Lotus Wiper Malware Disrupts Venezuelan Energy Sector
PremiumNew destructive wiper targeting energy utilities; review backups and incident response playbooks.
§The archiveMon · Wed · FriM · W · F
News.
Every dispatch we've sent. AI-curated, human-reviewed, from 50+ cybersecurity sources.
Follow on LinkedInBrowse by topic
Friday, April 24
Vercel Security Breach Underscores Risks of Third-Party Integrations
PremiumExternal tooling compromise allowed unauthorized access; assess third-party risk and tighten vendor controls.
Microsoft Defender Vulnerability Exploited: Patch Recommended
PremiumZero-Day in Microsoft Defender exploited to access SAM and NTLM hashes; patch available. Review Windows security posture and apply the patch promptly.
Wednesday, April 22
CISA Identifies and Warns of Critical SD-WAN Vulnerability Exploitation
SD-WAN vulnerabilities being exploited; patch cadence and network segmentation remain critical.
Major Data Breaches at Healthcare Facilities Expose Sensitive Information of 600,000 Patients
Multiple healthcare providers disclosed breaches affecting hundreds of thousands; reinforces need for identity controls and data segregation.
Vercel Security Breach Highlights Risks of Third-Party Integrations
Third-party AI tool context access enabled a breach; emphasize third-party risk, credential hygiene, and cloud access reviews.
North Korean Hackers Exploit Vulnerabilities in Kelp DAO for Massive Crypto Theft
North Korean-linked actors exploited DeFi infrastructure to steal $290M in a high-profile crypto heist; organizations should review cross-chain and bridge trust controls.
Monday, April 20
Millions of FTP Servers Remain Vulnerable Despite Decline
PremiumLegacy FTP exposure persists; organizations urged to decommission or secure gateways.
Microsoft Edge Update Disrupts Right-Click Paste in Teams
PremiumEdge update breaks right-click paste in Teams; workaround and patch ETA provided by vendor.
Apache ActiveMQ Vulnerability Poses New Threat as Exploits Emerge
PremiumRemote code execution CVE-2026-34197 exploited in the wild; upgrade and rotate credentials advised.
Critical FortiSandbox Vulnerability Demands Immediate Action
PremiumUnauthenticated command execution demonstrated; patch recommended and mitigations outlined.
Friday, April 17
Critical Vulnerability in Cisco Webex Allows User Impersonation
PremiumCritical Webex Services flaw allows impersonation; immediately apply vendor patches and enforce least-privilege access.
McGraw Hill Data Breach Exposes Millions: A Wake-Up Call for Security Measures
PremiumMcGraw Hill confirms a breach affecting 13.5M users; review Salesforce exposure, implement credential hygiene, and monitor for extortion chatter.
Ransomware Attack Disrupts Autovista's Operations Across Europe and Australia
PremiumAutovista faced ransomware impacting automotive data operations; assess backups, isolate affected systems, and strengthen access controls.
Microsoft Addresses Critical Vulnerabilities, Including Actively Exploited Zero-Day in SharePoint
PremiumMicrosoft released patches for SharePoint and 168 additional flaws, with one actively exploited in the wild; prioritize patch deployment and verification.
Wednesday, April 15
Adobe Addresses Critical ColdFusion Vulnerabilities in Latest Patch
Adobe fixed 55 vulnerabilities across 11 products; critical ColdFusion flaws flagged as high risk for exploitation. Prioritize updates in coordinated patch cycles.
Data Breach at Basic-Fit Exposes Information of 1 Million Members
Europe's largest gym chain confirms a data breach exposing member data. Immediate actions include password resets and monitoring for fraud.
Malicious Chrome Extensions Found Stealing Data and Injecting Ads
A cluster of 108 malicious Chrome extensions communicates with a shared C2 to steal data and inject ads/JS on pages. Mitigation includes extension reviews and disabling suspicious add-ons.
Microsoft's April 2026 Patch Tuesday Tackles Critical Vulnerabilities
Microsoft released a massive April 2026 Patch Tuesday with 168 fixes, including an actively exploited SharePoint zero-day. Remediation prioritizes active exploits and affected services.
Adobe Addresses Critical Vulnerabilities in Latest Security Update
Adobe fixed 55 vulnerabilities across 11 products; critical ColdFusion flaws flagged as high risk for exploitation. Prioritize updates in coordinated patch cycles.
Get these articles delivered to your inbox.
Subscribe free