Live Threats

[CVE-2026-1234]Windows CLFS Driver zero-day — privilege escalation to SYSTEM, CISA KEV confirmed, patch immediately|

[CVE-2026-0891]Fortinet FortiOS authentication bypass — unauthenticated admin access, active exploitation in the wild|

[CVE-2026-2201]Palo Alto PAN-OS command injection — remote code execution on firewall management plane, CISA KEV listed|

[PATCH]Microsoft April 2026 Patch Tuesday — 147 CVEs addressed including 3 zero-days, deploy immediately|

[BREACH]Healthcare sector breach — 2.3M patient records exposed, PHI including SSNs and medical histories compromised|

[CVE-2026-1887]Chrome V8 type confusion RCE — remote code execution via malicious web page, update Chrome immediately|

[COMPLIANCE]PCI DSS 4.0.1 MFA deadline — mandatory multi-factor authentication enforcement now in effect for all merchants|

[CVE-2026-3310]Cisco IOS XE privilege escalation — authenticated users gain root on affected switches and routers, patch now|

[RANSOMWARE]LockBit 4.0 SMB campaign — RDP brute-force targeting small businesses, double-extortion, 72-hour ransom window|

[ADVISORY]Adobe Acrobat PDF phishing wave — malicious PDFs bypassing email filters, credential harvesting at scale|

[CVE-2026-1234]Windows CLFS Driver zero-day — privilege escalation to SYSTEM, CISA KEV confirmed, patch immediately|

[CVE-2026-0891]Fortinet FortiOS authentication bypass — unauthenticated admin access, active exploitation in the wild|

[CVE-2026-2201]Palo Alto PAN-OS command injection — remote code execution on firewall management plane, CISA KEV listed|

[PATCH]Microsoft April 2026 Patch Tuesday — 147 CVEs addressed including 3 zero-days, deploy immediately|

[BREACH]Healthcare sector breach — 2.3M patient records exposed, PHI including SSNs and medical histories compromised|

[CVE-2026-1887]Chrome V8 type confusion RCE — remote code execution via malicious web page, update Chrome immediately|

[COMPLIANCE]PCI DSS 4.0.1 MFA deadline — mandatory multi-factor authentication enforcement now in effect for all merchants|

[CVE-2026-3310]Cisco IOS XE privilege escalation — authenticated users gain root on affected switches and routers, patch now|

[RANSOMWARE]LockBit 4.0 SMB campaign — RDP brute-force targeting small businesses, double-extortion, 72-hour ransom window|

[ADVISORY]Adobe Acrobat PDF phishing wave — malicious PDFs bypassing email filters, credential harvesting at scale|

Issue Archive

All Past Issues

Every weekly security digest, searchable and sortable. Reference older threats, patches, and compliance news — great for team briefings and security reviews.

5

Issues

28

Articles

10

Critical

5 of 5 issues

Issue Title

Categories

#18

The MGM Hackers Are Back, SAP Has a Perfect 10 Vulnerability & AI Phishing Now Beats MFA

Scattered SpiderSAPRansomware+3

April 24, 2026April 21 – April 27, 2026

CRITICAL

#17

Hackers Own Your Firewall, BlackCat Is Back & Your Router Works for China

FortinetPatch TuesdayHIPAA+4

April 17, 2026April 14 – April 20, 2026

CRITICAL

#16

Palo Alto Firewalls Backdoored, 2.3M Poisoned npm Downloads & PCI DSS Deadline Already Passed

Palo AltoPCI DSSSupply Chain+2

April 10, 2026April 7 – April 13, 2026

CRITICAL

#15

Windows Is Handing Out Admin Access for Free, Chrome Has a Zero-Day & DoD Contractors Have 6 Months to Comply

NTLMCMMCChrome+2

April 3, 2026March 31 – April 6, 2026

CRITICAL

#14

Ransomware Groups Found a Way to Kill Every VM at Once — and They're Doing It Right Now

VMwareESXiTexas Privacy+2

March 27, 2026March 24 – March 30, 2026

CRITICAL

Legend:

CRITICAL

HIGH

MEDIUM

LOW

INFO

breach

patch

compliance

threat

advisory

Never miss a new issue

Get the weekly digest delivered to your inbox every Thursday — free for San Antonio SMBs.