Full Daily Digest

Active exploitation attempts targeting CVE-2023-33538 in end-of-life TP-Link Wi-Fi routers have been observed, leveraging Mirai-like botnet malware. Despite flawed exploit code in the wild, the vulnerability remains a credible threat due to the widespread use of default credentials on IoT devices. Palo Alto Unit 42’s investigation confirmed the vulnerability’s validity, noting that successful expl

Palo Alto Unit 42 · 2026-04-16 · Vulnerability: Active exploitation attempts targeting CVE-2023-33538 in end-of-life TP-Link Wi-Fi routers have been observed, leveraging Mirai-like botnet malware.

Two New Jersey men, Kejia Wang and Zhenxing Wang, have been sentenced to nine and nearly eight years in prison, respectively, for orchestrating a sophisticated scheme that facilitated North Korean IT workers in securing roles at over 100 U.S. companies. The operation, which generated over $5 million for North Korea, involved identity theft, money laundering, and the creation of shell companies to

The Record by Recorded Future · 2026-04-16 · Incidents: Two New Jersey men, Kejia Wang and Zhenxing Wang, have been sentenced to nine and nearly eight years in prison, respectively, for orchestrating a sophisticated scheme that facilitated North Korean IT…

Organizations face a significant challenge in preparing for post-quantum cryptography (PQC) due to the lack of visibility into where cryptography is currently deployed across their systems. Microsoft emphasizes that the foundational step toward quantum readiness—and robust cryptographic hygiene—is building a comprehensive cryptographic inventory. Without this, teams struggle to identify, prioritiz

Microsoft Security Blog · 2026-04-16 · Vulnerability: Organizations face a significant challenge in preparing for post-quantum cryptography (PQC) due to the lack of visibility into where cryptography is currently deployed across their systems.

AI agents introduce unique authentication challenges that amplify credential risks, particularly when they inherit broad permissions or rely on static API keys. Unlike human authentication, where impersonation is the primary threat, machine authentication faces subversion risks—compromising the runtime grants attackers simultaneous access to all authentication factors. This asymmetry is exacerbate

GitGuardian Blog · 2026-04-16 · Vulnerability: AI agents introduce unique authentication challenges that amplify credential risks, particularly when they inherit broad permissions or rely on static API keys.

Cybercriminals are increasingly targeting the trucking and logistics industry with sophisticated remote access campaigns, leveraging compromised load boards to infiltrate transportation carriers. Proofpoint researchers discovered that these attackers deploy multiple remote access tools, including ScreenConnect instances, to maintain persistent control over compromised systems. A notable tactic inv

The Record by Recorded Future · 2026-04-16 · Incidents: Cybercriminals are increasingly targeting the trucking and logistics industry with sophisticated remote access campaigns, leveraging compromised load boards to infiltrate transportation carriers.

A new espionage campaign targeting Ukrainian emergency services and hospitals has been uncovered, leveraging the AgingFly malware alongside other tools like SilentLoop, ChromeElevator, and ZapixDesk. The attacks, attributed to the group UAC-0247, began with phishing emails disguised as humanitarian aid proposals, leading victims to download malicious archives. Once executed, the malware enabled re

The Record by Recorded Future · 2026-04-16 · Incidents: A new espionage campaign targeting Ukrainian emergency services and hospitals has been uncovered, leveraging the AgingFly malware alongside other tools like SilentLoop, ChromeElevator, and ZapixDesk.

Shadow AI is rapidly reshaping the security landscape, introducing new risks that traditional Shadow IT controls are ill-equipped to handle. Developers are increasingly leveraging AI tools like Open WebUI and Lovable without formal oversight, creating ephemeral endpoints and configuration files that expand the attack surface. These files, such as CLAUDE.md or .cursorrules, often contain sensitive

Detectify Blog · 2026-04-16 · Vulnerability: Shadow AI is rapidly reshaping the security landscape, introducing new risks that traditional Shadow IT controls are ill-equipped to handle.

New research reveals that major tech companies, including Google, Microsoft, and Meta, frequently ignore user opt-out requests for tracking, violating California's privacy laws. The study by webXray found that Google disregarded Global Privacy Control (GPC) signals 86% of the time, Microsoft 50%, and Meta 69%, despite legal requirements to honor these preferences. These companies allegedly continu

The Record by Recorded Future · 2026-04-16 · Policy: New research reveals that major tech companies, including Google, Microsoft, and Meta, frequently ignore user opt-out requests for tracking, violating California's privacy laws.