ICYMI: 2025-04-16
Latest Headlines
Experts Uncover Four New Privilege Escalation Flaws in Windows Task Scheduler
Google Blocked 5.1B Harmful Ads and Suspended 39.2M Advertiser Accounts in 2024
Gamma AI Platform Abused in Phishing Chain to Spoof Microsoft SharePoint Logins
From Third-Party Vendors to U.S. Tariffs: The New Cyber Risks Facing Supply Chains
New BPFDoor Controller Enables Stealthy Lateral Movement in Linux Server Attacks
Product Walkthrough: A Look Inside Wing Security’s Layered SaaS Identity Defense
Chinese Android Phones Shipped with Fake WhatsApp, Telegram Apps Targeting Crypto Users
U.S. Govt. Funding for MITRE’s CVE Ends April 16, Cybersecurity Community on Alert
‘Stupid and Dangerous’: CISA Funding Chaos Threatens Essential Cybersecurity Program
Many Mobile Apps Fail Basic Security—Posing Serious Risks to Enterprises
Ransomware Group Claims Hacking of Oregon Regulator After Data Breach Denial
Enhanced Version of ‘BPFDoor’ Linux Backdoor Seen in the Wild
Chrome 135, Firefox 137 Updates Patch Severe Vulnerabilities
Server-Side Phishing Attacks Employees & Member Portals to Steal Login Credentials
2 Apple Iphone Zero-Day Vulnerabilities Actively Exploited in Extremely Sophisticated Attacks
Beware of Online PDF Converters That Tricks Users to Install Password Stealing Malware
Researchers Deanonymized Medusa Ransomware Group’s Onion Site
Jira Down – Atlassian Jira Outage Disrupts Dashboard Access for Users Globally
New Windows Task Scheduler Vulnerabilities Allows Command Execution as Admin User
3 Malware Tactics Used To Evade Detection By Corporate Security: See Examples
Why Modern CISOs Must Be Business Translators, Not Just Technologists
Over 16,000 Fortinet devices compromised with symlink backdoor
Google blocked over 5 billion ads in 2024 amid rise in AI-powered scams
Apple fixes two zero-days exploited in targeted iPhone attacks
Jira Down: Atlassian users experiencing degraded performance
41% of Attacks Bypass Defenses: Adversarial Exposure Validation Fixes That
CISA extends funding to ensure ’no lapse in critical CVE services’
Microsoft warns of blue screen crashes caused by April updates
Microsoft: Some devices offered Windows 11 upgrades despite Intune blocks
MITRE warns that funding for critical CVE program expires today
– MTZ