Vertech News

> Vertech Solucoes

Need AI automation for your business?

We build custom AI pipelines, chatbots, and automation systems. From concept to production — the same tech behind this site.

vertech2026@gmail.com

> Vertech Solucoes

Need AI automation for your business?

We build custom AI pipelines, chatbots, and automation systems. From concept to production — the same tech behind this site.

vertech2026@gmail.com

Cybersecurity

UAC-0247 Targets Ukrainian Clinics and Government in Data-Theft Malware Campaign

Critical Nginx UI auth bypass flaw now actively exploited in the wild

New AgingFly malware used in attacks on Ukraine govt, hospitals

WordPress plugin suite hacked to push malware to thousands of sites

Microsoft counters the MacBook Neo with freebies for students

Signed software abused to deploy antivirus-killing scripts

NordVPN

n8n Webhooks Abused Since October 2025 to Deliver Malware via Phishing Emails

Best Buy’s Ultimate Upgrade Sale features deals on dozens of our favorite gadgets

Microsoft pays $2.3M for cloud and AI flaws at Zero Day Quest

CISA flags Windows Task Host vulnerability as exploited in attacks

Rolling Networks: Securing the Transportation Sector

Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover

1Password

April Patch Tuesday Fixes Critical Flaws Across SAP, Adobe, Microsoft, Fortinet, and More

Microsoft: April updates trigger BitLocker key prompts on some servers

Deterministic + Agentic AI: The Architecture Exposure Validation Requires

Microsoft fixes bug behind Windows Server 2025 automatic upgrades

Microsoft Issues Patches for SharePoint Zero-Day and 168 Other New Vulnerabilities

Microsoft adds Windows protections for malicious Remote Desktop files

Proton Mail

Crypto-exchange Kraken extorted by hackers after insider breach

Patch Tuesday, April 2026 Edition

Over 100 Chrome Web Store extensions steal user accounts, data

UK gov's Mythos AI tests help separate cybersecurity threat from hype

Microsoft releases Windows 10 KB5082200 extended security update

McGraw-Hill confirms data breach following extortion threat

NordVPN

Windows 11 cumulative updates KB5083769 & KB5082052 released

New PHP Composer Flaws Enable Arbitrary Command Execution — Patches Released

Google Adds Rust-Based DNS Parser into Pixel 10 Modem to Enhance Security

AI-Driven Pushpaganda Scam Exploits Google Discover to Spread Scareware and Ad Fraud

Mirax Android RAT Turns Devices into SOCKS5 Proxies, Reaching 220,000 via Meta Ads

Analysis of 216M Security Findings Shows a 4x Increase In Critical Risk (2026 Report)

1Password

108 Malicious Chrome Extensions Steal Google and Telegram Data, Affecting 20,000 Users

ShowDoc RCE Flaw CVE-2025-0520 Actively Exploited on Unpatched Servers

CISA Adds 6 Known Exploited Flaws in Fortinet, Microsoft, and Adobe Software

JanelaRAT Malware Targets Latin American Banks with 14,739 Attacks in Brazil in 2025

FBI and Indonesian Police Dismantle W3LL Phishing Network Behind $20M Fraud Attempts

⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and More

Proton Mail

North Korea's APT37 Uses Facebook Social Engineering to Deliver RokRAT Malware

OpenAI Revokes macOS App Certificate After Malicious Axios Supply Chain Incident

CPUID Breach Distributes STX RAT via Trojanized CPU-Z and HWMonitor Downloads

Adobe Patches Actively Exploited Acrobat Reader Flaw CVE-2026-34621

Citizen Lab: Law Enforcement Used Webloc to Track 500 Million Devices via Ad Data

GlassWorm Campaign Uses Zig Dropper to Infect Multiple Developer IDEs

NordVPN

Browser Extensions Are the New AI Consumption Channel That No One Is Talking About

Google Rolls Out DBSC in Chrome 146 to Block Session Theft on Windows

Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of Disclosure

Backdoored Smart Slider 3 Pro Update Distributed via Compromised Nextend Servers

EngageLab SDK Flaw Exposed 50M Android Users, Including 30M Crypto Wallet Installs

UAT-10362 Targets Taiwanese NGOs with LucidRook Malware in Spear-Phishing Campaigns

1Password

ThreatsDay Bulletin: Hybrid P2P Botnet, 13-Year-Old Apache RCE and 18 More Stories

The Hidden Security Risks of Shadow AI in Enterprises

Adobe Reader Zero-Day Exploited via Malicious PDFs Since December 2025

Bitter-Linked Hack-for-Hire Campaign Targets Journalists Across MENA Region

New Chaos Variant Targets Misconfigured Cloud Deployments, Adds SOCKS Proxy

Masjesu Botnet Emerges as DDoS-for-Hire Service Targeting Global IoT Devices

Proton Mail

APT28 Deploys PRISMEX Malware in Campaign Targeting Ukraine and NATO Allies

Shrinking the IAM Attack Surface through Identity Visibility and Intelligence Platforms (IVIP)

N. Korean Hackers Spread 1,700 Malicious Packages Across npm, PyPI, Go, Rust

Iran-Linked Hackers Disrupt U.S. Critical Infrastructure by Targeting Internet-Exposed PLCs

Russia Hacked Routers to Steal Microsoft Office Tokens

Russian State-Linked APT28 Exploits SOHO Routers in Global DNS Hijacking Campaign

NordVPN

[Webinar] How to Close Identity Gaps in 2026 Before AI Exploits Enterprise Risk

Docker CVE-2026-34040 Lets Attackers Bypass Authorization and Gain Host Access

Over 1,000 Exposed ComfyUI Instances Targeted in Cryptomining Botnet Campaign

The Hidden Cost of Recurring Credential Incidents

New GPUBreach Attack Enables Full CPU Privilege Escalation via GDDR6 Bit-Flips

China-Linked Storm-1175 Exploits Zero-Days to Rapidly Deploy Medusa Ransomware

1Password

Flowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation; 12,000+ Instances Exposed

Germany Doxes “UNKN,” Head of RU Ransomware Gangs REvil, GandCrab