🐛 COMMON VULNERABILITIES AND EXPOSURES 9[−]
12 Apr KEVAdobe Patches Actively Exploited Acrobat Reader Flaw CVE-2026-34621Adobe has released emergency updates to fix a critical security flaw in Acrobat Reader that has come under active exploitation in the wild. The vulnerability, assigned the CVE identifier CVE-2026-34621, carries a CVSS score of 8.6 out of 10.0. Successful exploitation of…THEHACKERNEWS.COM
12 AprCVE-2026-35206 Helm Chart extraction output directory collapse via `Chart.yaml` name dot-segmentInformation published.MSRC.MICROSOFT.COM
12 AprCVE-2026-34757 LIBPNG has a yse-after-free in png_set_PLTE, png_set_tRNS and png_set_hIST leading to corrupted chunk data and potential heap information disclosureInformation published.MSRC.MICROSOFT.COM
12 AprCVE-2026-39853 osslsigncode has a Stack Buffer Overflow via Unbounded Digest Copy During Signature VerificationInformation published.MSRC.MICROSOFT.COM
12 AprCVE-2026-39855 osslsigncode has an Integer Underflow in PE Page Hash Calculation Can Cause Out-of-Bounds ReadInformation published.MSRC.MICROSOFT.COM
12 AprCVE-2026-39856 osslsigncode has an Out-of-Bounds Read via Unvalidated Section Bounds in PE Page Hash CalculationInformation published.MSRC.MICROSOFT.COM
12 AprAdobe Patches Reader Zero-Day Exploited for MonthsThe vulnerability is tracked as CVE-2026-34621 and Adobe has confirmed that it can be exploited for arbitrary code execution. The post Adobe Patches Reader Zero-Day Exploited for Months appeared first on SecurityWeek .SECURITYWEEK.COM
12 Apr KEVAdobe fixes actively exploited Acrobat Reader flaw CVE-2026-34621Adobe addressed a critical Acrobat Reader vulnerability, tracked as CVE-2026-34621, which is actively exploited to run malicious code. Adobe released emergency updates to address a critical vulnerability, tracked as CVE-2026-34621 (CVSS score of 8.6), in Adobe Acrobat Reader, whi…SECURITYAFFAIRS.COM
⚠️ VULNERABILITY DISCLOSURE 2[−]
12 AprHallmark - 1,736,520 breached accountsIn March 2026, Hallmark suffered an alleged breach and subsequent extortion after attackers gained access to data stored within Salesforce. The data was later published after the extortion deadline passed, exposing 1.7M unique email addresses across both Hallmark and the Hallmark…HAVEIBEENPWNED.COM
12 AprCritical Marimo pre-auth RCE flaw now under active exploitationA critical pre-authentication remote code execution (RCE) vulnerability in Marimo is now under active exploitation, leveraged for credential theft. [...]BLEEPINGCOMPUTER.COM
🔥 INCIDENT REPORTING 3[−]
12 AprCPUID Breach Distributes STX RAT via Trojanized CPU-Z and HWMonitor DownloadsUnknown threat actors compromised CPUID ("cpuid[.]com"), a website that hosts popular hardware monitoring tools like CPU-Z, HWMonitor, HWMonitor Pro, and PerfMonitor, for less than 24 hours to serve malicious executables for the software and deploy a remote access trojan cal…THEHACKERNEWS.COM
12 AprHackers claim control over Venice San Marco anti-flood pumpsHackers breached Venice ’s San Marco flood system, claiming control of pumps and the ability to disable defenses and flood coastal areas. The technologies that govern the physical world are the quiet infrastructure of modern life. From energy grids to water systems, from factorie…SECURITYAFFAIRS.COM
12 AprCrime-as-a-Service: Regierung warnt vor hochprofessionellen kriminellen NetzenRansomware bis Gewalt auf Bestellung: Der Staat reagiert auf die Umwandlung krimineller Gruppen in arbeitsteilige Ökonomien, die ihre Taten online koordinieren.HEISE.DE
🕵️ THREAT INTELLIGENCE 3[−]
12 AprNo one owes you supply-chain securitysubmitted by codeinabox to security 1 points | 0 comments https://purplesyringa.moe/blog/no-one-owes-you-supply-chain-security/ cross-posted from: lemmy.bestiver.se/post/1043778 CommentsPROGRAMMING.DEV
12 AprTIOBE Index for April 2026: C Gains Again While Rust Loses Some SteamApril 2026 TIOBE Index shows Python still leading, C strengthening in second, and Rust sliding to #16, suggesting its climb may be leveling off. The post TIOBE Index for April 2026: C Gains Again While Rust Loses Some Steam appeared first on TechRepublic .TECHREPUBLIC.COM
12 AprTIOBE Index for April 2026: Top 10 Most Popular Programming LanguagesPython remains on top despite another dip; C gains ground in second place, and April keeps the same top 10 order, with SQL, R, and Delphi holding steady. The post TIOBE Index for April 2026: Top 10 Most Popular Programming Languages appeared first on TechRepublic .TECHREPUBLIC.COM
📡 INFOSEC NEWS 2[−]
12 AprFrontier artificial intelligenceThis publication provides your organization with additional details on frontier AI, the associated risks and suggested mitigation measures to enhance your cyber security posture.CYBER.GC.CA
12 AprRockstar bestätigt Cyberangriff und DatendiebstahlDie bekannte Cybercrime-Gruppe Shiny Hunters erpresst Rockstar Games auf ihrer Webseite. Rockstar bestätigt einen Cybervorfall.HEISE.DE