Cybersecurity Flash Notices

Google Chrome 152 Released With 327 Security Fixes – 10 Critical Vulnerabilities

Google has released Chrome 152 with 327 security fixes, including 10 critical vulnerabilities affecting multiple browser components.

SynkLoader: New Malware Family Impersonates IT Support on Microsoft Teams for Credential Theft

Researchers identified a new multi-stage malware called SynkLoader being actively distributed in phishing campaigns targeting orgs via Microsoft Teams.

Microsoft Teams Impersonation and Chaos Ransomware Campaign

Avertium is tracking a ransomware campaign leveraging Microsoft Teams-based vishing, social engineering, and IT support impersonation to gain initial access to target environments.

Coordinated Attack on Rockwell MicroLogix PLCs Disrupts Water Systems Across 7+ States

A coordinated cyberattack targeted OT at water utilities across at least 7 states, with confirmed disruptions at 30+ Minnesota community water systems.

Critical Linux Kernel Vulnerability (qla2xxx Driver)

A critical vulnerability (CVSS 9.8) has been identified in the Linux kernel qla2xxx Fibre Channel (FC) driver.

Microsoft April 2026 Patch Tuesday – Multiple High-Impact Vulnerabilities

Microsoft’s April 2026 Patch Tuesday addresses 163+ vulnerabilities across Windows, Office, SharePoint, Microsoft Defender, and more.

Vercel Breach Highlights OAuth-Based AI Supply Chain Risk

Vercel confirms a security incident involving unauthorized access to internal systems after attackers abused OAuth access granted to a third-party AI tool.

Stored XSS in Adobe Commerce

CVE-2026-21284 is a Cross-Site Scripting (XSS) vulnerability in Adobe Commerce, allowing attackers to inject malicious scripts into vulnerable form fields.

Microsoft Devices Pricing Program Remote Code Execution Vulnerability

CVE-2026-21536 is a critical unauthenticated RCE in Microsoft Devices Pricing Program that lets attackers upload and execute malicious files on servers.

Fortinet Addresses Critical FortiCloud SSO Authentication Bypass Under Active Exploitation

Fortinet released guidance addressing CVE-2026-24858, a critical auth. bypass vulnerability affecting its FortiOS, FortiManager, & FortiAnalyzer products.

Prev 1 2 Next