A new cybercrime platform called ATHR is enabling fully automated voice phishing attacks at scale, using AI voice agents to handle the social engineering phase without human involvement.
ATRH is being marketed as a criminal-as-a-service platform combining traditional vishing infrastructure with AI voice agents capable of conducting natural-sounding conversations.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-34197 to its Known Exploited Vulnerabilities (KEV) Catalog on April 16, 2026, confirming that threat actors are actively exploiting a critical remote code execution vulnerability in Apache ActiveMQ. The flaw, patched on March 30 in ActiveMQ Classic versions 6.2.
Just a test.
What Happened A security researcher operating under the aliases "Chaotic Eclipse" or "Nightmare-Eclipse" published proof-of-concept exploit code for three Windows zero-day vulnerabilities in protest over Microsoft Security Response Center's handling of their disclosures. The three flaws — dubbed BlueHammer, RedSun, and UnDefend — were all zero-days
What Happened Microsoft confirmed this week that the April 2026 Windows security update (KB5082063) is causing Local Security Authority Subsystem Service (LSASS) crashes on non-Global Catalog domain controllers running Privileged Access Management (PAM). Affected servers enter restart loops during early startup, before authentication and directory services can come online. The