News that matters, without the noise.

A .WAV With A Payload, (Tue, Apr 21st)

There have been reports of threat actors using a .wav file as a vector for malware.

ISC Stormcast For Tuesday, April 21st, 2026 https://isc.sans.edu/podcastdetail/9900, (Tue, Apr 21st)

Handling the CVE Flood With EPSS, (Mon, Apr 20th)

Every morning, security people around the world face the same ritual: opening their vulnerability feed to find a

Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply Chain

Cybersecurity researchers have warned of malicious images pushed to the official “checkmarx/kics” Docker Hub repository. In an alert

Exploits Turn Windows Defender Into Attacker Tool

Three proof-of-concept exploits are being used in active attacks against Microsoft’s built-in security platform; two are unpatched.

Surge in Bomgar RMM Exploitation Demonstrates Supply Chain Risk

The critical remote code execution flaw (CVE-2026-1731) in the remote monitoring and management tool can be exploited to

Google Fixes Critical RCE Flaw in AI-Based ‘Antigravity’ Tool

The prompt-injection vulnerability in the agentic AI product for filesystem operations was a sanitization issue that allowed for

Hackers Use Lotus Wiper to Destroy Drives and Delete Files in Energy Sector Attack

A newly discovered malware called Lotus Wiper has been used in a targeted destructive attack against the energy

Kyber ransomware gang toys with post-quantum encryption on Windows

A new Kyber ransomware operation is targeting Windows systems and VMware ESXi endpoints in recent attacks, with one

Microsoft Warns Jasper Sleet Uses Fake IT Worker Identities to Infiltrate Cloud Environments

A North Korea-linked threat group is quietly getting hired by real companies. Jasper Sleet, a threat actor tied

Drupal core – Moderately critical – Cross-site scripting – SA-CORE-2026-003

Project:  Drupal core Date:  2026-April-15 Security risk:  Moderately critical 13 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:Default Vulnerability:  Cross-site scripting Affected versions:  >= 11.3.0

Drupal core – Moderately critical – Gadget Chain – SA-CORE-2026-002

Project:  Drupal core Date:  2026-April-15 Security risk:  Moderately critical 14 ∕ 25 AC:Complex/A:Admin/CI:All/II:All/E:Theoretical/TD:Uncommon Vulnerability:  Gadget Chain Affected versions:  >= 8.0.0