Archive

April 26 edition: a five-day federal KEV sprint, AA26-113A on covert SOHO botnets, Vercel–Context.ai OAuth follow-on, Iran-nexus OT reporting, OCR ransomware settlements, SystemBC telemetry, and the Axios npm supply-chain alert.

CISA bulk-adds seven known-exploited flaws—including FortiClient EMS SQLi and an in-the-wild Acrobat Reader issue—while April Patch Tuesday lands a SharePoint ITW fix and extortion pressure hits Salesforce-hosted pages and Snowflake-adjacent analytics tokens.

CERT-EU confirms the European Commission's europa.eu cloud hosting was breached via the TeamPCP Trivy supply chain as CISA stacks April KEV deadlines across Chrome Dawn, Fortinet EMS, TrueConf, and Ivanti EPMM.

DoJ dismantles four IoT botnets behind a 31.4 Tbps DDoS world record as Trivy's security scanner is backdoored in a CI/CD supply chain attack and APT37 bridges air-gapped networks via USB.

ShinyHunters chain-breaches SaaS platforms with 1PB exfiltrated from Telus Digital as AI-generated malware enters production ransomware operations.