This month in security with Tony Anscombe – April 2026 edition
Warnings about helpdesk impersonation scams and Iran-linked hackers targeting critical sectors in the US, plus the most damaging scams of 2025 - here's some ...
General
20 articles
Iran-linked Handala hackers leak US Marines data, send chilling WhatsApp threats
US Marines stationed around the Persian Gulf have been receiving WhatsApp messages from strangers suggesting they call home and make their final goodbyes. Re...
Securing and Governing AI Agents At Scale Through A Unified AI Gateway
Palo Alto Networks acquires Portkey, integrating its AI Gateway into Prisma AIRS. Get the unified control plane to securely govern and operationalize autonom...
Defending Against CORDIAL SPIDER and SNARKY SPIDER with Falcon Shield
Risk Scenarios for the US’s Strategic Pivot
The United States (US) is shifting toward a more force-driven security strategy primarily relying on military operations and economic pressure to counter tra...
Building with AI: Here's What No Briefing Will Tell You
What building with AI for three months revealed about four leadership blind spots executives can't afford to ignore: the comprehension gap, eroding competiti...
[webapps] Python-Multipart 0.0.22 - Path Traversal
Python-Multipart 0.0.
[local] Google Chrome 145.0.7632.75 - CSSFontFeatureValuesMap
Google Chrome 145.0.
[webapps] Repetier-Server 1.4.10 - Path Traversal
Repetier-Server 1.4.
[webapps] BusyBox 1.37.0 - Path Traversal
BusyBox 1.37.
[local] Windows 11 25H2 - Heap Overflow
Windows 11 25H2 - Heap Overflow
[webapps] JUNG Smart Visu Server 1.1.1050 - Dos
JUNG Smart Visu Server 1.1.
[webapps] NiceGUI 3.6.1 - Path Traversal
NiceGUI 3.6.
[webapps] Camaleon CMS v2.9.0 - Path Traversal
Camaleon CMS v2.9.
[webapps] Cybersecurity AI (CAI) Framework 0.5.10 - Command Injection
Cybersecurity AI (CAI) Framework 0.5.
[webapps] deephas 1.0.7 - Prototype Pollution
deephas 1.0.
[webapps] SUSE Manager 4.3.15 - Code Execution
SUSE Manager 4.3.
Five Things we Took Away from Gartner SRM Sydney 2026
At this year's Gartner Security and Risk Management Summit in Sydney, Rapid7 CISO Brian Castagna joined industry CISO Nigel Hedges for a fireside chat on the...
Designing trust and safety into Amazon Bedrock powered applications
Generative AI brings promising innovation, transforming how individuals and organizations approach everything from customer service to content creation and m...
8 best practices for CISOs conducting risk reviews
Embracing strong proactive security is something we can all do to mitigate our increased exposure to security threats. The post 8 best practices for CISOs co...