• Ivanti is warning that a new security flaw impacting Endpoint Manager Mobile (EPMM) has been explored in limited attacks in the wild. The high-severity vulnerability, CVE-2026-6973 (CVSS score: 7.2), is a case of improper input validation affecting EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1. It allows “a remotely authenticated user with administrative access to achieve remote code

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybersecurity researchers have disclosed details of a new credential theft framework dubbed PCPJack that targets exposed cloud infrastructure and ousts any artifacts linked to TeamPCP from the environments. “The toolset harvests credentials from cloud, container, developer, productivity, and financial services, then exfiltrates the data through attacker-controlled infrastructure while attempting

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybersecurity expert Tom Rønning finds Microsoft Edge loads all saved passwords into computer memory as cleartext, making them easy for hackers to steal.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Senate Intelligence Committee Vice Chairman Mark Warner, D-Va., is demanding answers from the Department of Homeland Security over what he says is a sharp decline in federal election-security support ahead of the 2026 midterms, warning that cuts to the Cybersecurity and Infrastructure Security Agency could leave states more exposed to cyber threats and foreign interference.

    In a letter sent Wednesday to DHS Secretary Markwayne Mullin, Warner said state and local officials have reported that CISA is no longer providing the same level of election-security training, intelligence-sharing, and cybersecurity assistance it offered in prior election cycles.

    The letter adds to growing criticism over the Trump administration’s handling of CISA and its election-security mission, which has faced deep staffing reductions enacted over the last year. 

    “While the states are taking valiant and expensive measures to protect their elections, it is impossible for states to independently obtain intelligence, subject-matter expertise, and real-time incident reporting, and information at the scale and speed required to protect state elections from physical and cyber threats,” Warner wrote.

    After this story was published, a DHS spokesperson said that, under President Joe Biden, CISA “was focused on censorship, branding, and electioneering instead of defending America’s critical infrastructure.” 

    Under President Donald Trump, the spokesperson said the agency is “committed to delivering timely, actionable cyber threat intelligence, supporting federal, state, and local partners, and defending against both nation-state and criminal cyber threats.”

    “CISA’s mission is ensuring state and local election officials are cognizant of and utilize the most capable and timely threat intelligence, expertise, resources they need to defend against risks, and identify critical infrastructure security needs to maintain electoral functions,” the spokesperson said.

    Efforts under the Trump administration to shrink CISA and its election-security resources have strained relationships with state and local officials and have raised concerns that jurisdictions may be far less prepared to counter threats in November, officials in Michigan and Georgia said late last month.

    The administration’s fiscal 2027 budget proposal would eliminate the agency’s election security program funding, including information-sharing efforts and election security advisor positions. 

    Warner’s letter also cited testimony delivered last week by the head of U.S. Cyber Command and the National Security Agency, who said that foreign adversaries are expected to target the 2026 elections.

    The senator asked DHS to explain what CISA is doing to warn state and local officials about malign influence campaigns and cyber threats targeting election infrastructure. He also requested records of election-related training, cybersecurity reviews, incident responses and outreach efforts that have been conducted by the agency since January 2025.

    He also asked DHS whether any CISA personnel were involved in an FBI raid tied to election systems in Fulton County, Georgia — where Director of National Intelligence Tulsi Gabbard was publicly seen alongside federal officials — or in her office’s seizure and testing of voting machines in Puerto Rico. 

    The letter comes as the future of CISA’s election-security role has become increasingly uncertain. Republican lawmakers have long criticized the agency’s election-related activities, particularly after CISA publicly pushed back on Donald Trump's false claims about the 2020 election.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The hardest part of cybersecurity isn’t the technology, it’s the people. Every major breach you’ve read about lately usually starts the same way: one employee, one clever email, and one “Patient Zero” infection. In 2026, hackers are using AI to make these “first clicks” nearly impossible to spot. If a single laptop gets compromised on your watch, do you have a plan to stop it from taking down

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Palo Alto Networks has disclosed that threat actors may have attempted to unsuccessfully exploit a recently disclosed critical security flaw as early as April 9, 2026. The vulnerability in question is CVE-2026-0300 (CVSS score: 9.3/8.7), a buffer overflow vulnerability in the User-ID Authentication Portal service of Palo Alto Networks PAN-OS software that could allow an unauthenticated attacker

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • 28 fake “call history” utilities on Google Play, collectively installed more than 7.3 million times, have been exposed as subscription scams that generate fabricated logs instead of real phone records, with several also bypassing Google’s official billing system to make refunds harder for victims. The CallPhantom apps advertise an impossible service: detailed call histories, SMS […]

    The post Fake Call History Apps on Google Play Steal Payments, Hit 7.3M+ Downloads appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • May 1, 2026, marked the 60th day of Operation Epic Fury in Iran – a symbolically significant date designating when a president who has mounted unilateral military operations must receive Congressional approval or wind it down. 

    However, the complex history of the War Powers Resolution clock demonstrates it is a toothless milestone.

    The Trump administration signaled on April 30, 2026, that it would ignore that deadline, set by the War Powers Resolution. Defense Secretary Pete Hegseth testified before the Senate Armed Services Committee that “we are in a cease-fire right now, which my understanding is that the 60-day clock pauses or stops in a cease-fire. That’s our understanding, so you know.” 

    Sen. Tim Kaine of Virginia, a Democrat, responded that the 60-day threshold poses a “legal question” and “constitutional concerns.” 

    This is not the first time presidents and members of Congress have sparred on the meaning of the War Powers Resolution. What happens next will play out through regular politics, because the conflict is not a matter of simple legal interpretation.

    In the U.S. Constitution, Congress and the president share war powers. 

    In the shadow of political struggles in the final years of the Vietnam War, Congress passed the War Powers Resolution in 1973 to “insure that the collective judgment of both the Congress and the President will apply to the introduction of United States Armed Forces into hostilities.” 

    A crucial section of the resolution reasserts legislators’ role, and makes clear that the constitutional power of the president to make war is subject to, or exercised with, the following conditions: a Congressional declaration of war; specific statutory authorization; or a national emergency created by attack upon the United States, its territories or possessions or its armed forces.

    For new military campaigns that do not meet these criteria, the resolution included a 60-day clock that begins when a president reports the action to congressional leadership within 48 hours of the action beginning.

    The clock can be expanded to up to 90 days upon presidential determination and certification of “unavoidable military necessity respecting the safety of United States Armed Forces” related to removal of troops.

    After 60 to 90 days, the resolution originally said this type of unilateral military action would be terminated automatically unless both chambers of Congress approved some form of legislative authorization. 

    Congress could also choose to terminate an unauthorized military operation any time before the 60 days with a concurrent resolution, which doesn’t require a president’s signature – essentially, a “legislative veto.”

    And to make sure the president couldn’t stretch the definition of congressional approval, the resolution said neither existing treaties nor new budget appropriations could substitute for legislative authorization of a military action.

    Since 1973, actions by all three branches across a variety of political and policy landscapes have undermined its intents and procedures. 

    Veto, vetoed

    In 1983, the Supreme Court declared various kinds of legislative vetoes unconstitutional, which led Congress to reinterpret its War Powers Resolution procedures and powers and effectively amend its processes to expedite any joint resolution or bill that “requires the removal of U.S. armed forces from hostilities outside the United States.”

    Now, if members want to stop a presidential military campaign already in progress, they must act affirmatively and pass a disapproval resolution, which a president could veto like any other bill. Congress has sent only one such disapproval – to President Donald Trump in his first term – which he vetoed. Congress did not have the two-thirds required in the Constitution to override. 

    Both chambers of Congress now have to vote twice, once to disapprove a military action and then again to overcome a likely veto, to stop something it never approved in the first place. 

    House Majority Leader Mike Johnson explains on March 4, 2026, why his party rejects a Democratic-led measure to assert Congress’ war powers and stop the Iran military action.

    The 60-day mark for the current Iran operation has therefore loomed as more of a politically charged symbol of this longstanding imbalance on war powers than a real deadline for action by either branch.

    Parallels to Kosovo and Libya

    The House and Senate have tried to pass legislation to stop military operations against Iran six times since operations began. All attempts have failed, including the most recent vote on April 30. Democrats are considering filing suit against President Trump if operations go beyond 60 days without authorization. 

    Yet federal courts have long expressed disinterest in getting involved in constitutional questions related to the War Powers Resolution, especially if members of Congress are the plaintiffs.

    Although most presidents from Richard Nixon onward have claimed that the War Powers Resolution is an unconstitutional check on their institutional powers, they usually filed the required reports on new military actions 48 hours after they began.

    While the current Iran conflict is different in many ways, presidential unilateralism, inconclusive chamber actions and even member lawsuits all echo controversies over U.S. military action in Kosovo in 1999 and Libya in 2011. 

    Where Trump administration may lean on Clinton

    Operation Epic Fury against Iran began Feb. 28, 2026, and President Trump sent the required report to Congress on March 2, 2026.

    After detailing the rationale for military action, Trump added “Although the United States desires a quick and enduring peace, it is not possible at this time to know the full scope and duration of military operations that may be necessary.” 

    He concluded the memo with his interpretation of constitutional power to act unilaterally.

    “I directed this military action consistent with my responsibility to protect Americans and United States interests both at home and abroad and in furtherance of United States national security and foreign policy interests,” the president wrote. He acted, he said, “pursuant to my constitutional authority as Commander in Chief and Chief Executive to conduct United States foreign relations.” He said he made the report “consistent with the War Powers Resolution. I appreciate the support of the Congress in these actions.”

    Similarly, on March 26, 1999, President Bill Clinton sent a War Powers Resolution letter explaining his decision two days earlier to take part in a NATO-led operation against the Federal Republic of Yugoslavia, known as FRY. 

    Clinton wrote to Congress using mostly the same words and phrases Trump did in his 2026 letter. Clinton also said that he took the action “in response to the FRY government’s continued campaign of violence and repression against the ethnic Albanian population of Kosovo.”

    A gray-haired man in a dark jacket and blue tie, sitting at a desk in a very formal looking room.

    President Bill Clinton after his television address to the nation on the NATO bombing of Serbian forces in Kosovo, March 24, 1999. Pool/Getty Images

    Clinton explained his authority in virtually the same language as Trump and, like Trump, said it was hard to predict how long the operations would continue. 

    The House and Senate repeatedly failed to either approve or disapprove of Clinton’s actions through a series of votes across March and April 1999. But lawmakers did send him supplemental appropriations for the operations in May.

    NATO suspended the operation after 78 days. Almost a year later, a federal appellate court upheld a district court’s decision rejecting a lawsuit led by Rep. Tom Campbell, a California Republican, alleging Clinton violated the War Powers Resolution. Rather than deciding on the merits, the decision rejected the lawmakers’ claims of injury as not reviewable by the court.

    Obama did it, too

    In a very different context, a similar rhythm played out during President Barack Obama’s presidency. 

    During the “Arab Spring” revolts of 2010-2011, the U.N. Security Council passed two resolutions condemning violence against Libyan civilians by security forces under the direction of Colonel Moammar Gadhafi. 

    On March 21, 2011, two days after NATO operations began against Gadhafi’s forces, which included American air support, Obama sent his War Powers Resolution letter to the Republican House and Democratic Senate. Obama had not received prior legislative authority from Congress.

    Obama’s letter included language almost identical to Clinton’s earlier letter and Trump’s later one.

    As with Kosovo, the House and Senate did not ultimately agree to either approve or disapprove of the president’s actions in support of the UN and NATO over the operation’s 222 days. In addition, Democratic Rep. Dennis Kucinich of Ohio led a group of mostly Republican House members in a failed War Powers Resolution lawsuit to stop the president.

    Unilateral action endures

    The Office of Legal Counsel in the Department of Justice has published legal opinions that explain and defend presidential war powers, including with Kosovoand Libya. In December 2025, that office published a memo defending the imminent January 2026 capture of Nicolás Maduro. On April 21, 2026, the State Department published a defense of ongoing U.S. actions in Iran. 

    Within the current dynamics of the War Powers Resolution, until Congress musters bipartisan supermajorities to connect its own institutional ambition with constitutional power, presidents from either party will decide alone if, and when, the country goes to war. Instead of Congress, presidents may heed public opinionand economic indicators, especially in election years.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding a newly identified, severe vulnerability within Palo Alto Networks PAN-OS. Officially tracked as CVE-2026-0300, this critical flaw was aggressively added to CISA’s Known Exploited Vulnerabilities (KEV) catalog on May 6, 2026. Because the vulnerability grants unauthorized users complete system control, federal agencies […]

    The post CISA Issues Warning Over Palo Alto PAN-OS Flaw Enabling Root-Level Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • This week in cybersecurity from the editors at Cybercrime Magazine

    Sausalito, Calif. – May. 7, 2026

    – Watch the YouTube video

    Cybercrime Magazine visited the Long Island Museum in Stony Brook, N.Y., and explored the most complete collection of Apple computers in the U.S. (and maybe the world), assembled and restored by local resident Kevin Lenane. His collection celebrates the technological and design innovations of Apple that brought personal computing devices into the homes—and now the hands—of all Americans.

    The exhibition features a rare 1976 Apple-1 computer, marking the 50th anniversary of its release, alongside artifacts from Apple’s groundbreaking Lisa and Mac development projects of the 1980s.

    Visitors can also explore Apple’s 1990s experiments with personal digital assistants and televisions, as well as the iconic, colorful iMac G3. Original marketing materials from one of Long Island’s earliest Mac retailers round out the experience, bringing the story of innovation to life.

    Watch the 2-minute video, and it’s the next best thing to being there!

    Watch the Video



    Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:

    • SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
    • NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
    • HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
    • VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
    • M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
    • BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
    • PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
    • PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
    • RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.

    Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.

    The post 50 Years Of Apple Computer: The Most Complete Collection In The U.S. appeared first on Cybercrime Magazine.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶