M
New security advisory:
CVE-2026-30893 affects multiple systems.
• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems
Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-30893-wazuh-cluster-path-traversal-rce
New security advisory:
CVE-2026-33454 affects multiple systems.
• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems
Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-33454-apache-camel-header-injection-via-email
New security advisory:
CVE-2026-41409 affects multiple systems.
• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems
Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-41409-apache-mina-unauth-rce-via-deserialization
🟠 New security advisory:
CVE-2026-40466 affects multiple systems.
• Impact: Significant security breach potential
• Risk: Unauthorized access or data exposure
• Mitigation: Apply patches within 24-48 hours
Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-40466-activemq-code-injection-after-auth-bypass
New security advisory:
CVE-2026-24303 affects multiple systems.
• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems
Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-24303-partner-center-privilege-escalation
THREAT INTEL | Tractial
🟡 Actor "anubis" claims Undisclosed
️ Unverified claim
Anubis ransomware group claims attack on Tractial, a manufacturing firm. Unverified breach of fintech data. Assess credibility and potential impact.
Yazoul Security (www.yazoul.net)
🟡 THREAT INTELLIGENCE
Apple Fixes iOS Flaw That Let FBI Recover Deleted Signal Messages
Vulnerability | MEDIUM
Apple has released out-of-band security updates for iPhone and iPad devices to fix a Notification Services flaw that could allow notifications marked...
Full analysis:
https://www.yazoul.net/news/article/apple-fixes-ios-flaw-that-let-fbi-recover-deleted-signal-messages
New security advisory:
CVE-2026-41228 affects multiple systems.
• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems
Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-41228-froxlor-rce-via-path-traversal
New security advisory:
CVE-2026-41679 affects multiple systems.
• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems
Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-41679-paperclip-unauthenticated-remote-code-execution
THREAT INTEL | STERIMED
Actor "qilin" claims Undisclosed
️ Unverified claim
French healthcare firm STERIMED allegedly hit by Qilin ransomware. Group claims attack on April 21, 2026. Data volume undisclosed. Read our analysis.
Yazoul Security (www.yazoul.net)
New security advisory:
CVE-2026-34275 affects multiple systems.
• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems
Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-34275-oracle-e-biz-unauth-takeover
🧠 Formbook Daily Report
️ Trend: declining (21%)
11 new samples
55 C2 servers
Full analysis, IOCs, and hashes:
https://www.yazoul.net/malware/formbook/reports/2026-04-21
THREAT INTEL | Samuel I. White, PC
🟡 Actor "anubis" claims Undisclosed
️ Unverified claim
New security advisory:
CVE-2026-33557 affects multiple systems.
• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems
Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-33557-kafka-oauth-jwt-bypass-grants-unauth-access
New security advisory:
CVE-2026-6257 affects multiple systems.
• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems
Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-6257-vvveb-cms-authenticated-rce-via-file-rename
New security advisory:
CVE-2026-32613 affects multiple systems.
• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems
Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-32613-spinnaker-rce-via-unrestricted-java-classes
🟠 New security advisory:
CVE-2026-6602 affects multiple systems.
• Impact: Significant security breach potential
• Risk: Unauthorized access or data exposure
• Mitigation: Apply patches within 24-48 hours
Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-6602-hospital-management-system-arbitrary-file-upload
🟠 New security advisory:
CVE-2026-40352 affects multiple systems.
• Impact: Significant security breach potential
• Risk: Unauthorized access or data exposure
• Mitigation: Apply patches within 24-48 hours
Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-40352-fastgpt-nosql-injection-enables-account-takeover
🧠 Agent Tesla Daily Report
️ Trend: stable (12%) 23 new samples 0 C2 servers
Full analysis, IOCs, and hashes:
https://www.yazoul.net/malware/agent-tesla/reports/2026-04-17
THREAT INTEL | Gruppo ICM SPA
Actor "qilin" claims Undisclosed
️ Unverified claim
The Qilin ransomware group claims an attack on Italian firm Gruppo ICM SPA. The group is known for aggressive tactics. This report analyzes the unverified claim.
Yazoul Security (www.yazoul.net)
