News PricingLogin

§The archiveMon · Wed · FriM · W · F

News.

Every dispatch we've sent. AI-curated, human-reviewed, from 50+ cybersecurity sources.

Follow on LinkedIn

Browse by topic

CVE & Vulnerabilities Ransomware Phishing & Social Engineering Data Breaches

sec-news.ai

About•Privacy Policy•Terms of Use•Submit or contribute•API Access•RSS

Built by Guillaume Bonnet · Questions or feedback? Reach out on LinkedIn

V U L N E R

Wednesday, April 22

North Korean Hackers Exploit Vulnerabilities in Kelp DAO for Massive Crypto Theft
North Korean-linked actors exploited DeFi infrastructure to steal $290M in a high-profile crypto heist; organizations should review cross-chain and bridge trust controls.
Apr 22·securityweek.com
cve & vulnerabilities securityweek.com

Monday, April 20

Millions of FTP Servers Remain Vulnerable Despite Decline
Premium
Legacy FTP exposure persists; organizations urged to decommission or secure gateways.
Apr 20·cybersecuritynews.com
cve & vulnerabilities cybersecuritynews.com
Microsoft Edge Update Disrupts Right-Click Paste in Teams
Premium
Edge update breaks right-click paste in Teams; workaround and patch ETA provided by vendor.
Apr 20·bleepingcomputer.com
cve & vulnerabilities bleepingcomputer.com
Apache ActiveMQ Vulnerability Poses New Threat as Exploits Emerge
Premium
Remote code execution CVE-2026-34197 exploited in the wild; upgrade and rotate credentials advised.
Apr 20·securityweek.com
cve & vulnerabilities securityweek.com
Critical FortiSandbox Vulnerability Demands Immediate Action
Premium
Unauthenticated command execution demonstrated; patch recommended and mitigations outlined.
Apr 20·cybersecuritynews.com
cve & vulnerabilities cybersecuritynews.com

Friday, April 17

Critical Vulnerability in Cisco Webex Allows User Impersonation
Premium
Critical Webex Services flaw allows impersonation; immediately apply vendor patches and enforce least-privilege access.
Apr 17·cybersecuritynews.com
cve & vulnerabilities phishing & social engineering cybersecuritynews.com

Wednesday, April 15

Adobe Addresses Critical ColdFusion Vulnerabilities in Latest Patch
Adobe fixed 55 vulnerabilities across 11 products; critical ColdFusion flaws flagged as high risk for exploitation. Prioritize updates in coordinated patch cycles.
Apr 15·securityweek.com
cve & vulnerabilities cloud security securityweek.com

Monday, April 13

Google Introduces Device-Bound Security in Chrome to Combat Session Hijacking
Premium
Device-Bound Session Credentials (DBSC) became generally available for Chrome on Windows to prevent session hijacking. Update Chrome.
Apr 13·thehackernews.com
phishing & social engineering thehackernews.com

Previous1…131415Next

Dispatches 261–280 of 292 · Page 14 of 15

Get these articles delivered to your inbox.

Subscribe free

McGraw Hill Data Breach Exposes Millions: A Wake-Up Call for Security Measures

Premium

McGraw Hill confirms a breach affecting 13.5M users; review Salesforce exposure, implement credential hygiene, and monitor for extortion chatter.

Apr 17·bleepingcomputer.com

data breaches bleepingcomputer.com

Ransomware Attack Disrupts Autovista's Operations Across Europe and Australia

Premium

Autovista faced ransomware impacting automotive data operations; assess backups, isolate affected systems, and strengthen access controls.

Apr 17·securityweek.com

ransomware securityweek.com

Microsoft Addresses Critical Vulnerabilities, Including Actively Exploited Zero-Day in SharePoint

Premium

Microsoft released patches for SharePoint and 168 additional flaws, with one actively exploited in the wild; prioritize patch deployment and verification.

Apr 17·thehackernews.com

cve & vulnerabilities cloud security thehackernews.com

Data Breach at Basic-Fit Exposes Information of 1 Million Members

Europe's largest gym chain confirms a data breach exposing member data. Immediate actions include password resets and monitoring for fraud.

Apr 15·securityweek.com

data breaches securityweek.com

Malicious Chrome Extensions Found Stealing Data and Injecting Ads

A cluster of 108 malicious Chrome extensions communicates with a shared C2 to steal data and inject ads/JS on pages. Mitigation includes extension reviews and disabling suspicious add-ons.

Apr 15·thehackernews.com

thehackernews.com

Microsoft's April 2026 Patch Tuesday Tackles Critical Vulnerabilities

Microsoft released a massive April 2026 Patch Tuesday with 168 fixes, including an actively exploited SharePoint zero-day. Remediation prioritizes active exploits and affected services.

Apr 15·cybersecuritynews.com

cve & vulnerabilities cybersecuritynews.com

Adobe Addresses Critical Vulnerabilities in Latest Security Update

Adobe fixed 55 vulnerabilities across 11 products; critical ColdFusion flaws flagged as high risk for exploitation. Prioritize updates in coordinated patch cycles.

Apr 15·securityweek.com

cve & vulnerabilities cloud security securityweek.com

Massive Data Breach at Basic-Fit Affects One Million Members

Europe's largest gym chain confirms a data breach exposing member data. Immediate actions include password resets and monitoring for fraud.

Apr 15·securityweek.com

data breaches securityweek.com

Malicious Chrome Extensions Exploit Users: Data Theft and Ad Injection Uncovered

A cluster of 108 malicious Chrome extensions communicates with a shared C2 to steal data and inject ads/JS on pages. Mitigation includes extension reviews and disabling suspicious add-ons.

Apr 15·thehackernews.com

cve & vulnerabilities thehackernews.com

Microsoft's April 2026 Patch Tuesday Fixes Critical Vulnerabilities

Microsoft released a massive April 2026 Patch Tuesday with 168 fixes, including an actively exploited SharePoint zero-day. Remediation prioritizes active exploits and affected services.

Apr 15·cybersecuritynews.com

cve & vulnerabilities cybersecuritynews.com