Cyber alerts

Published Thursday 16 April 2026 (02:03) (updated 16 April 2026)

Cisco Releases Security Advisories for Critical Vulnerabilities in Identity Services Engine

An authenticated attacker could exploit the vulnerabilities to achieve remote code execution

Published Wednesday 15 April 2026 (03:48) (updated 24 April 2026)

Microsoft Releases April 2026 Security Updates

Scheduled updates for Microsoft products address 165 vulnerabilities, including CVE‑2026‑32201, an exploited spoofing vulnerability affecting SharePoint Server

Published Monday 13 April 2026 (02:37) (updated 13 April 2026)

Adobe Releases Security Update to Address a Vulnerability in Acrobat and Reader

CVE‑2026‑34621 could allow arbitrary code execution via malicious PDF files opened in vulnerable Adobe Acrobat or Reader installations.

Published Thursday 9 April 2026 (01:20) (updated 9 April 2026)

Mitel Releases Security Advisory for MiCollab

A critical SQL injection vulnerability could allow a remote unauthenticated attacker to access system information and execute arbitrary SQL database commands

Published Tuesday 7 April 2026 (04:03) (updated 7 April 2026)

Progress Releases Security Updates for ShareFile Storage Zones Controller (SZC)

Successful exploitation could allow an unauthenticated remote attacker to access on-prem storage zones controller’s configuration pages, potentially leading to changes in system configuration and remote code execution

Published Thursday 2 April 2026 (03:09) (updated 2 April 2026)

Google Releases Security Update for Chrome

Updates include 21 security fixes, including one that addresses an exploited high severity vulnerability (CVE-2026-5281)

Published Tuesday 31 March 2026 (02:04) (updated 31 March 2026)

Axios HTTP Client Package Compromise

Affected packages contain a malicious dependency designed to deploy remote access trojan malware

Published Friday 27 March 2026 (11:32) (updated 27 March 2026)

Telnyx PyPI Package Compromise

Affected packages contain a variant of the ContainerWorm malware, which can exfiltrate secrets and establish persistence

Published Wednesday 25 March 2026 (01:25) (updated 25 March 2026)

LiteLLM PyPI Package Compromise

Affected packages contain malicious code that can exfiltrate secrets and establish persistence

Published Monday 23 March 2026 (12:32) (updated 23 March 2026)

Oracle Releases Out-of-Band Security Update for Oracle Identity Manager and Oracle Web Services Manager

A critical vulnerability could allow an unauthenticated attacker to takeover Oracle Identity Manager and Oracle Web Services Manager