Microsoft Edge Update Disrupts Right-Click Paste in Teams
PremiumEdge update breaks right-click paste in Teams; workaround and patch ETA provided by vendor.
Monday, April 20
Apache ActiveMQ Vulnerability Poses New Threat as Exploits Emerge
PremiumRemote code execution CVE-2026-34197 exploited in the wild; upgrade and rotate credentials advised.
Critical FortiSandbox Vulnerability Demands Immediate Action
PremiumUnauthenticated command execution demonstrated; patch recommended and mitigations outlined.
Friday, April 17
Critical Vulnerability in Cisco Webex Allows User Impersonation
PremiumCritical Webex Services flaw allows impersonation; immediately apply vendor patches and enforce least-privilege access.
McGraw Hill Data Breach Exposes Millions: A Wake-Up Call for Security Measures
PremiumMcGraw Hill confirms a breach affecting 13.5M users; review Salesforce exposure, implement credential hygiene, and monitor for extortion chatter.
Ransomware Attack Disrupts Autovista's Operations Across Europe and Australia
PremiumAutovista faced ransomware impacting automotive data operations; assess backups, isolate affected systems, and strengthen access controls.
Microsoft Addresses Critical Vulnerabilities, Including Actively Exploited Zero-Day in SharePoint
PremiumMicrosoft released patches for SharePoint and 168 additional flaws, with one actively exploited in the wild; prioritize patch deployment and verification.
Wednesday, April 15
Data Breach at Basic-Fit Exposes Information of 1 Million Members
Europe's largest gym chain confirms a data breach exposing member data. Immediate actions include password resets and monitoring for fraud.
Malicious Chrome Extensions Found Stealing Data and Injecting Ads
A cluster of 108 malicious Chrome extensions communicates with a shared C2 to steal data and inject ads/JS on pages. Mitigation includes extension reviews and disabling suspicious add-ons.
Microsoft's April 2026 Patch Tuesday Tackles Critical Vulnerabilities
Microsoft released a massive April 2026 Patch Tuesday with 168 fixes, including an actively exploited SharePoint zero-day. Remediation prioritizes active exploits and affected services.
Massive Data Breach at Basic-Fit Affects One Million Members
Europe's largest gym chain confirms a data breach exposing member data. Immediate actions include password resets and monitoring for fraud.
Malicious Chrome Extensions Exploit Users: Data Theft and Ad Injection Uncovered
A cluster of 108 malicious Chrome extensions communicates with a shared C2 to steal data and inject ads/JS on pages. Mitigation includes extension reviews and disabling suspicious add-ons.
Microsoft's April 2026 Patch Tuesday Fixes Critical Vulnerabilities
Microsoft released a massive April 2026 Patch Tuesday with 168 fixes, including an actively exploited SharePoint zero-day. Remediation prioritizes active exploits and affected services.
Monday, April 13
Google Introduces Device-Bound Security in Chrome to Combat Session Hijacking
PremiumDevice-Bound Session Credentials (DBSC) became generally available for Chrome on Windows to prevent session hijacking. Update Chrome.
Urgent Update: Marimo RCE Vulnerability Actively Exploited
PremiumA critical pre-auth RCE in Marimo is being exploited in the wild, enabling credential theft. Patch and mitigation guidance advised.
Adobe Issues Urgent Patch for Zero-Day Vulnerability in Acrobat and Reader
PremiumAdobe patched a Reader zero-day (CV E-2026-34621) after it was exploited in the wild for months; keep systems updated.
Google's Chrome 146 Update Enhances Security with Device-Bound Session Credentials
PremiumDevice-Bound Session Credentials (DBSC) became generally available for Chrome on Windows to prevent session hijacking. Update Chrome.
Urgent Security Alert: Marimo Vulnerability Exploited for Credential Theft
PremiumA critical pre-auth RCE in Marimo is being exploited in the wild, enabling credential theft. Patch and mitigation guidance advised.
Urgent Patch Released for Long-Exploited Adobe Reader Vulnerability
PremiumAdobe patched a Reader zero-day (CV E-2026-34621) after it was exploited in the wild for months; keep systems updated.
Google Enhances Chrome Security with Device-Bound Session Credentials
PremiumDevice-Bound Session Credentials (DBSC) became generally available for Chrome on Windows to prevent session hijacking. Update Chrome.
Get these articles delivered to your inbox.
Subscribe free