[Webinar] Eliminate Ghost Identities Before They Expose Your Enterprise Data
2026-04-19T19:24:11Z•e840635f5df0f246059dd18d5ed0c70e5d5c7ca5774f671cf890c123f4bfdb9a
CISA-KEVDDoSIoT-securityactive-exploitationbotnetcloud-identitycredential-riskcritical-vulnerabilitiespatching-and-advisoriesphishingransomware/ratsupply-chain-and-devtoolszero-day
What happened
A broad set of high‑impact cybersecurity stories: multiple actively exploited and high‑severity vulnerabilities (notably nginx‑ui CVE-2026-33032 and Apache ActiveMQ CVE-2026-34197, the latter added to CISA KEV) alongside Microsoft Defender zero‑days being weaponized. IoT and edge devices continue to be abused — Mirai variant Nexcorium is exploiting CVE-2024-3721 to recruit TBK DVRs/EOl TP‑Link routers for DDoS botnets, and new botnets (PowMix) and Android RATs (Mirax) are spreading via ads and malicious plugins. Attackers are also weaponizing SaaS/workflow platforms and developer tooling (n8n,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- e840635f5df0f246059dd18d5ed0c70e5d5c7ca5774f671cf890c123f4bfdb9a
- Enrichment time
- 2026-04-19T19:24:11Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.