Critical Nginx UI Flaw Under Active Exploitation, Enabling Full Server Takeover Without Authentication

Apr 15, 2026 | Podcast

https://pluto.security/blog/mcp-bug-nginx-security-vulnerability-cvss-9-8 A critical authentication bypass vulnerability in Nginx UI, tracked as CVE-2026-33032, is now being actively exploited in the wild, allowing remote attackers to seize complete control of web...

Adobe Issues Emergency Patch for Actively Exploited Acrobat Reader Zero-Day

Apr 14, 2026 | Podcast

https://helpx.adobe.com/security/products/acrobat/apsb26-43.html Adobe has released an emergency security update to address a critical vulnerability in Acrobat and Acrobat Reader, tracked as CVE-2026-34621, which has been exploited in zero-day attacks since at least...

Booking.com Confirms Data Breach Exposing Millions of Travellers’ Reservation Details

Apr 13, 2026 | Podcast

https://www.abc.net.au/news/2026-04-13/booking-com-data-security-breach-personal-details/106557630 Booking.com has confirmed that hackers accessed customer data linked to travel reservations, prompting the company to force PIN resets and notify affected users directly...

Enterprise PCs Found Lagging Behind Macs on Security Patching, New Report Reveals

Mar 27, 2026 | Podcast

https://www.omnissa.com/insights/Omnissa-State-of-Digital-Workspace-2026-press-release A new industry report from device management firm Omnissa has exposed a concerning gap in how enterprises maintain the security of their Windows fleets compared to Apple devices....

TeamPCP Turns Its Hacking Tools Toward Iran, Deploying Data-Destroying Wiper Malware

Mar 26, 2026 | Podcast

https://krebsonsecurity.com/2026/03/canisterworm-springs-wiper-attack-targeting-iran The cybercrime group TeamPCP — already linked to a string of high-profile software supply chain attacks — has pivoted toward geopolitical disruption, deploying a destructive wiper...

TeamPCP Supply Chain Attack Hits Widely Used AI Tool, Exposing Millions of Systems

Mar 25, 2026 | Podcast

https://www.endorlabs.com/learn/teampcp-isnt-done A hacker group known as TeamPCP has been caught planting malicious code inside litellm, a popular AI software library downloaded roughly 95 million times per month. Two versions of the package – 1.82.7 and 1.82.8...