Security Daily Digest

Cybersecurity news, daily.

2026.04.17

16 sources scanned

FEATURED

McGraw Hill Data Breach and ZionSiphon Malware Threat

The ShinyHunters extortion group has leaked data from 13.5 million McGraw Hill user accounts, following a breach that exploited vulnerabilities in Salesforce. Concurrently, a new malware, ZionSiphon, is targeting water treatment systems, posing a significant threat to operational technology. Security teams should prioritize patching Salesforce systems and monitor for indicators of compromise related to ZionSiphon malware to protect critical infrastructure.

SRC BleepingComputer

Microsoft Defender Zero-Day and Cisco Webex Critical Patch

A proof-of-concept exploit for a Microsoft Defender zero-day, dubbed 'RedSun', allows attackers to gain SYSTEM privileges. Meanwhile, Cisco has released patches for critical vulnerabilities in Webex Services that require immediate customer action. Security teams should apply the Cisco patches promptly and monitor for exploitation attempts targeting the Defender zero-day to mitigate potential risks.

SRC BleepingComputer

SIGNAL

01 Cisco Patches Four Critical Identity Services, Webex Flaws Enabling Code Execution The Hacker News
02 North Korea Uses ClickFix to Target macOS Users' Data Dark Reading
03 Newly Discovered PowMix Botnet Hits Czech Workers Using Randomized C2 Traffic The Hacker News
04 New ATHR vishing platform uses AI voice agents for automated attacks BleepingComputer
05 Obsidian Plugin Abuse Delivers PHANTOMPULSE RAT in Targeted Finance, Crypto Attacks The Hacker News

STAY UPDATED

Daily security digest, straight to your inbox.