Robinhood account creation flaw abused to send phishing emails

Published on April 27, 2026

Online trading platform Robinhood's account creation process was exploited by threat actors to inject phishing messages into legitimate emails, tricking users into believing their accounts had suspicious activity. [...]

Continue reading on website
Other news

GlassWorm malware attacks return via 73 OpenVSX "sleeper" extensions

April 27, 2026
A new wave of the Glassworm campaign is targeting the OpenVSX ecosystem with 73 "sleeper" extensions that turn malicious after an update. [...]

Microsoft Confirms Active Exploitation of Windows Shell CVE-2026-32202

April 28, 2026
Microsoft on Monday revised its advisory for a now-patched, high-severity security flaw impacting Windows Shell to acknowledge that it has been actively exploited in the wild.The vulnerability in question is CVE-2026-32202 (CVSS score: 4.3), a spoofing vulnerability that could allow an attacker to access sensitive information. It was addressed as part of its Patch Tuesday update for this