Shortnews - it-daily.net - Daily relevant IT news for decision-makers

Smart devices and the Internet of Things

Chinese hackers hide behind hijacked devices

23. April, 2026 - 16:25

Security authorities are warning that Chinese hackers are using infiltrated devices to spy on political figures and companies in a targeted manner. The threat also extends to private IT equipment and smart devices.

Data gone anyway

Ransomware: Paying the ransom does not pay off

23. April, 2026 - 08:43

Companies that pay after an attack usually do not get their data back anyway. A new study reveals how unprepared small businesses are for ransomware and why the ransom trap is so dangerous.

Classified as a zero-day vulnerability

Over 1,300 Microsoft SharePoint servers remain unprotected despite patch

22. April, 2026 - 15:45

More than 1,300 publicly accessible Microsoft SharePoint servers remain vulnerable to a critical spoofing security flaw that is already being actively exploited by threat actors.

Anthropic: No evidence so far

Claude Mythos: Unauthorized individuals gained access to super AI

22. April, 2026 - 09:14

A media report is raising questions about the security measures surrounding a new AI model from Anthropic that is exceptionally capable of finding software vulnerabilities.

Next.js develope

Hackers steal Vercel data and demand $2 million

21. April, 2026 - 15:52

A Vercel employee granted a third-party AI tool full OAuth access to their corporate Google Workspace account. Attackers exploited that access and worked their way deep into the infrastructure of the company behind Next.js.

Social Engineering

Microsoft Teams helpdesk scam: A nine-step attack chain targeting corporate networks

21. April, 2026 - 13:32

When the IT support team reaches out via Microsoft Teams, flags an urgent security update, and requests remote access, it sounds like routine maintenance. In reality, it may be one of the most dangerous intrusion methods targeting enterprise networks today.

Social Media

Pro-Iran hacker group claims responsibility for Bluesky DDoS attack

21. April, 2026 - 13:22

A group calling itself Islamic Cyber Resistance in Iraq says it brought down the decentralized social network for nearly 24 hours. Bluesky has not confirmed who was behind the attack and says no user data was compromised.

Disruption

ChatGPT down: Thousands of outage reports filed world wide

20. April, 2026 - 17:42

Users across the world are reporting widespread issues with ChatGPT. Visiting chatgpt.com currently returns nothing but an error page.

Misuse of legitimate Apple notifications

New phishing wave exploits Apples own servers

20. April, 2026 - 14:45

Cybercriminals are exploiting Apple’s automated security notification system to send fraudulent purchase alerts that bypass virtually every spam filter in existence.