Security Daily Digest

Cybersecurity news, daily.

2026.04.18

16 sources scanned

FEATURED

Active Exploitation of Apache ActiveMQ Vulnerability CVE-2026-34197

A high-severity security flaw in Apache ActiveMQ Classic, identified as CVE-2026-34197, is being actively exploited. This vulnerability allows attackers to perform unauthorized operations on the message broker, potentially leading to data breaches or service disruptions. Security teams should prioritize applying available patches and monitor for unusual activity related to ActiveMQ deployments.

SRC The Hacker NewsBleepingComputer

Exploitation of Microsoft Defender Zero-Days in the Wild

Three zero-day vulnerabilities in Microsoft Defender have been disclosed, with active exploitation reported. Two of these vulnerabilities remain unpatched, posing significant risks to systems relying on Defender for endpoint protection. Security teams should implement mitigations, monitor for Indicators of Compromise (IOCs), and apply any available patches to reduce the risk of exploitation.

SRC The Hacker NewsBleepingComputer

SIGNAL

01 Payouts King ransomware uses QEMU VMs to bypass endpoint security BleepingComputer
02 US-sanctioned currency exchange says $15 million heist done by "unfriendly states" Ars Technica Security
03 Grinex exchange blames "Western intelligence" for $13.7M crypto hack BleepingComputer
04 Operation PowerOFF Seizes 53 DDoS Domains, Exposes 3 Million Criminal Accounts The Hacker News
05 Microsoft: Some Windows servers enter reboot loops after April patches BleepingComputer

STAY UPDATED

Daily security digest, straight to your inbox.