Cybersecurity briefing, 2026-04-30

A critical flaw in the Ninja Forms WordPress plugin is being exploited right now, with over thirty-six hundred attacks blocked in just the last twenty-four hours.

• LiteLLM SQLi Exposes Keys Behind AI Gateways
• GitHub Internal Protocol Flaw Exposes Entire Repos
• Supply-Chain Victims Become VECT’s Ransomware Pool
• Handala Moves From Doxxing to Direct Troop Threats
• Trusted Bitwarden CLI Release Turned Secret Harvester
• OpenEMR Flaws Expose Patient Data Across Healthcare Deployments
• Browser Memory Bugs Put Core Components at Risk

Recent editions

• Wednesday, April 29, 2026: LiteLLM SQLi Exposes Keys Behind AI Gateways · 12 stories
• Tuesday, April 28, 2026: Trusted Data Tool Poisoned, Then Its Container Image Too · 11 stories
• Monday, April 27, 2026: Cisco Firewall Backdoors Survive Patching · 14 stories
• Sunday, April 26, 2026: GopherWhisper Turns Collaboration Tools Into Espionage Channels · 9 stories
• Saturday, April 25, 2026: Cisco Firewall Backdoors Survive Patching · 19 stories
• Friday, April 24, 2026: Cisco Firewall Backdoors Survive Patching · 18 stories
• Thursday, April 23, 2026: iPhone Notification Cache Exposed Deleted Signal Messages · 17 stories