BuzzSec

A Chinese national accused of being a member of the Silk Typhoon hacking group has been extradited to the U.S. from Italy.  Xu Zewei, 34, was arrested in July 2025 by Italian authorities for his alleged links to the Chinese state-sponsored threat group and for orchestrating cyber attacks against American organizations and government agencies between February 2020 and June 2021, including from The Hacker News https://thehackernews.com/2026/04/chinese-silk-typhoon-hacker-extradited.html

Microsoft on Monday revised its advisory for a now-patched, high-severity security flaw impacting Windows Shell to acknowledge that it has been actively exploited in the wild. The vulnerability in question is CVE-2026-32202 (CVSS score: 4.3), a spoofing vulnerability that could allow an attacker to access sensitive information. It was addressed as part of its Patch Tuesday update for this from The Hacker News https://thehackernews.com/2026/04/microsoft-confirms-active-exploitation.html

Everything is dumb again. This week feels broken in a very familiar way. Old tricks are back. New tools are doing shady crap. Supply chains got hit. Fake help desks worked. Weird research showed how easy some attacks still are. Most of it feels like stuff we should have fixed years ago. Bad extensions. Stolen creds. Remote tools are getting abused. Malware hides in places people trust. Same from The Hacker News https://thehackernews.com/2026/04/weekly-recap-fast16-malware-xchat.html

Cybersecurity researchers have flagged dozens of Microsoft Visual Studio Code (VS Code) extensions on the Open VSX repository that are linked to a persistent information-stealing campaign dubbed GlassWorm. The cluster of 73 extensions has been identified as cloned versions of their legitimate counterparts. Of these, six have been confirmed to be malicious, with the remaining acting as seemingly from The Hacker News https://thehackernews.com/2026/04/researchers-uncover-73-fake-vs-code.html

Sent by a Spanish diplomat. Apparently people have been working on it since it was rediscovered in 1860. from Schneier on Security https://www.schneier.com/blog/archives/2026/04/medieval-encrypted-letter-decoded.html

Cybersecurity researchers have disclosed details of a telecommunications fraud campaign that uses fake CAPTCHA verification tricks to dupe unsuspecting users into sending international text messages that incur charges on their mobile bills, generating illicit revenue for the threat actors who lease the phone numbers. According to a new report published by Infoblox, the operation is believed to from The Hacker News https://thehackernews.com/2026/04/fake-captcha-irsf-scam-and-120-keitaro.html