Stay updated with the latest cybersecurity news! This daily roundup covers actively exploited browser zero-days, devastating supply-chain attacks on government infrastructure, nation-state phishing campaigns leveraging OAuth abuse, advanced Linux persistence techniques, and critical RCE flaws in enterprise file-sharing platforms to keep you informed and secure in the ever-evolving digital landscape.
1. Google Chrome 146 Patches Actively Exploited Zero-Day in Dawn Component
Published: 2026-04-04
Google released Chrome 146 addressing 21 vulnerabilities, including CVE-2026-5281 — a zero-day in the Dawn graphics library already exploited in the wild. The flaw could allow arbitrary code execution; automatic updates are rolling out to desktop and Android users.
2. European Commission Confirms Major Data Breach Linked to Trivy Supply-Chain Attack
Published: 2026-04-04
The European Commission disclosed unauthorized access to over 300 GB of data in its AWS environment after attackers compromised the Trivy vulnerability scanner supply chain. Personal information and internal documents were stolen.
3. China-Linked TA416 Group Targets European Governments with PlugX and OAuth Phishing
Published: 2026-04-03
TA416 is running sophisticated OAuth-based phishing campaigns against EU government entities, delivering the PlugX backdoor. The attacks bypass traditional email filters by abusing legitimate Microsoft services.
4. UNC1069 Social Engineering Compromises Axios Maintainer in npm Supply-Chain Attack
Published: 2026-04-03
Threat actors used social engineering to hijack an Axios maintainer account, injecting malicious code into npm packages. Thousands of downstream projects are now at risk of backdoors during dependency installation.
5. Microsoft Warns of Advanced Cookie-Controlled PHP Web Shells Persisting via Cron on Linux
Published: 2026-04-04
Microsoft detailed a new persistence technique where attackers plant PHP web shells controlled via HTTP cookies and scheduled through cron jobs, evading detection on compromised Linux servers.
6. Critical ShareFile Flaws Enable Unauthenticated Remote Code Execution
Published: 2026-04-04
Multiple high-severity vulnerabilities in Citrix ShareFile allow unauthenticated attackers to chain issues for full RCE and arbitrary file uploads. Organizations are urged to apply patches immediately.
7. INTERPOL Sinkholes 45,000 IPs in Coordinated Botnet Takedown Operation
Published: 2026-04-04
INTERPOL-led efforts neutralized a major botnet by sinkholing over 45,000 malicious IP addresses. The operation disrupted command-and-control infrastructure used in widespread DDoS and malware campaigns.
8. CISA Highlights Surge in Enterprise-Targeted Zero-Days as Nearly Half of 2025 Exploits Hit Business Tech
Published: 2026-04-04
CISA and Google Threat Intelligence warn that enterprise-grade software and networking gear now account for almost half of all zero-days exploited in 2025, with Chinese groups doubling their activity.
Stay Vigilant
Cyber threats are evolving rapidly with zero-days hitting browsers and enterprise tools, supply-chain compromises reaching government systems, and nation-state actors refining OAuth phishing and Linux persistence tactics. Subscribe to our newsletter for daily updates, update Chrome to version 146 immediately, audit all npm dependencies and Trivy scanner configurations, scan Linux servers for suspicious cron jobs and PHP shells, patch ShareFile without delay, and review CISA guidance on enterprise zero-day risks. Stay safe online!