Industrial-strength April Patch Tuesday covers 135 CVEs
One actively exploited issue patched; five Critical-severity Office vulns exploitable via Preview Pane
Similar Posts
Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws
Bys sDetails have emerged about three now-patched security flaws in the OpenClaw personal artificial intelligence (AI) assistant that, if successfully exploited, could enable credential theft, privilege escalation, and arbitrary code execution on the host. A brief description of the high-severity vulnerabilities is as follows – GHSA-hjr6-g723-hmfm (CVSS score: 8.8) – An operating system
Brussels launched an age checking app. It took 2 minutes to hack it.
Bys sÉmile Marzolf, Ellen O’Regan, and Eliza Gkritsi report: The European Union’s unveiling of a mobile app to check people’s age online has quickly turned sour, as cybersecurity experts found glaring privacy and security problems with the code. European Commission President Ursula von der Leyen presented the age-verification tool in Brussels on Wednesday, saying it was……
Oxfam Hong Kong data leak: charity violated data protection law
Bys sAmbrose Li reports: The local arm of international charity Oxfam violated the data protection law following a leak in July that potentially affected 550,000 people, Hong Kong’s privacy watchdog ruled in an investigation report on Thursday. […] “The privacy commissioner considered that Oxfam had not taken all practicable steps to ensure that the personal data…
Picklescan Bugs Allow Malicious PyTorch Models to Evade Scans and Execute Code
Bys sThree critical security flaws have been disclosed in an open-source utility called Picklescan that could allow malicious actors to execute arbitrary code by loading untrusted PyTorch models, effectively bypassing the tool’s protections. Picklescan, developed and maintained by Matthieu Maitre (@mmaitre314), is a security scanner that’s designed to parse Python pickle files and detect suspicious
ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures
Bys sCybersecurity researchers have flagged multiple ClickFix campaigns that deliver three malware loaders called BabaDeda Loader, Lorem Ipsum Loader, and Potemkin, per independent reports from Morphisec, BlueVoyant, and Huntress, respectively. Attacks involving BabaDeda Loader, observed in April 2026, have targeted education and financial organizations. “Earlier BabaDeda activity was known for
Almost two years later, Alpha Omega Winery notifies those affected by a data breach.
Bys sSome wines benefit from aging. Breach notification letters do not. On or about December 28, 2023, Alpha Omega Winery in California experienced what they report as a ransomware incident. According to their notification, the types of personal information may have included, and potentially were not limited to: name, date of birth, Social Security number, driver’s……