🐛 COMMON VULNERABILITIES AND EXPOSURES 3[−]
19 AprCVE-2026-6100 Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressureInformation published.MSRC.MICROSOFT.COM
19 AprCVE-2026-4786 Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()Information published.MSRC.MICROSOFT.COM
⚠️ VULNERABILITY DISCLOSURE 1[−]
19 AprVercel confirms security incident as hackers claim to sell internal accessVercel has disclosed a security incident involving unauthorized access to parts of its internal systems, as a threat actor simultaneously claims to be selling access keys, source code, and database information allegedly linked to the company. The incident was confirmed on April 1…CYBERINSIDER.COM
📢 SECURITY ADVISORIES 1[−]
19 AprA new licensing period and legal regulations for VPN services are being discussed in Türkiye.submitted by gokayburucdev to cybersecurity 10 points | 0 comments https://shiftdelete.net/turkiyede-vpn-saglayicilari-icin-lisans-donemi-basliyor Under the new legal framework, all VPN platforms accessible in Turkey will first be required to fulfill certain legal obligations. Se…SH.ITJUST.WORKS
🔥 INCIDENT REPORTING 2[−]
19 AprCyber attacks fuel surge in cargo theft across logistics industryHackers infiltrate logistics firms to steal cargo and divert payments, cyberattacks are linked to organized crime and rising losses. Proofpoint researchers observed crooks targeting trucking and logistics companies, running coordinated remote access campaigns to steal cargo and d…SECURITYAFFAIRS.COM
19 AprCarnival Corporation probes data breach after claims of 8.7M records theftCarnival Corporation is investigating a potential data breach after the ShinyHunters extortion group claimed to have stolen millions of records and threatened to leak the data if its demands are not met. ShinyHunters listed Carnival Corporation on its “pay or leak” portal on Apri…CYBERINSIDER.COM
🕵️ THREAT INTELLIGENCE 2[−]
19 AprOil Industry Hacker Accused of Targeting Environmental Activists Appears in Courtsubmitted by Valnao to cybersecurity 7 points | 0 comments https://www.nytimes.com/2026/04/17/climate/amit-forlit-hacking-court.html?unlocked_article_code=1.cFA.JFPQ.Que4w_FTZDNbSH.ITJUST.WORKS
19 AprMicrosoft's Silent Lockout: Why WireGuard, VeraCrypt & Windscribe Can No Longer Update Windows Userssubmitted by cm0002 to cybersecurity 20 points | 2 comments https://techlore.tech/microsofts-silent-lockout-why-wireguard-veracrypt-windscribe-can-no-longer-update-windows-users/INFOSEC.PUB
🌐 CYBER THREAT LANDSCAPE 2[−]
19 AprSecurity Affairs newsletter Round 573 by Pierluigi Paganini – INTERNATIONAL EDITIONA new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Hidden VMs: how hackers lever…SECURITYAFFAIRS.COM
19 AprSECURITY AFFAIRS MALWARE NEWSLETTER ROUND 93Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape CPU-Z / HWMonitor watering hole infection – a copy-pasted attack Fake Claude site installs malware that gives attackers access to your…SECURITYAFFAIRS.COM
📡 INFOSEC NEWS 2[−]
19 AprStaatliches Bedrohungsmanagement: Psychisch kranke Personen mit RisikopotentialPsychisch krank und potenziell gefährlich? Bund und Länder bauen ihre Frühwarnsysteme auf – mit Datenaustausch, Fallmanagement und Risikoanalyse.HEISE.DE
19 AprPalantir posts mini-manifesto denouncing inclusivity and ‘regressive’ culturesPalantir's ideological bent has come under more scrutiny as it's worked with ICE and positioned itself as a defender of "the West."TECHCRUNCH.COM