12 Apr 2026 00:00:00 +0000 The UK Will Jail Tech Executives Who Fail to Remove AI Nudification Content—Fines Can Hit 10% of Global Revenue https://www.gblock.app/articles/webloc-penlink-ad-surveillance-500m-devices https://www.gblock.app/articles/webloc-penlink-ad-surveillance-500m-devices Sun, 12 Apr 2026 00:00:00 +0000 Police Are Tracking 500 Million Phones Through the Ads on Your Screen—No Warrant Required https://www.gblock.app/articles/snowflake-anodot-saas-breach-shinyhunters https://www.gblock.app/articles/snowflake-anodot-saas-breach-shinyhunters Sun, 12 Apr 2026 00:00:00 +0000 One Breached SaaS Tool Gave Hackers Access to Dozens of Snowflake Accounts—Including Rockstar Games https://www.gblock.app/articles/adobe-reader-zero-day-pdf-exploit-cve-2026-34621 https://www.gblock.app/articles/adobe-reader-zero-day-pdf-exploit-cve-2026-34621 Sun, 12 Apr 2026 00:00:00 +0000 Hackers Exploited an Adobe Reader Zero Day for Four Months—Opening a PDF Was All It Took https://www.gblock.app/articles/google-api-keys-gemini-android-apps-exposure https://www.gblock.app/articles/google-api-keys-gemini-android-apps-exposure Sat, 11 Apr 2026 00:00:00 +0000 32 Google API Keys in Popular Android Apps Now Unlock Gemini AI—500 Million Installs Affected https://www.gblock.app/articles/storm-2755-payroll-pirate-salary-theft https://www.gblock.app/articles/storm-2755-payroll-pirate-salary-theft Sat, 11 Apr 2026 00:00:00 +0000 Hackers Are Stealing Employees' Paychecks by Poisoning 'Office 365' Search Results https://www.gblock.app/articles/cpuid-cpu-z-hwmonitor-supply-chain-malware https://www.gblock.app/articles/cpuid-cpu-z-hwmonitor-supply-chain-malware Sat, 11 Apr 2026 00:00:00 +0000 Hackers Hijacked CPU-Z and HWMonitor Downloads for Six Hours—The Malware Stole Browser Passwords https://www.gblock.app/articles/gmail-e2ee-mobile-enterprise-only https://www.gblock.app/articles/gmail-e2ee-mobile-enterprise-only Sat, 11 Apr 2026 00:00:00 +0000 Gmail Finally Got End to End Encryption on Your Phone—Google Locked It Behind a Paywall https://www.gblock.app/articles/venom-phaas-executive-microsoft-phishing https://www.gblock.app/articles/venom-phaas-executive-microsoft-phishing Fri, 10 Apr 2026 00:00:00 +0000 A New Phishing Service Is Hunting CEOs—It Steals Microsoft 365 Logins and Bypasses MFA https://www.gblock.app/articles/eurail-passport-breach-300k-travelers https://www.gblock.app/articles/eurail-passport-breach-300k-travelers Fri, 10 Apr 2026 00:00:00 +0000 Eurail Lost 300,000 Travelers' Passport Numbers—It Took Three Months to Tell Them https://www.gblock.app/articles/mercor-ai-breach-litellm-supply-chain https://www.gblock.app/articles/mercor-ai-breach-litellm-supply-chain Fri, 10 Apr 2026 00:00:00 +0000 Hackers Stole 4TB From a $10 Billion AI Startup Through a 40 Minute Window in a Python Package https://www.gblock.app/articles/bluehammer-windows-zero-day-exploit https://www.gblock.app/articles/bluehammer-windows-zero-day-exploit Fri, 10 Apr 2026 00:00:00 +0000 A Frustrated Researcher Dropped a Windows Zero Day on GitHub—Microsoft Still Has No Patch https://www.gblock.app/articles/chipsoft-ransomware-dutch-hospitals-patient-data https://www.gblock.app/articles/chipsoft-ransomware-dutch-hospitals-patient-data Thu, 09 Apr 2026 00:00:00 +0000 Ransomware Hit the Company That Runs 80% of Dutch Hospitals' Patient Records https://www.gblock.app/articles/docker-cve-2026-34040-authorization-bypass https://www.gblock.app/articles/docker-cve-2026-34040-authorization-bypass Thu, 09 Apr 2026 00:00:00 +0000 One Oversized HTTP Request Gives Attackers Root on Any Docker Host https://www.gblock.app/articles/lapd-records-leak-city-attorney-world-leaks https://www.gblock.app/articles/lapd-records-leak-city-attorney-world-leaks Thu, 09 Apr 2026 00:00:00 +0000 7.7 Terabytes of Sensitive LAPD Records Leaked in City Attorney Hack https://www.gblock.app/articles/mena-hack-for-hire-bitter-journalists-egypt https://www.gblock.app/articles/mena-hack-for-hire-bitter-journalists-egypt Thu, 09 Apr 2026 00:00:00 +0000 A Hack-for-Hire Group Is Targeting Journalists Across the Middle East https://www.gblock.app/articles/angola-predator-spyware-journalist-press-freedom https://www.gblock.app/articles/angola-predator-spyware-journalist-press-freedom Wed, 08 Apr 2026 00:00:00 +0000 Predator Spyware Hacked an Angolan Journalist's Phone on World Press Freedom Day https://www.gblock.app/articles/fortinet-forticlient-ems-cve-2026-35616-zero-day https://www.gblock.app/articles/fortinet-forticlient-ems-cve-2026-35616-zero-day Wed, 08 Apr 2026 00:00:00 +0000 A Fortinet Zero Day Lets Hackers Take Over Your Company's Endpoints Without a Password https://www.gblock.app/articles/iran-hackers-us-water-energy-plc-scada https://www.gblock.app/articles/iran-hackers-us-water-energy-plc-scada Wed, 08 Apr 2026 00:00:00 +0000 Iranian Hackers Are Inside US Water and Energy Systems, Six Federal Agencies Warn https://www.gblock.app/articles/ice-graphite-zero-click-spyware-encrypted-messages https://www.gblock.app/articles/ice-graphite-zero-click-spyware-encrypted-messages Wed, 08 Apr 2026 00:00:00 +0000 ICE Just Admitted It Uses Zero Click Spyware That Can Read Your Encrypted Messages https://www.gblock.app/articles/pctattletale-stalkerware-prosecution-no-jail https://www.gblock.app/articles/pctattletale-stalkerware-prosecution-no-jail Tue, 07 Apr 2026 00:00:00 +0000 The First Stalkerware Maker Prosecuted in a Decade Just Got a $5,000 Fine and Zero Jail Time https://www.gblock.app/articles/fbi-ic3-17-billion-cyber-fraud-2025 https://www.gblock.app/articles/fbi-ic3-17-billion-cyber-fraud-2025 Tue, 07 Apr 2026 00:00:00 +0000 The FBI Says Americans Lost $17.6 Billion to Cyber Fraud Last Year—Business Email Scams Were the Second Biggest Driver https://www.gblock.app/articles/hasbro-cyberattack-weeks-recovery https://www.gblock.app/articles/hasbro-cyberattack-weeks-recovery Tue, 07 Apr 2026 00:00:00 +0000 Hasbro Got Hacked and Says Recovery Could Take Weeks—What It Means for Your Account https://www.gblock.app/articles/traffic-violation-qr-code-phishing-scam https://www.gblock.app/articles/traffic-violation-qr-code-phishing-scam Tue, 07 Apr 2026 00:00:00 +0000 That Traffic Violation Text With a QR Code Is a Scam—It Has Already Hit Eight States https://www.gblock.app/articles/react2shell-nextjs-credential-harvesting https://www.gblock.app/articles/react2shell-nextjs-credential-harvesting Mon, 06 Apr 2026 00:00:00 +0000 A Next.js Flaw Let Hackers Steal AWS, Stripe, and OpenAI Credentials From 766 Servers in 24 Hours https://www.gblock.app/articles/docketwise-immigration-data-breach https://www.gblock.app/articles/docketwise-immigration-data-breach Mon, 06 Apr 2026 00:00:00 +0000 DocketWise Breach Exposed 116,000 Immigration Clients' Most Sensitive Data https://www.gblock.app/articles/cisco-imc-cve-2026-20093-auth-bypass https://www.gblock.app/articles/cisco-imc-cve-2026-20093-auth-bypass Mon, 06 Apr 2026 00:00:00 +0000 One HTTP Request Makes You Admin on Thousands of Cisco Servers https://www.gblock.app/articles/sparkcat-app-store-crypto-wallet-malware https://www.gblock.app/articles/sparkcat-app-store-crypto-wallet-malware Mon, 06 Apr 2026 00:00:00 +0000 App Store Malware Scans Your Photos to Steal Crypto Wallets https://www.gblock.app/articles/stryker-handala-data-wiper-80k-devices https://www.gblock.app/articles/stryker-handala-data-wiper-80k-devices Sun, 05 Apr 2026 00:00:00 +0000 Iranian Hackers Wiped 80,000 Devices at a Medical Device Giant—It Took Three Weeks to Recover https://www.gblock.app/articles/nissan-everest-vendor-breach-dealership-data https://www.gblock.app/articles/nissan-everest-vendor-breach-dealership-data Sun, 05 Apr 2026 00:00:00 +0000 Nissan's Fourth Breach in Four Years Exposed 910GB of Customer and Loan Data https://www.gblock.app/articles/drift-protocol-280m-north-korea-solana-hack https://www.gblock.app/articles/drift-protocol-280m-north-korea-solana-hack Sun, 05 Apr 2026 00:00:00 +0000 North Korea Stole $280 Million From a Crypto Platform Without Exploiting a Single Bug https://www.gblock.app/articles/fcc-voxbeam-robocall-bank-impersonation-fine https://www.gblock.app/articles/fcc-voxbeam-robocall-bank-impersonation-fine Sun, 05 Apr 2026 00:00:00 +0000 A Florida Telecom Routed 61,000 Fake Bank Calls Through an Account Dead Since 2018 https://www.gblock.app/articles/die-linke-qilin-ransomware-german-democracy https://www.gblock.app/articles/die-linke-qilin-ransomware-german-democracy Sat, 04 Apr 2026 00:00:00 +0000 Russian Ransomware Hit a German Political Party—Democracy Was the Real Target https://www.gblock.app/articles/hims-hers-zendesk-shinyhunters-health-data-breach https://www.gblock.app/articles/hims-hers-zendesk-shinyhunters-health-data-breach Sat, 04 Apr 2026 00:00:00 +0000 Hims & Hers Lost Your Health Data Through a Customer Service Tool—Here's What Was Taken https://www.gblock.app/articles/adobe-mr-raccoon-13m-support-ticket-breach https://www.gblock.app/articles/adobe-mr-raccoon-13m-support-ticket-breach Sat, 04 Apr 2026 00:00:00 +0000 Adobe Got Breached Through a Single Phishing Email—13 Million Support Tickets Stolen https://www.gblock.app/articles/linkedin-chrome-extension-scanning-fingerprinting https://www.gblock.app/articles/linkedin-chrome-extension-scanning-fingerprinting Sat, 04 Apr 2026 00:00:00 +0000 LinkedIn Is Scanning Every Chrome Extension You Have—Including Your Privacy Tools