Full Daily Digest

A critical zero-day vulnerability (CVE-2026-35616) in FortiClient EMS, with a CVSS score of 9.8, is being actively exploited in the wild, prompting Fortinet to release an emergency hotfix over a holiday weekend. The flaw, which allows remote code execution, was first observed in exploitation attempts on March 31, with activity ramping up by April 6. Shadowserver scans identified nearly 2,000 publi

CyberScoop · 2026-04-06 · Vulnerability: A critical zero-day vulnerability (CVE-2026-35616) in FortiClient EMS, with a CVSS score of 9.8, is being actively exploited in the wild, prompting Fortinet to release an emergency hotfix over a holiday…

Cloudflare's new Organizations feature addresses the challenges enterprises face when managing multiple accounts at scale. Designed with the principle of least privilege in mind, Organizations allow administrators to oversee a collection of accounts cohesively, simplifying user management, configuration, and analytics. This is particularly critical for enterprises with thousands of users across di

Cloudflare Blog · 2026-04-06 · Tools: Cloudflare's new Organizations feature addresses the challenges enterprises face when managing multiple accounts at scale.

A federal judge sentenced Bryan Fleming, the creator of pcTattleTale stalkerware, to supervised release and a $5,000 fine after he pleaded guilty to manufacturing and selling software designed for covert surveillance. The stalkerware enabled unauthorized monitoring of texts, emails, calls, geolocation, and web activity, often marketed to individuals spying on partners without consent. The case mar

CyberScoop · 2026-04-06 · Policy: A federal judge sentenced Bryan Fleming, the creator of pcTattleTale stalkerware, to supervised release and a $5,000 fine after he pleaded guilty to manufacturing and selling software designed for covert…

A sophisticated AI-driven phishing campaign has emerged, leveraging device code authentication to compromise organizational accounts at scale. Unlike traditional attacks, this campaign employs advanced automation, dynamic code generation, and hyper-personalized lures crafted by generative AI to bypass security measures. Threat actors utilized platforms like Railway.com to deploy short-lived pollin

Microsoft Security Blog · 2026-04-06 · Incidents: A sophisticated AI-driven phishing campaign has emerged, leveraging device code authentication to compromise organizational accounts at scale.

Google DeepMind researchers have uncovered a sophisticated attack vector targeting autonomous AI agents through malicious web content, revealing six distinct classes of 'AI Agent Traps.' These traps exploit gaps between human and machine interpretation, manipulating agents via hidden commands, semantic manipulation, cognitive biases, and systemic interactions to promote malicious agendas, exfiltra

SecurityWeek · 2026-04-06 · Vulnerability: Google DeepMind researchers have uncovered a sophisticated attack vector targeting autonomous AI agents through malicious web content, revealing six distinct classes of 'AI Agent Traps.' These traps…

The Gartner IAM Summit 2026 highlighted a seismic shift in identity and access management (IAM), emphasizing that identity is no longer just a control layer but a foundational element of enterprise resilience and automation. The focus has expanded beyond human identities to include machine identities, AI agents, and workload credentials, which now vastly outnumber human users. This proliferation o

GitGuardian Blog · 2026-04-06 · Events: The Gartner IAM Summit 2026 highlighted a seismic shift in identity and access management (IAM), emphasizing that identity is no longer just a control layer but a foundational element of enterprise resilience…

A sophisticated supply chain attack targeting the Strapi ecosystem has been uncovered, involving 36 malicious NPM packages distributed across four accounts. These packages deliver payloads capable of Redis code execution, Docker container escape, credential harvesting, and reverse shell deployment. The campaign specifically targets Guardarian, a cryptocurrency payment gateway, leveraging Redis ins

SecurityWeek · 2026-04-06 · Incidents: A sophisticated supply chain attack targeting the Strapi ecosystem has been uncovered, involving 36 malicious NPM packages distributed across four accounts.

North Korean threat actor UNC1069 has escalated its social engineering campaign, targeting high-profile Node.js maintainers in a sophisticated supply chain attack. The group, previously linked to the Axios NPM registry compromise, employed meticulously crafted lures, including fake Slack workspaces and Microsoft Teams meetings, to deliver malware. Victims, including Socket CEO Feross Aboukhadijeh

SecurityWeek · 2026-04-06 · Incidents: North Korean threat actor UNC1069 has escalated its social engineering campaign, targeting high-profile Node.js maintainers in a sophisticated supply chain attack.

A critical zero-day vulnerability (CVE-2026-35616, CVSS 9.1) in FortiClient Enterprise Management Server (EMS) has been actively exploited, allowing unauthenticated attackers to achieve remote code execution (RCE) via crafted API requests. Fortinet confirmed in-the-wild exploitation and released emergency hotfixes for versions 7.4.5 and 7.4.6, with a permanent fix slated for the upcoming 7.4.7 rel

SecurityWeek · 2026-04-06 · Vulnerability: A critical zero-day vulnerability (CVE-2026-35616, CVSS 9.1) in FortiClient Enterprise Management Server (EMS) has been actively exploited, allowing unauthenticated attackers to achieve remote code…

German authorities have identified Daniil Maksimovich Shchukin, a 31-year-old Russian national, as the elusive hacker known as “UNKN,” who led the notorious ransomware groups GandCrab and REvil. Shchukin is implicated in at least 130 acts of computer sabotage and extortion, causing over 35 million euros in economic damage across Germany. These groups pioneered double extortion tactics, demanding p

Krebs on Security · 2026-04-06 · Incidents: German authorities have identified Daniil Maksimovich Shchukin, a 31-year-old Russian national, as the elusive hacker known as “UNKN,” who led the notorious ransomware groups GandCrab and REvil.