Articles

Microsoft Windows Snipping Tool Vulnerability Enables Remote Code Execution

A vulnerability (CVE-2026-32183) in the Microsoft Windows Snipping Tool allows remote attackers to execute arbitrary code via a malicious file or webpage, requiring only user interaction to trigger the exploit.

Mirai Variant Nexcorium Exploits DVR Flaw to Build DDoS Botnet

A new Mirai botnet variant, 'Nexcorium,' is exploiting a command injection flaw (CVE-2024-3721) in TBK DVRs and end-of-life TP-Link routers to conscript devices into a distributed denial-of-service (DDoS) swarm.

CVE-2024-3721

Tools & TechniquesApr 18, 2026

NAKIVO Backup & Replication v11.2 Adds Ransomware Defense and Proxmox Support

INFORMATIONAL

NAKIVO Backup & Replication v11.2 Adds Ransomware Defense and Proxmox Support

NAKIVO Inc. has released version 11.2 of its Backup & Replication platform, introducing a ransomware defense module, support for Proxmox VE 9.0, and performance enhancements for VMware vSphere 9 environments.

Obsidian Plugin Abuse Delivers PHANTOMPULSE RAT in Targeted Attacks

MalwareApr 18, 2026

Obsidian Plugin Abuse Delivers PHANTOMPULSE RAT in Targeted Attacks

Threat actors are abusing the Obsidian note-taking app to deliver the novel PHANTOMPULSE RAT via malicious plugins, targeting individuals in finance and cryptocurrency sectors in a campaign tracked as REF6598.

CRITICAL

PoC Exploit Released for Critical FortiSandbox Command Injection Flaw

A proof-of-concept exploit for CVE-2026-39808, a critical command injection vulnerability in Fortinet FortiSandbox, has been released. The flaw allows unauthenticated attackers to execute arbitrary OS commands as root.

CVE-2026-39808

QNAP TS-453E QVRPro Exposed Method Enables Remote Code Execution

CRITICAL

QNAP TS-453E QVRPro Exposed Method Enables Remote Code Execution

A critical vulnerability (CVE-2026-22898) in QNAP TS-453E QVRPro allows network-adjacent attackers to execute arbitrary code without authentication, receiving a CVSS score of 8.8 from the Zero Day Initiative.

CVE-2026-22898

Trend Micro Apex One Console Vulnerable to Unauthenticated RCE

CRITICAL

Trend Micro Apex One Console Vulnerable to Unauthenticated RCE

CVE-2025-54987, a critical 9.8 CVSS flaw in Trend Micro Apex One, allows unauthenticated attackers to execute arbitrary code via directory traversal in the management console.

CVE-2025-54987

Anthropic Restricts Access to AI Model Capable of Automated Vulnerability

AI SecurityApr 17, 2026

Anthropic Restricts Access to AI Model Capable of Automated Vulnerability

Anthropic has restricted its Claude Mythos Preview AI to ~50 critical infrastructure vendors, citing its advanced ability to autonomously find and exploit software vulnerabilities, raising concerns about dual-use risks and offensive cyber capabilities.

Apache ActiveMQ Vulnerability Exploited, Added to CISA KEV Catalog

VulnerabilitiesApr 17, 2026

Apache ActiveMQ Vulnerability Exploited, Added to CISA KEV Catalog

A high-severity flaw in Apache ActiveMQ Classic, CVE-2026-34197 (CVSS 8.8), is under active exploitation, prompting CISA to add it to its Known Exploited Vulnerabilities catalog and mandate patching for federal agencies.

CVE-2026-34197

Industry NewsApr 17, 2026

Axonius Expands Asset Cloud with AI Remediation and OT Security

INFORMATIONAL

Axonius Expands Asset Cloud with AI Remediation and OT Security

Axonius has updated its Asset Cloud platform with AI-powered remediation for exposures, added IoT/OT asset management, and introduced an asset trust standard to quantify security posture.

Fake Proton VPN Sites and Gaming Mods Spread NWHStealer Malware

MalwareApr 17, 2026

Fake Proton VPN Sites and Gaming Mods Spread NWHStealer Malware

A new Windows information stealer dubbed NWHStealer is being distributed via fake Proton VPN websites, gaming modifications, and hardware utility downloads, targeting credentials and cryptocurrency wallets.

Tools & TechniquesApr 17, 2026

GitLab 18.11 Expands Agentic AI to Security Remediation and CI Pipelines

INFORMATIONAL

GitLab 18.11 Expands Agentic AI to Security Remediation and CI Pipelines

GitLab 18.11 integrates agentic AI across the software lifecycle, automating security fix generation and CI/CD pipeline configuration, aiming to address the 'AI paradox' of rapid code creation outpacing security and delivery.