European Commission Suffers 91.7 GB Cloud Data Breach via Trivy Supply-Chain Compromise
CERT-EU has documented a cloud breach at the European Commission stemming from a supply-chain compromise in the Trivy container scanner. Approximately 91.7 GB of sensitive EU institutional data...
ShinyHunters Claims Amtrak Breach: 9.4 Million Salesforce Records Allegedly Stolen
The ShinyHunters extortion group claims to have stolen 9.4 million records from Amtrak's Salesforce environment, posting data samples as proof. The alleged breach highlights escalating ransomware threats targeting...
Critical Marimo Python Notebook Zero-Day (CVE-2026-39987) Exploited Within 10 Hours of Disclosure
A critical pre-authentication RCE vulnerability (CVE-2026-39987, CVSS 9.3) in the popular Marimo Python notebook platform was weaponised within 10 hours of public disclosure. Attackers are actively harvesting credentials,...
ChipSoft Ransomware Attack Cripples Netherlands Healthcare Systems, Exposing 13 Million Support Tickets
A ransomware attack on ChipSoft, a major Dutch healthcare software provider, has exposed 13 million support tickets, 15,000 employee records, and sensitive corporate documents. The attack disrupted healthcare...
Supply Chain Attack Backdoors Smart Slider 3 Pro: 800,000+ WordPress Sites at Risk
Attackers compromised Nextend's update infrastructure to distribute a weaponized version of Smart Slider 3 Pro (v3.5.1.35) for approximately six hours on April 7, 2026. Sites that auto-updated received...
Fortinet Issues Emergency Patch for Actively Exploited FortiClient EMS Zero-Day CVE-2026-35616
A critical zero-day vulnerability (CVE-2026-35616, CVSS 9.1) in Fortinet FortiClient EMS was exploited in the wild before Fortinet published its advisory. The pre-authentication flaw allows remote code execution...
PoC Exploit Leaked for Unpatched Windows Privilege Escalation Zero-Day ‘BlueHammer’
A disgruntled researcher has published a working exploit for BlueHammer, an unpatched Windows local privilege escalation zero-day that abuses Windows Defender's update mechanism. Fully patched Windows 10, 11,...
Adobe Patches Actively Exploited Acrobat Reader Zero-Day CVE-2026-34621 — Exploited Since December 2025
Adobe has issued an emergency patch for CVE-2026-34621 (CVSS 8.6), a prototype pollution zero-day in Acrobat Reader actively exploited since December 2025. Attackers can achieve code execution by...