Apr 04, 2026 · #16

Episode 16 — 04 Apr 2026 1. Critical Cisco IMC auth bypass gives attackers Admin access Source: Bleeping Computer Cisco has released security updates to address several critical and high-severity vulnerabilities, including an Integrated Management Controller (IMC) authentication bypass that allows attackers to gain Admin access. Also known as CIMC, Cisco IMC is a hardware module embedded... 2. Claude Code leak used to push infostealer malware on GitHub Source: Bleeping Computer Threat actors are exploiting the recent Claude Code source code leak by using fake GitHub repositories to deliver Vidar information-stealing malware. Claude Code is a terminal-based AI agent from Anthropic, designed to execute coding tasks directly in the terminal and act as... 3. Microsoft Details Cookie-Controlled PHP Web Shells Persisting via Cron on Linux Servers Source: The Hacker News Threat actors are increasingly using HTTP cookies as a control channel for PHP-based web shells on Linux servers and to achieve remote code execution, according to findings from the Microsoft Defender Security Research Team. "Instead of exposing command execution through URL... 4. Hims & Hers warns of data breach after Zendesk support ticket breach Source: Bleeping Computer Telehealth giant Hims & Hers Health is warning that it suffered a data breach after support tickets were stolen from a third-party customer service platform. Hims & Hers is an American telehealth company specializing in the direct-to-consumer healthcare space, providing... 5. Medtech giant Stryker fully operational after data-wiping attack Source: Bleeping Computer Stryker Corporation, one of the world's leading medical technology companies, says it's fully operational three weeks after many of its systems were wiped out in a cyberattack claimed by the Iranian-linked Handala hacktivist group. The Fortune 500 medtech giant has over... 6. China-Linked TA416 Targets European Governments with PlugX and OAuth-Based Phishing Source: The Hacker News nBO}~'Znz8qB9hF[~C OjlA }].| eMDނ[|#\C^oŔxvdِߒb BuBuBAhHOV/ k U\:#^ٽIgp5-^L("Pq=)Gqw'jT7)A5n... 7. New SparkCat Variant in iOS, Android Apps Steals Crypto Wallet Recovery Phrase Images Source: The Hacker News Cybersecurity researchers have discovered a new version of the SparkCat malware on the Apple App Store and Google Play Store, more than a year after the trojan was discovered targeting both the mobile operating systems. The malware has been found to conceal itself within... 8. Cisco Patches 9.8 CVSS IMC and SSM Flaws Allowing Remote System Compromise Source: The Hacker News >bZ/[m J5~fhcּhSre#M 51}IKFx5hm73fq~&x(}#6* 3^uR/F"' :\k\꾶n:juksUpMAy1M @8MT=* z3j-Vwfȥk<zQ[MQ 1 S lȦB|1SBD y...