Cybersecurity briefing, 2026-04-30

A critical flaw in the Ninja Forms WordPress plugin is being exploited right now, with over thirty-six hundred attacks blocked in just the last twenty-four hours.

• LiteLLM SQLi exposes keys behind AI gateways
• GitHub internal protocol flaw exposes entire repos
• Supply-chain victims become VECT’s ransomware pool
• Handala moves from doxxing to direct troop threats
• Trusted Bitwarden CLI release turned secret harvester
• OpenEMR flaws expose patient data across healthcare deployments
• Browser memory bugs put core components at risk

Recent editions

• Wednesday, April 29, 2026: Supply-chain victims become VECT’s ransomware pool · 12 stories
• Tuesday, April 28, 2026: Trusted data tool poisoned, then its container image too · 11 stories
• Monday, April 27, 2026: Cisco firewall backdoors survive patching · 14 stories
• Sunday, April 26, 2026: GopherWhisper turns collaboration tools into espionage channels · 9 stories
• Saturday, April 25, 2026: Cisco firewall backdoors survive patching · 19 stories
• Friday, April 24, 2026: iPhone notification cache exposed deleted signal messages · 18 stories
• Thursday, April 23, 2026: npm worm turns developer tokens into propagation fuel · 17 stories