Data Leakage Vulnerability Patched in OpenSSL
2026-04-08T19:24:07Z•1f1b6a0ebb245aad7160ca493c394614fc8835109a29345301c86a8298f0b4cc
APT28Apache ActiveMQDDoSDNS hijackingDenial-of-ServiceFBI cybercrime reportIoT botnetIran-linkedJolokiaMasjesuMikroTikNinja FormsOpenSSLPLCRCESCADA','OT attacks','critical infrastructure','Anthropic','CLAUTP-LinkWordPressarbitrary file uploadbusiness email compromisedata leakagehealthcare disruptionhospital outageremote code executionrouter compromise
What happened
This collection of SecurityWeek stories (Apr 7–8, 2026) covers multiple high-impact incidents and vulnerabilities: OpenSSL received patches for seven flaws including a data-leakage issue and several DoS bugs; a 13-year RCE in Apache ActiveMQ Classic was disclosed (exploitation requires authentication but Jolokia exposure can enable access); cybercrime losses neared $21B in 2025 per the FBI with over one million complaints; a Massachusetts hospital diverted ambulances after a disruptive hacker attack; the Masjesu DDoS botnet is targeting IoT devices with evasive, persistence-focused behavior; a
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityweek
- Record identifier
- 1f1b6a0ebb245aad7160ca493c394614fc8835109a29345301c86a8298f0b4cc
- Enrichment time
- 2026-04-08T19:24:07Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.