Cyber Threat Report: April 2026

Critical WebLogic RCE Vulnerability Exploited in the Wild

Urgent CISA Directive: Patch Critical Ivanti EPMM Vulnerability CVE-2026-1340 by April 11

State-Sponsored Phishing Campaign Targets Signal Users

DPRK-Linked Malware Targeting Job Seekers via Wellfound

Critical Buffer Overflow Vulnerability in Silex Devices (CVE-2026-32956)

Persistent Firestarter Malware Targets Cisco Firepower Devices in US Agencies

Critical NGINX UI Vulnerability CVE-2026-33032 Under Active Exploitation

CISA Alerts on Critical Flaws in SimpleHelp, Samsung MagicINFO, and D-Link Devices

New Vulnerabilities Discovered in Serial-to-IP Converters Threaten Critical Infrastructure

Critical SQL Injection Vulnerability in CodeAstro Attendance System (CVE-2026-37749)

Critical RCE Vulnerability in Marimo Exploited Within 10 Hours of Disclosure

Iranian APTs Target 5,219 Exposed Rockwell PLCs in U.S. Critical Infrastructure