Cybersecurity briefing — 2026-04-07
FortiClient EMS Hotfixes Leave Uncertainty for 8.0 Users
AI Workflow Builder Flaw Enables Full Server Takeover
Storm-1175's Rapid Exploits Extend Beyond Initial Web Breach
Docker AuthZ Bypass Reopens Host Compromise Risk
Google Cloud Issues Multiple Linux Kernel Privilege Escalation Fixes for GKE Nodes
Kubernetes Attacks Spike as React2Shell Enables Cloud Identity Theft
APT28 Uses Compromised Routers to Steal Credentials via DNS Hijacking
Shadow AI in Healthcare Creates Blind Spots That Hinder Incident Response
DPRK Hackers Use GitHub and Korean Docs for Persistent Espionage
Single Vulnerable Driver Disables 300+ EDRs, Undermining Endpoint Diversity
Ransomware Extortion Targets German Political Party for Coercion
Spyware Maker Conviction Sets U.S. Criminal Precedent After a Decade
Cultural Interview Checks Expose North Korean Impostors in Real Time
Cybersecurity briefing — 2026-04-07
FortiClient EMS Hotfixes Leave Uncertainty for 8.0 Users
AI Workflow Builder Flaw Enables Full Server Takeover
Storm-1175's Rapid Exploits Extend Beyond Initial Web Breach
Docker AuthZ Bypass Reopens Host Compromise Risk
Google Cloud Issues Multiple Linux Kernel Privilege Escalation Fixes for GKE Nodes
Kubernetes Attacks Spike as React2Shell Enables Cloud Identity Theft
APT28 Uses Compromised Routers to Steal Credentials via DNS Hijacking
Shadow AI in Healthcare Creates Blind Spots That Hinder Incident Response
DPRK Hackers Use GitHub and Korean Docs for Persistent Espionage
Single Vulnerable Driver Disables 300+ EDRs, Undermining Endpoint Diversity
Ransomware Extortion Targets German Political Party for Coercion
Spyware Maker Conviction Sets U.S. Criminal Precedent After a Decade
Cultural Interview Checks Expose North Korean Impostors in Real Time