Apr 03, 2026 · #15

Episode 15 — 03 Apr 2026 1. Critical Cisco IMC auth bypass gives attackers Admin access Source: Bleeping Computer Cisco has released security updates to address several critical and high-severity vulnerabilities, including an Integrated Management Controller (IMC) authentication bypass that allows attackers to gain Admin access. Also known as CIMC, Cisco IMC is a hardware module embedded... 2. Apple expands iOS 18 updates to more iPhones to block DarkSword attacks Source: Bleeping Computer Apple has now made it possible for more iPhones still running iOS 18 to receive security updates that protect against the actively exploited DarkSword exploit kit. "We enabled the availability of iOS 18.7.7 for more devices on April 1, 2026, so users with Automatic Updates... 3. CERT-EU: European Commission hack exposes data of 30 EU entities Source: Bleeping Computer The European Union's Cybersecurity Service (CERT-EU) has attributed the European Commission cloud hack to the TeamPCP threat group, saying the resulting breach exposed the data of at least 29 other Union entities. The European Commission publicly disclosed the incident on... 4. New Progress ShareFile flaws can be chained in pre-auth RCE attacks Source: Bleeping Computer Two vulnerabilities in Progress ShareFile, an enterprise-grade secure file transfer solution, can be chained to enable unauthenticated file exfiltration from affected environments. Progress ShareFile is a document sharing and collaboration product typically used by large and... 5. Cisco Patches 9.8 CVSS IMC and SSM Flaws Allowing Remote System Compromise Source: The Hacker News Cisco has released updates to address a critical security flaw in the Integrated Management Controller (IMC) that, if successfully exploited, could allow an unauthenticated, remote attacker to bypass authentication and gain access to the system with elevated privileges. The... 6. New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation — Patch Released Source: The Hacker News Google on Thursday released security updates for its Chrome web browser to address 21 vulnerabilities, including a zero-day flaw that it said has been exploited in the wild. The high-severity vulnerability, CVE-2026-5281 (CVSS score: N/A), concerns a use-after-free bug in... 7. Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal Credentials Source: The Hacker News A large-scale credential harvesting operation has been observed exploiting the React2Shell vulnerability as an initial infection vector to steal database credentials, SSH private keys, Amazon Web Services (AWS) secrets, shell command history, Stripe API keys, and GitHub... 8. WhatsApp Alerts 200 Users After Fake iOS App Installed Spyware; Italian Firm Faces Action Source: The Hacker News Meta-owned messaging platform WhatsApp said it alerted about 200 users who were tricked into installing a bogus version of its iOS app that was infected with spyware. According to reports from Italian newspaper La Repubblica and news agency ANSA, the vast majority of the...