orikahmadov.com

Signed software abused to deploy antivirus-killing scripts

Bleeping Computer April 15, 2026

A digitally signed adware tool has deployed payloads running with SYSTEM privileges that disabled antivirus protections on thousands of endpoints, some in the educational, utilities, government, and healthcare sectors. [...]

n8n Webhooks Abused Since October 2025 to Deliver Malware via Phishing Emails

The Hacker News April 15, 2026

Threat actors have been observed weaponizing n8n, a popular artificial intelligence (AI) workflow automation platform, to facilitate sophisticated phishing campaigns and deliver malicious payloads or fingerprint devices by sending automated emails. "By leveraging trusted infrastructure, these attackers bypass traditional security filters, turning productivity tools into delivery

Microsoft pays $2.3M for cloud and AI flaws at Zero Day Quest

Bleeping Computer April 15, 2026

Microsoft has awarded $2.3 million to security researchers after receiving nearly 700 submissions during this year's Zero Day Quest hacking contest. [...]

Allbirds Is Pivoting to AI Compute. Sure, Why Not

Wired AI News April 15, 2026

Once a $4 billion apparel juggernaut, Allbirds will rebrand as NewBird AI, a “GPU-as-a-Service” company. Hey, if you can't beat ’em, join ’em.

CISA flags Windows Task Host vulnerability as exploited in attacks

Bleeping Computer April 15, 2026

CISA warned U.S. government agencies to secure their systems against a Windows Task Host privilege escalation vulnerability that could allow attackers to gain SYSTEM privileges. [...]

Rolling Networks: Securing the Transportation Sector

Bleeping Computer April 15, 2026

Modern trucks are rolling networks packed with sensors, connectivity, and attack surfaces, creating new cyber risks. NMFTA's Cybersecurity Conference brings industry leaders together to tackle emerging threats in transportation. [...]

Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover

The Hacker News April 15, 2026

A recently disclosed critical security flaw impacting nginx-ui, an open-source, web-based Nginx management tool, has come under active exploitation in the wild. The vulnerability in question is CVE-2026-33032 (CVSS score: 9.8), an authentication bypass vulnerability that enables threat actors to seize control of the Nginx service. It has been codenamed MCPwn by Pluto Security. "

April Patch Tuesday Fixes Critical Flaws Across SAP, Adobe, Microsoft, Fortinet, and More

The Hacker News April 15, 2026

A number of critical vulnerabilities impacting products from Adobe, Fortinet, Microsoft, and SAP have taken center stage in April's Patch Tuesday releases. Topping the list is an SQL injection vulnerability impacting SAP Business Planning and Consolidation and SAP Business Warehouse (CVE-2026-27681, CVSS score: 9.9) that could result in the execution of arbitrary database

Microsoft: April updates trigger BitLocker key prompts on some servers

Bleeping Computer April 15, 2026

Microsoft confirmed on Tuesday that some Windows Server 2025 devices will boot into BitLocker recovery after installing the April 2026 KB5082063 Windows security update. [...]

Deterministic + Agentic AI: The Architecture Exposure Validation Requires

The Hacker News April 15, 2026

Few technologies have moved from experimentation to boardroom mandate as quickly as AI. Across industries, leadership teams have embraced its broader potential, and boards, investors, and executives are already pushing organizations to adopt it across operational and security functions. Pentera’s AI Security and Exposure Report 2026 reflects that momentum: every CISO surveyed

AI Slop Is Making the Internet Fake-Happy

Wired AI News April 15, 2026

A new study examines the impact of the rise of AI-generated websites on the internet—and found some surprising results.

Microsoft fixes bug behind Windows Server 2025 automatic upgrades

Bleeping Computer April 15, 2026

Microsoft has finally fixed a known issue that was causing systems running Windows Server 2019 and 2022 to "unexpectedly" upgrade to Windows Server 2025. [...]

The Deepfake Nudes Crisis in Schools Is Much Worse Than You Thought

Wired AI News April 15, 2026

An analysis by WIRED and Indicator found nearly 90 schools and 600 students around the world impacted by AI-generated deepfake nude images—and the problem shows no signs of going away.

The Deepfake Nudes Crisis in Schools Is Much Worse Than You Thought

Wired News April 15, 2026

An analysis by WIRED and Indicator found nearly 90 schools and 600 students around the world impacted by AI-generated deepfake nude images—and the problem shows no signs of going away.

Microsoft Issues Patches for SharePoint Zero-Day and 168 Other New Vulnerabilities

The Hacker News April 15, 2026

Microsoft on Tuesday released updates to address a record 169 security flaws across its product portfolio, including one vulnerability that has been actively exploited in the wild. Of these 169 vulnerabilities, 157 are rated Important, eight are rated Critical, three are rated Moderate, and one is rated Low in severity. Ninety-three of the flaws are

Latest Tech News