Stay updated with the latest cybersecurity news! This daily roundup covers critical zero-days in web servers and identity platforms, AI-augmented ransomware targeting manufacturing, fresh breaches in retail loyalty programs and telehealth platforms, coordinated international takedowns of phishing-as-a-service networks, and new regulatory mandates around AI security auditing to keep you informed and secure in the ever-evolving digital landscape.
1. Nginx Zero-Day RCE Allows Server-Side Request Forgery at Scale
Published: 2026-04-23
Nginx disclosed CVE-2026-7234, an unauthenticated remote code execution vulnerability in its core HTTP/3 module that enables attackers to forge internal requests and pivot into backend services. Over 180,000 exposed instances are currently under active scanning.
2. “ForgeAI” Ransomware Encrypts 47 Automotive Plants in North America
Published: 2026-04-23
A new ransomware family leveraging generative AI to customize encryption keys and evade EDR has paralyzed production lines at multiple Tier-1 automotive suppliers. The group is demanding $145 million and has begun auctioning stolen CAD files on dark-web forums.
3. Target Loyalty Program Breach Exposes 32 Million Customer Profiles
Published: 2026-04-23
Target confirmed unauthorized access to its loyalty database via a compromised vendor API, leaking names, addresses, purchase histories, and linked payment tokens for 32 million shoppers. The retailer is offering free identity theft protection services.
4. Telehealth Provider Amwell Discloses 9.8 Million Patient Record Exposure
Published: 2026-04-23
Amwell revealed that a misconfigured cloud storage bucket left electronic health records and video consultation logs publicly accessible for nearly 11 days. The incident affects patients across 14 states and has triggered multiple class-action lawsuits.
5. Operation “PhishForge” Takes Down 312 Phishing-as-a-Service Kits Worldwide
Published: 2026-04-23
FBI, Europol, and Singapore’s Interpol National Central Bureau jointly dismantled the infrastructure behind 312 active phishing kits, arresting 28 operators and seizing domains responsible for over $420 million in global losses.
6. Critical Privilege Escalation in Microsoft Entra ID via Legacy OAuth Flow
Published: 2026-04-23
Microsoft patched CVE-2026-29145 in Entra ID, a flaw allowing attackers with low-privilege access to escalate to Global Administrator rights through an undocumented legacy OAuth endpoint. Exploitation has been confirmed in at least three enterprise tenants.
7. CISA and SEC Mandate Quarterly AI Security Audits for Public Companies
Published: 2026-04-23
New joint guidance requires all publicly traded companies to conduct and disclose independent AI model audits starting Q3 2026, focusing on prompt injection, data poisoning, and model inversion risks following a wave of corporate AI incidents.
8. New “VoltStrike” Malware Targets EV Charging Networks via OCPP Protocol
Published: 2026-04-22
Researchers at ESET discovered VoltStrike, a sophisticated implant that manipulates Open Charge Point Protocol communications to remotely disable or overload charging stations. Early attacks have already affected 14,000 stations across California and Germany.
Stay Vigilant
Cyber threats are evolving rapidly with web infrastructure, manufacturing OT environments, and connected vehicle ecosystems emerging as high-value targets for both ransomware operators and sophisticated malware campaigns. Subscribe to our newsletter for daily updates, patch Nginx instances and review Entra ID OAuth configurations immediately, isolate OT networks in automotive and logistics facilities, audit all third-party vendor APIs used for customer loyalty or health data, enable strict AI auditing processes ahead of the new SEC deadline, and monitor EV charging infrastructure logs for VoltStrike indicators if your organization operates or relies on public charging networks. Stay safe online!