Security Daily Digest

Cybersecurity news, daily.

2026.04.07

16 sources scanned

FEATURED

Fortinet Zero-Day Exploitation and CISA Directive

Fortinet has issued an emergency patch for a zero-day vulnerability, CVE-2026-35616, in FortiClient, which allows for authentication bypass. This flaw has been actively exploited, prompting CISA to mandate federal agencies to patch the Fortinet EMS flaw by Friday. This highlights the urgency for organizations using Fortinet products to apply the patch immediately to prevent unauthorized access and potential data breaches.

SRC Dark ReadingBleepingComputer

German Authorities Identify REvil and GandCrab Leaders

German Federal Police have identified two Russian nationals as the leaders of the notorious ransomware groups REvil and GandCrab. This identification follows extensive investigations into the ransomware operations that have targeted numerous organizations globally. Security teams should be aware of the potential for retaliatory attacks and ensure robust defenses against ransomware threats, particularly those linked to these groups.

SRC BleepingComputerKrebs on Security

SIGNAL

01 New GPUBreach attack enables system takeover via GPU rowhammer BleepingComputer
02 AI-Assisted Supply Chain Attack Targets GitHub Dark Reading
03 Iran-Linked Password-Spraying Campaign Targets 300+ Israeli Microsoft 365 Organizations The Hacker News
04 DPRK-Linked Hackers Use GitHub as C2 in Multi-Stage Attacks Targeting South Korea The Hacker News

STAY UPDATED

Daily security digest, straight to your inbox.