A serious SQL injection vulnerability, tracked as CVE-2026-21643, has been discovered in Fortinet's FortiClient Endpoint Management Server (EMS), which manages FortiClient endpoint agents across multiple platforms. This vulnerability is currently being actively exploited, as reported by Defused Cyber, a firm that specializes in threat intelligence. Although it has not yet been listed on CISA’s Known Exploited Vulnerabilities (KEV) list, the ongoing attacks pose significant risks to organizations using FortiClient EMS. Companies should take immediate action to assess their systems and implement necessary security measures to safeguard against potential breaches. The situation emphasizes the need for vigilance in monitoring and securing endpoint management solutions.
The UK's National Cyber Security Centre (NCSC) has alerted organizations about a serious vulnerability in the F5 BIG-IP Access Policy Manager (APM). This flaw allows attackers to execute remote code without authentication, posing a significant risk to affected systems. Companies using F5 BIG-IP APM could be compromised if they do not take immediate action. The NCSC is urging organizations to implement mitigation measures to protect their networks. This vulnerability underscores the necessity for timely updates and vigilance in cybersecurity practices.
According to GitGuardian's latest report, secrets sprawl is worsening at an alarming rate. In 2025, researchers found 29 million new hardcoded secrets in public GitHub repositories, marking a 34% increase from the previous year. This surge represents the largest single-year jump ever recorded in the analysis of billions of code commits. The report indicates that security teams are struggling to keep pace with this trend, which poses significant risks for organizations as sensitive information becomes more exposed. The findings suggest that companies need to prioritize safeguarding their codebases against this growing issue to prevent potential data breaches.
The European Commission has confirmed that its cloud infrastructure supporting the Europa.eu platform was targeted in a cyberattack, which was detected on March 24. Initial investigations indicate that data was extracted from the affected websites, although there is no evidence that the Commission's internal systems were breached. This incident marks the second data breach the Commission has experienced this year, raising concerns about its cybersecurity resilience. The Commission acted quickly to contain the situation and implemented measures to protect its services and data. However, the repeated breaches prompt questions about the effectiveness of its security protocols and the potential risks to sensitive information.
Iranian hacking groups are increasingly using high-volume cyberattacks that have a low impact but can disrupt systems and services. These attacks have been enhanced by artificial intelligence, making them more effective. Affected entities include hospitals and other critical infrastructure, which are particularly vulnerable to these tactics. This trend reflects a growing integration of digital warfare in geopolitical conflicts, posing risks not only to the targeted organizations but also to public safety and national security. As these cyber threats evolve, it becomes crucial for organizations to bolster their cybersecurity measures and stay vigilant against potential attacks.
Apple has implemented a camera indicator light system designed to alert users when their device's camera is active. This feature is crucial as it protects against potential malware that could secretly access the camera to record without user consent. The article emphasizes that a dedicated hardware indicator light is more secure than a software-rendered display indicator, as it is physically connected to the camera and cannot be manipulated by malicious software. This distinction is important for users who rely on their devices for privacy and security. Overall, the design aims to enhance user awareness and control over their device's camera usage.
F5 Networks has escalated the severity of a vulnerability in its BIG-IP Application Policy Manager (APM) from a denial-of-service issue to a critical remote code execution flaw. This vulnerability allows attackers to exploit unpatched devices and deploy webshells, which can give them unauthorized access to systems. Organizations using affected versions of BIG-IP are urged to apply the necessary patches immediately to prevent potential breaches. The exploitation of this flaw poses a significant risk, especially for businesses relying on BIG-IP for application delivery and security. With reports of active attacks already in progress, it is crucial for users to take swift action to secure their environments.
Google has rolled out new location privacy features in the Android 17 Beta 3, allowing users better control over their precise location data. A key addition is the location button, which enables one-time access to location information for tasks like finding nearby places or tagging content, without the need for continuous tracking. This update aims to minimize data collection practices and enhance user privacy while providing developers with the tools necessary to design safer applications. This change is particularly relevant as location data can often be sensitive, and users are increasingly concerned about how their information is used. By implementing these features, Google is responding to user demands for greater transparency and control over personal data.
Researchers from watchTowr and Defused have discovered that attackers are exploiting CVE-2026-3055, a serious vulnerability affecting Citrix NetScaler. This flaw allows unauthorized access to systems that utilize the NetScaler product, which is commonly used for application delivery and load balancing. Organizations using NetScaler are at risk, as the vulnerability is currently being actively targeted in the wild. Companies should be aware of this threat and take immediate action to protect their systems, as the consequences of exploitation could lead to significant data breaches and operational disruptions. It's crucial for affected users to stay informed and apply any available patches as soon as possible.
A serious vulnerability in Fortinet's FortiClient EMS platform, identified as CVE-2026-21643, is currently being exploited by attackers. This flaw, which has a CVSS score of 9.1, allows for remote code execution through SQL injection. Researchers from Defused have reported active exploitation of this vulnerability, posing significant risks to organizations using FortiClient EMS. Companies are urged to take immediate action to protect their systems, as the potential for unauthorized access and control could lead to severe consequences. It is essential for affected users to stay informed and apply any available patches promptly to mitigate the risks associated with this flaw.
Microsoft has withdrawn the KB5079391 update for Windows 11 after users reported installation issues resulting in error code 0x80073712. This non-security preview update was intended to enhance the operating system but instead caused problems for those attempting to install it. The company is now investigating the source of the error, which is affecting users who downloaded this particular update. For many, this means they may have to wait longer for fixes or improvements that were supposed to come with the update. It's a reminder of the potential complications that can arise from software updates and the importance of monitoring system changes closely.
The UK Information Commissioner’s Office (ICO) has fined Birmingham-based company TMAC £100,000 for making nuisance calls. This fine was imposed after the ICO found that TMAC was responsible for making a significant number of unsolicited calls, which harassed individuals and violated privacy regulations. The ICO's action highlights the ongoing battle against spam calls that often target vulnerable populations. Such fines are part of a broader effort to hold companies accountable for their practices and protect consumers from unwanted communications. This incident serves as a reminder for businesses to comply with regulations regarding direct marketing and for consumers to stay vigilant against potential scams.
The European Commission has confirmed a data breach affecting its AWS infrastructure, compromising sensitive information. While specific details regarding the extent of the breach remain limited, the incident raises concerns about the security of cloud services used by governmental bodies. The breach could potentially expose personal data and operational information, impacting trust in the Commission's digital systems. This incident highlights the ongoing risks associated with cloud computing, especially for entities dealing with sensitive or confidential data. Users and stakeholders are advised to remain vigilant and review their cybersecurity protocols in light of this breach.
The FBI has confirmed that Iranian hackers successfully targeted the personal email account of Kash Patel, the former Director of the U.S. National Counterterrorism Center. While the agency noted that the information accessed in the hack is old, the incident raises concerns about the security of personal communications for high-profile government officials. In response to this breach, the U.S. government has announced a reward of up to $10 million for information leading to the identification and capture of those responsible for the attack. This move underscores the ongoing risks posed by state-sponsored hacking and the importance of safeguarding sensitive information, particularly for individuals in prominent positions. The incident serves as a reminder for both officials and the public to remain vigilant about cybersecurity practices.
A serious vulnerability in Fortinet's FortiClient EMS platform is currently being exploited by attackers, according to the threat intelligence firm Defused. This flaw poses significant risks to organizations using the affected software, as it allows unauthorized access and potential control over their systems. Companies that rely on FortiClient EMS for endpoint management and security should urgently assess their systems to mitigate the risk. The ongoing exploitation of this vulnerability underscores the need for timely updates and security patches to protect sensitive data and maintain system integrity. Users are advised to follow best practices for cybersecurity and monitor for any unusual activities.