fp-3b

Windows 11 Update May Trigger BitLocker Recovery Key Prompt, Microsoft Warns

Posted: April 17, 2026

Categories: Updates, Windows, Microsoft

Tags: fp-6a, fp-5a, fp-3b, fp-3a, fp-2b, fp-2a, fp-1b, fp-1a

Author: Npav Lab

Microsoft confirms Windows 11 April 2026 updates may force BitLocker recovery key entry due to policy issues, impacting enterprise systems and IT operations.

Booking.com Data Breach Exposes Customer Information, Raises Phishing Risks

Posted: April 15, 2026

Categories: Data Breach, Phishing, Impersonation phishing, Whale phishing

Tags: fp-4b, fp-4a, fp-3b, fp-3a, fp-2b, fp-2a, fp-1b, fp-1a

Author: Npav Lab

Booking.com confirms data breach exposing customer booking details. Hackers may use stolen data for phishing and fraud attacks targeting travelers.

AI Router Vulnerabilities Enable Code Injection and Data Theft Attacks

Posted: April 14, 2026

Categories: Cyber Attack, Data Breach, vulnerability, AI

Tags: fp-4b, fp-4a, fp-3b, fp-3a, fp-2b, fp-2a, fp-1b, fp-1a

Author: Npav Lab

AI router flaws allow attackers to inject malicious code, steal credentials, and hijack AI workflows. Learn risks and how to secure AI systems.

Massive China Supercomputer Breach Exposes Defense Data for Sale

Posted: April 13, 2026

Categories: Data Breach, Hacking, Hacker

Tags: fp-5a, fp-4b, fp-4a, fp-3b, fp-3a, fp-2a, fp-1b, fp-1a

Author: Npav Lab

Hackers allegedly stole 10 petabytes of sensitive data from a Chinese supercomputer, including defense files and missile schematics, now being sold online.

React Server Components Vulnerability CVE-2026-23869 Enables DoS Attacks

Posted: April 10, 2026

Categories: Cyber Attack, vulnerability, DDoS

Tags: fp-4b, fp-4a, fp-3b, fp-3a, fp-2c, fp-2b, fp-2a, fp-1b, fp-1a

Author: Npav Lab

A critical React Server Components flaw (CVE-2026-23869) allows attackers to trigger DoS attacks by exhausting server resources with crafted requests.

LucidRook Malware Spread via Fake Security Software Targets Taiwan Organizations

Posted: April 09, 2026

Categories: Security, Malware Alerts, Cloud malware

Tags: fp-5a, fp-4a, fp-3b, fp-3a, fp-2a, fp-1b, fp-1a, f-4b

Author: Npav Lab

Hackers use fake antivirus software to deliver LucidRook malware in targeted attacks on Taiwan NGOs and universities, exploiting spearphishing techniques.

BlueHammer Windows Zero-Day Enables Privilege Escalation to SYSTEM Access

Posted: April 08, 2026

Categories: Windows

Tags: fp-4a, fp-3b, fp-3a, fp-2a, fp-1b, fp-1a

Author: Npav Lab

The BlueHammer Windows zero-day vulnerability allows attackers to gain SYSTEM-level access using public exploit code, posing a major security risk.

GPUBreach Attack Enables Full CPU Privilege Escalation via GPU Memory Exploit

Posted: April 07, 2026

Categories: Cyber Attack

Tags: fp-5a, fp-4b, fp-4a, fp-3b, fp-3a, fp-1b, fp-1a

Author: Npav Lab

New GPUBreach attack uses RowHammer on GPU memory to gain full CPU access, bypassing protections and posing risks to AI and cloud systems.

Infiniti Stealer Malware Targets macOS via Fake Cloudflare CAPTCHA

Posted: March 27, 2026

Categories: Malware Alerts, Data Breach

Tags: fp-5a, fp-4b, fp-4a, fp-3b, fp-3a, fp-1b, fp-1a

Author: Npav Lab

Infiniti Stealer is a new macOS malware spreading through fake Cloudflare CAPTCHA pages, tricking users into running malicious commands and stealing sensitive data.

SolarWinds Web Help Desk Vulnerability (CVE-2025-26399) Enables Remote Command Execution

Posted: March 12, 2026

Categories: vulnerability, Website hacks

Tags: fp-5a, fp-3b, fp-3a, fp-1b, fp-1a

Author: Npav Lab

A critical SolarWinds Web Help Desk vulnerability (CVE-2025-26399) allows attackers to execute commands via deserialization flaws. CISA warns organizations to patch immediately.