[ad_1] Ravie LakshmananApr 16, 2026Malware / Threat Intelligence The Computer Emergencies Response Team of Ukraine (CERT-UA) has disclosed details of a new campaign that has targeted governments and municipal healthcare institutions, mainly clinics …
UAC-0247 Targets Ukrainian Clinics and Government in Data-Theft Malware Campaign Read More
[ad_1] Attackers are actively exploiting a critical flaw in the widely used nginx-ui interface for managing NGINX web servers. The flaw, tracked as CVE-2026-33032, (CVSS: 9.8) stems from nginx-ui’s insecure …
Critical MCP Integration Flaw Puts NGINX at Risk Read More
[ad_1] Asia’s digital supply chain has unique challenges compared to other parts of the world, and organizations must respond accordingly. That’s the upshot of an upcoming session at Black Hat …
Navigating Unique Security Risks of Asia’s Digital Supply Chain Read More
[ad_1] Ravie LakshmananApr 15, 2026Threat Intelligence / Cloud Security Threat actors have been observed weaponizing n8na popular artificial intelligence (AI) workflow automation platform, to facilitate sophisticated phishing campaigns and deliver malicious payloads …
n8n Webhooks Abused Since October 2025 to Deliver Malware via Phishing Emails Read More
[ad_1] Preparing for the post-quantum cryptography (PQC) era is going to take more than a simple migration plan. That’s the advice of cryptography expert Jean-Philippe Aumasson, who co-authored the FIPS 205 …
Preparing for ‘Q-Day’: Why Quantum Risk Management Is a Must Read More
[ad_1] Ravie LakshmananApr 15, 2026Web Security / Vulnerability A recently disclosed critical security flaw impacting nginx-ui, an open-source, web-based Nginx management tool, has come under active exploitation in the wild. The …
Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover Read More
[ad_1] One aspect of the « AI revolution » keeping security professionals up at night is the continued prevalence of prompt injection attacks that enable exfiltration of sensitive data — even against …
Microsoft, Salesforce Patch AI Agent Data Leak Flaws Read More
[ad_1] Microsoft today pushed software updates to fix a staggering 167 security vulnerabilities in its Windows operating systems and related software, including a SharePoint Server zero-day and a publicly disclosed …
Patch Tuesday, April 2026 Edition – Krebs on Security Read More