Attackers are actively exploiting a recently patched cPanel vulnerability, with over 40,000 servers reported compromised. The campaign likely targets CVE-2026-41940, a flaw that can lead to administrative access, underscoring the urgency to patch and review access logs for suspicious admin actions.
Source: SecurityWeek
Active exploitation begins for Linux “Copy Fail” privilege-escalation bug
Exploitation of the Linux “Copy Fail” vulnerability has started, with CISA adding the flaw to its Known Exploited Vulnerabilities list. Microsoft has observed limited, PoC-associated activity, but defenders are urged to prioritize patching and monitor for unusual privilege elevation behavior.
Source: SecurityWeek
Wireshark 4.6.5 patches 38 CVEs and 35 bugs
Wireshark released version 4.6.5, addressing 43 vulnerabilities (including 38 CVEs) and fixing 35 bugs. Given Wireshark’s ubiquity in network analysis workflows, organizations should update promptly to reduce exposure, especially on analyst workstations and capture servers.
Source: SANS ISC
OpenAI rolls out Advanced Account Security for ChatGPT
OpenAI introduced an opt-in Advanced Account Security suite that brings stronger login methods, more secure account recovery, shorter sessions, and training exclusion for ChatGPT accounts. The move targets high-risk users and enterprises seeking phishing-resistant authentication and tighter session control.
Source: SecurityWeek
Five Eyes agencies urge caution on agentic AI deployment
Security agencies from the Five Eyes alliance co-authored guidance warning that agentic AI will likely misbehave and can amplify existing organizational weaknesses. They recommend slow, carefully governed adoption that prioritizes resilience over productivity gains.
Source: The Register
“Legitimate” phishing: attackers weaponize Amazon SES to bypass email defenses
Attackers are abusing Amazon’s Simple Email Service (SES) to send high-deliverability phishing and BEC messages that closely mimic legitimate traffic. Kaspersky details telltale signs and examples, highlighting the need to scrutinize cloud-sent mail and tighten sender validation beyond basic allowlists.
Source: SecureList
15-year-old detained over massive France Titres breach; up to 18M records for sale
French authorities detained a 15-year-old suspected in the breach of France Titres, with 12–18 million records allegedly offered for sale by a hacker known as “breach3d.” The agency detected suspicious activity on April 13 and confirmed the authenticity of the stolen data being peddled on criminal forums.
Source: Help Net Security
You May Also Be Interested In...
Bluekit phishing kit enables automated phishing with 40+ templates and AI tools
Claude Security enters public beta with Opus 4.7 vulnerability scanning and patching
Edtech Firm Instructure Discloses Data Breach Amid Hacker Leak Threats