> TODAY'S SUMMARY (110 articles)
Today's cybersecurity landscape reveals several critical threats and vulnerabilities. Over 600,000 WordPress sites are at risk due to a newly discovered SQL injection vulnerability in the Backuply plugin. Additionally, a serious flaw in Cisco's Secure Email Gateway is actively being exploited, allowing attackers to gain root access and execute commands. The UK Legal Aid Agency hack has expanded in scope, with records dating back to 1978 compromised. New malware, including the Android RAT "Hirudo," is stealing banking credentials by replacing legitimate apps. Meanwhile, sophisticated spyware distribution methods via targeted ads raise concerns about zero-click exploits. Organizations are urged to patch vulnerabilities promptly as the cyber threat landscape evolves rapidly.
|
// AI-powered summary generated at 16:01
Generative AI is moving from experimentation to everyday enterprise use, often faster than governance models were designed to support. As adoption accelerates, organizations are navigating the evolving landscape with new questions around security, data privacy, compliance, and control, all while bei...
A recently disclosed critical security flaw impacting nginx-ui, an open-source, web-based Nginx management tool, has come under active exploitation in the wild.
The vulnerability in question is CVE-2026-33032 (CVSS score: 9.8), an authentication bypass vulnerability that enables threat actors to sei...
Stop managing risk in silos. VM-Native OT Discovery, now available in Tenable Vulnerability Management and Tenable Security Center provides unified visibility across IT and OT domains. See every asset and manage your total cyber exposure in a unified view.
Key takeaways
The air gap is dead. IT se...
Axonius has expanded its Asset Cloud with AI-powered remediation in Axonius Exposures, added support for IoT and OT environments via Axonius Cyber-Physical Assets, and introduced a new data trust standard with Axonius Verified Assets. “Security environments have grown more distributed, more dynamic,...
AI is accelerating database change in financial services. Learn why governance must extend to the database layer to protect data integrity and compliance.
The post AI Risk in Financial Services Starts at the Database appeared first on Security Boulevard.
How Active Directory modern attacks exploit credential exposure—not just weak passwords For years, organizations have relied on native Active Directory password policies as the foundation of identity security. Minimum length requirements, character complexity, password history, account lockout thres...
A number of critical vulnerabilities impacting products from Adobe, Fortinet, Microsoft, and SAP have taken center stage in April's Patch Tuesday releases.
Topping the list is an SQL injection vulnerability impacting SAP Business Planning and Consolidation and SAP Business Warehouse (CVE-2026-27681,...
A suspected pro-Russian hacker group attempted to disrupt operations at a thermal power plant in western Sweden last year, a Swedish defense official said.
Offered as a MaaS to a small number of affiliates, mainly Russian speakers, the RAT can turn devices into residential proxy nodes.
The post Mirax RAT Targeting Android Users in Europe appeared first on SecurityWeek.
Enterprise AI agents are supposed to streamline workflows. Instead, two fresh findings show they can just as easily streamline data exfiltration.
Security researchers have uncovered prompt-injection vulnerabilities in both Microsoft Copilot Studio and Salesforce Agentforce...
Capsule Security emerges from stealth with a $7M seed round to launch a runtime security platform for AI agents. Featuring the open-source ClawGuard, the platform enforces governance and mitigates prompt injection risks like ShareLeak and PipeLeak without requiring SDKs or proxies.
The post Capsule...
A step change in frontier AI models’ capabilities to find vulnerabilities in code can ultimately be a good thing for our cyber security.
Learn how to build fraud-resistant user onboarding with KYC and authentication to enhance security, prevent fraud, and ensure compliance.
The post Building Fraud-Resistant User Onboarding With KYC and Authentication appeared first on Security Boulevard.
Vuln old enough to drive lands on CISA's exploited list While Microsoft was rolling out its bumper Patch Tuesday updates this week, US cybersecurity agency CISA was readying an alert about a 17-year-old critical Excel flaw now under exploit.…
Mirax, a new Android RAT, spread via Meta ads, infected 220,000 users and turns devices into SOCKS5 proxies, giving attackers full remote control. Mirax is a new Android remote access trojan spreading through ads on Meta platforms, targeting mainly Spanish-speaking users and reaching over 220,000 ac...
Microsoft confirmed on Tuesday that some Windows Server 2025 devices will boot into BitLocker recovery after installing the April 2026 KB5082063 Windows security update. [...]
This is the fourth installment of a blog series reflecting on the global digital legacy of the 2011 Arab uprisings. You can read the rest of the series here.
Iran’s internet has been intermittently disrupted for months. After years of bombardment, Gaza’s telecommunications infrastructure remains fra...
The flaws could allow a remote attacker to maintain access after their account has been disabled and to access information from other user sessions.
The post Two Vulnerabilities Patched in Ivanti Neurons for ITSMÂ appeared first on SecurityWeek.
AI has Moved Past Experimentation Most companies are using tools, running pilots, and seeing early productivity gains. Yet there is a visible gap between usage...Read More
The post AI Native Enterprise Transformation: From Experimentation to Scalable Impact in 2026 appeared first on ISHIR | Custom A...
Command prefix will require password by default The latest version of Raspberry Pi OS now requires a password for sudo by default.…