Security Daily Digest

Cybersecurity news, daily.

2026.04.15

16 sources scanned

FEATURED

Microsoft April 2026 Patch Tuesday: 167 Flaws, 2 Zero-Days Fixed

Microsoft's April 2026 Patch Tuesday addresses 167 security flaws, including two zero-day vulnerabilities actively exploited in the wild. The update includes critical patches for privilege escalation and remote code execution vulnerabilities affecting Windows, Office, and Azure. Security teams should prioritize these updates to mitigate risks of exploitation and ensure systems are protected against these high-severity threats.

SRC BleepingComputer

McGraw-Hill Data Breach: Extortion Threat Exposes Sensitive Data

Education company McGraw-Hill has confirmed a data breach following an extortion threat by hackers. The breach involved unauthorized access to sensitive data, potentially impacting students and educational institutions. Security teams should review data protection measures and monitor for any misuse of compromised information to mitigate potential risks.

SRC BleepingComputer

SIGNAL

01 Over 100 Chrome Web Store extensions steal user accounts, data BleepingComputer
02 New PHP Composer Flaws Enable Arbitrary Command Execution — Patches Released The Hacker News
03 ShowDoc RCE Flaw CVE-2025-0520 Actively Exploited on Unpatched Servers The Hacker News
04 CISA Adds 6 Known Exploited Flaws in Fortinet, Microsoft, and Adobe Software The Hacker News
05 ShowDoc vulnerability actively exploited - SC Media Google News Security

STAY UPDATED

Daily security digest, straight to your inbox.