A critical Nginx UI vulnerability that allows attackers to take full control of servers has been exploited in the wild. Nginx UI (nginx-ui) is a web-based management interface for the Nginx web server. It has 11,000 stars on GitHub and… Read More "Exploited Vulnerability Exposes Nginx Servers to Hacking"
Professional Networks Under Attack: Vietnam-Linked Actors Deploy PXA Stealer in Global Infostealer Campaign Cyble dissects a LinkedIn job‑lure campaign, exposing its multi‑stage PXA Stealer tactic that hijacks accounts and steals sensitive data. Executive Summary CRIL has been actively tracking a… Read More "Professional Networks Under Attack By Infostealer"
Ravie LakshmananApr 15, 2026Vulnerability / Data Breach A number of critical vulnerabilities impacting products from Adobe, Fortinet, Microsoft, and SAP have taken center stage in April’s Patch Tuesday releases. Topping the list is an SQL injection vulnerability impacting SAP Business Planning and… Read More "April Patch Tuesday Fixes Critical Flaws Across SAP, Adobe, Microsoft, Fortinet, and More"
A critical authentication bypass in nginx-ui, a widely used open-source web interface for managing nginx servers, has been actively exploited in the wild. The vulnerability, tracked as CVE-2026-33032 with a CVSS score of 9.8, was discovered by Pluto Security and… Read More "Critical Nginx-ui MCP Flaw Actively Exploited in the Wild"
Capsule Security, an Israeli startup aiming to add a security layer to agentic AI, today emerged from stealth mode with $7 million in seed funding. Founded in 2025 by Naor Paz and Lidan Hazout, Capsule continuously monitors AI agents’ behavior… Read More "Capsule Security Emerges From Stealth With $7 Million in Funding"
How Cyble Blaze AI Delivers 360° Threat Visibility Across Dark Web and Enterprise Systems Cyble Blaze AI transforms cybersecurity by unifying data, predicting threats, and automating response across enterprise and dark web intelligence. Modern cybersecurity no longer suffers from a… Read More "Cyble Blaze AI: Unified Enterprise Threat Intelligence"
Ravie LakshmananApr 15, 2026Web Security / Vulnerability A recently disclosed critical security flaw impacting nginx-ui, an open-source, web-based Nginx management tool, has come under active exploitation in the wild. The vulnerability in question is CVE-2026-33032 (CVSS score: 9.8), an authentication bypass… Read More "Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover"
Cyber resilience is a leadership responsibility Cyber resilience is increasingly framed as a leadership responsibility, with the associated governance identified as one of the top governance challenges currently faced by boards of directors. Many sources explicitly position boards as being… Read More "The need for a board-level definition of cyber resilience"
Microsoft published a higher-than-usual list of fixes for CVEs as part of its monthly Patch Tuesday update round yesterday, including two zero-day vulnerabilities. One of these, CVE-2026-32201, is being actively exploited in the wild. It is described as a server… Read More "Microsoft Fixes Two Zero-Days in April Patch Tuesday"
A new, sophisticated remote access trojan (RAT) has been targeting Android users across Europe, fraud management and prevention company Cleafy warns. Dubbed Mirax, the threat has been promoted on underground forums since December 2025 and has been used in multiple… Read More "Mirax RAT Targeting Android Users in Europe"
