Supply Chain Attack Targets SAP NPM Packages with Malicious Code
PremiumMini Shai-Hulud supply-chain attack breached SAP-related NPM packages to steal credentials; review dependencies and monitor for credential theft.
Friday, May 1
Windows 11 Update Disrupts Third-Party Backup Software
PremiumApril 2026 Windows 11 update breaks third-party backup software; assess vendor patches and rollback options to avoid data loss.
Critical Flaw in Google Gemini CLI Poses Severe Security Risks
PremiumA maximum severity remote code execution flaw in the Gemini CLI and related GitHub Actions could allow attackers to run code on host systems. Apply patches immediately.
Critical Vulnerability in cPanel & WHM Exploited for Months
PremiumActive exploitation of a critical auth bypass in cPanel/WHM has been observed in the wild for months, enabling unauthorized admin access. Patch and containment efforts are underway.
Wednesday, April 29
Critical GitHub RCE Vulnerability Exposed by AI-Aided Research
RCE in GitHub's internal git infra could allow full server compromise; authenticated access required.
Critical SQL Injection Vulnerability in LiteLLM Exposes Cloud Credentials
Critical pre-auth SQL injection in LiteLLM openly exploited in the wild, exposing cloud credentials.
VECT 2.0 Ransomware Misleads as Destructive Data Wiper
VECT 2.0 acts more as a data wiper due to encryption nonce flaws; recovery unlikely even for attackers.
Microsoft Secures Entra ID Against Privilege Escalation Threat
Flawed Entra ID role could enable privilege escalation; Microsoft issued patches after discovery by researchers.
Monday, April 27
ADT Data Breach Exposes Millions After ShinyHunters' Threat
PremiumADT confirms data breach following ShinyHunters' extortion claim; millions potentially affected.
Urgent Security Alert: SimpleHelp Vulnerabilities Demand Immediate Action
PremiumTwo actively exploited SimpleHelp remote-support flaws pose direct access risks to networks.
FIRESTARTER Backdoor Targets Cisco Devices in Federal Security Breach
PremiumState-sponsored actors chain CVEs to backdoor FXOS/ASA devices; FIRESTARTER persists after patches.
PhantomRPC: Unpatched Windows Vulnerability Allows Privilege Escalation
PremiumNew Windows RPC flaw PhantomRPC enables LPE with multiple exploitation paths; disclosed at Black Hat Asia 2026.
Friday, April 24
Lotus Wiper Malware Disrupts Venezuelan Energy Sector
PremiumNew destructive wiper targeting energy utilities; review backups and incident response playbooks.
Vercel Security Breach Underscores Risks of Third-Party Integrations
PremiumExternal tooling compromise allowed unauthorized access; assess third-party risk and tighten vendor controls.
Microsoft Defender Vulnerability Exploited: Patch Recommended
PremiumZero-Day in Microsoft Defender exploited to access SAM and NTLM hashes; patch available. Review Windows security posture and apply the patch promptly.
Wednesday, April 22
CISA Identifies and Warns of Critical SD-WAN Vulnerability Exploitation
SD-WAN vulnerabilities being exploited; patch cadence and network segmentation remain critical.
Major Data Breaches at Healthcare Facilities Expose Sensitive Information of 600,000 Patients
Multiple healthcare providers disclosed breaches affecting hundreds of thousands; reinforces need for identity controls and data segregation.
Vercel Security Breach Highlights Risks of Third-Party Integrations
Third-party AI tool context access enabled a breach; emphasize third-party risk, credential hygiene, and cloud access reviews.
North Korean Hackers Exploit Vulnerabilities in Kelp DAO for Massive Crypto Theft
North Korean-linked actors exploited DeFi infrastructure to steal $290M in a high-profile crypto heist; organizations should review cross-chain and bridge trust controls.
Monday, April 20
Get these articles delivered to your inbox.
Subscribe free