Past briefings
April 2026
Browse PlainSec cybersecurity briefings by date.
- Thursday, April 30, 2026: LiteLLM SQLi exposes keys behind AI gateways · 7 stories
- Wednesday, April 29, 2026: Supply-chain victims become VECT’s ransomware pool · 12 stories
- Tuesday, April 28, 2026: Trusted data tool poisoned, then its container image too · 11 stories
- Monday, April 27, 2026: Cisco firewall backdoors survive patching · 14 stories
- Sunday, April 26, 2026: GopherWhisper turns collaboration tools into espionage channels · 9 stories
- Saturday, April 25, 2026: Cisco firewall backdoors survive patching · 19 stories
- Friday, April 24, 2026: iPhone notification cache exposed deleted signal messages · 18 stories
- Thursday, April 23, 2026: npm worm turns developer tokens into propagation fuel · 17 stories
- Wednesday, April 22, 2026: ActiveMQ brokers exposed to active exploitation at scale · 18 stories
- Tuesday, April 21, 2026: Vercel breach exposes customer secrets risk · 17 stories
- Monday, April 20, 2026: Serial-to-IP flaws expose legacy OT at scale · 12 stories
- Sunday, April 19, 2026: End-of-life TP-Link routers face botnet infection attempts · 2 stories
- Saturday, April 18, 2026: ActiveMQ management endpoints enable credentialed RCE · 14 stories
- Friday, April 17, 2026: Defender’s file rewrite turns patched PCs into SYSTEM targets · 18 stories
- Thursday, April 16, 2026: Nginx UI’s MCP endpoint opens full server takeover · 20 stories
- Wednesday, April 15, 2026: SharePoint zero-day lands in Microsoft’s huge April batch · 18 stories
- Tuesday, April 14, 2026: Malicious PDFs enable code execution across Windows and macOS · 8 stories
- Monday, April 13, 2026: Phishing marketplace takedown cuts supply but leaves stolen credentials active · 16 stories
- Sunday, April 12, 2026: Signed CPUID installers delivered malware via DLL sideloading · 3 stories
- Saturday, April 11, 2026: Default password flaw enables immediate remote takeover of Juniper collectors · 9 stories
- Friday, April 10, 2026: Docker AuthZ bypass reopens host compromise risk · 8 stories
- Thursday, April 9, 2026: Immediate remote code execution risk in Ninja Forms File Uploads · 11 stories
- Wednesday, April 8, 2026: Attackers exploit both decade-old and new flaws in federal systems · 14 stories
- Tuesday, April 7, 2026: FortiClient EMS hotfixes leave uncertainty for 8.0 users · 13 stories
- Monday, April 6, 2026: Developer machines became high-yield credential farms in LiteLLM supply-chain attack · 5 stories
- Sunday, April 5, 2026: Next.js React2Shell exploit automates AI and cloud credential theft · 6 stories
- Saturday, April 4, 2026: Cloud account takeover after Trivy supply-chain compromise · 12 stories
- Friday, April 3, 2026: Next.js React2Shell exploit automates AI and cloud credential theft · 20 stories
- Thursday, April 2, 2026: Active Dawn zero-day in Chrome enables sandbox escape · 27 stories
- Wednesday, April 1, 2026: TrueConf update flaw lets attackers reach isolated government networks · 18 stories