Cantina Security

workspace

feed160 calendar rss saved0

severity

critical3 high13 medium139 low5

filters

exploited23 last 7 days93 mitigated0

your work

You've reviewed 0 incidents this month. Tight ship.

optional loginSign in once to sync saved stories across devices.

Powered by Cantina Security

scanning advisory feeds…

scanning advisory feeds…

scanning advisory feeds…

feed live calendar saved

incident calendar / pattern detection

Find clusters by date.

Click a day to inspect tracked incidents and jump into full reports. Heat marks show severity at a glance.

monthapr

year2026

marked days18

◀ prevApril 2026next ▶

sun

mon

tue

wed

thu

fri

sat

29 30 31 1 2 3 4 5 6

1 incident 10 11 12 13

2 incidents 15 16

5 incidents 17 18

17 incidents 21

19 incidents 22

12 incidents 23

19 incidents 24

10 incidents 25

25 incidents 28

29 incidents 29

4 incidents 30 1 2 3 4 5 6 7 8 9

selected

Thursday, April 23

Hackers exploit file upload bug in Breeze Cache WordPress plugin

Hackers are actively exploiting a critical vulnerability in the Breeze Cache plugin for WordPress that allows uploading arbitrary files on the server without authentication.

Bitwarden CLI npm package compromised to steal developer credentials

Updated with further information from Bitwarden. The Bitwarden CLI was briefly compromised after attackers uploaded a malicious @bitwarden/cli package to npm containing a credential-stealing payload capable of s

Trigona ransomware attacks use custom exfiltration tool to steal data

Recently observed Trigona ransomware attacks are using a custom, command-line tool to steal data from compromised environments faster and more efficiently.

New Checkmarx supply-chain breach affects KICS analysis tool

Hackers have compromised Docker images, VSCode and Open VSX extensions for the Checkmarx KICS analysis tool to harvest sensitive data from developer environments.

Cosmetics giant Rituals discloses data breach affecting customers

Dutch cosmetics giant Rituals disclosed a data breach after attackers stole the personal information of an undisclosed number of customers from its "My Rituals" membership database.

medium

Regular Password Resets Aren’t as Safe as You Think

Research from Forrester estimates that every password reset costs around $70. As one of the most common helpdesk requests, many organizations have introduced self-service password reset (SSPR) tools to reduce the load.

Microsoft: Some Teams users can’t join meetings after Edge update

Microsoft confirmed that a recent Microsoft Edge browser update introduced a bug that prevents Windows users from joining Teams meetings.

UK warns of Chinese hackers using proxy networks to evade detection

The United Kingdom's National Cyber Security Centre (NCSC-UK) and international partners warned that China-nexus hackers are increasingly using large-scale proxy networks of hijacked consumer devices to evade det

New GopherWhisper APT group abuses Outlook, Slack, Discord for comms

A previously undocumented state-backed threat actor named GopherWhisper is using a Go-based custom toolkit and legitimate services like Microsoft 365 Outlook, Slack, and Discord in attacks against government ent

Defending Against China-Nexus Covert Networks of Compromised Devices

Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure

Carlson Software VASCO-B GNSS Receiver

Apr 23, 2026 ICS Advisory | ICSA-26-113-06 Intrado 911 Emergency Gateway (EGW)

Hangzhou Xiongmai Technology Co., Ltd XM530 IP Camera

Apr 23, 2026 ICS Advisory | ICSA-26-113-06 Intrado 911 Emergency Gateway (EGW)

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation.

FIRESTARTER Backdoor

The Cybersecurity and Infrastructure Security Agency (CISA) analyzed a sample of FIRESTARTER malware obtained from a forensic investigation.

Yadea T5 Electric Bicycle

Apr 23, 2026 ICS Advisory | ICSA-26-113-06 Intrado 911 Emergency Gateway (EGW)

Milesight Cameras

Apr 23, 2026 ICS Advisory | ICSA-26-113-06 Intrado 911 Emergency Gateway (EGW)

Intrado 911 Emergency Gateway (EGW)

Hangzhou Xiongmai Technology Co., Ltd XM530 IP Camera

SpiceJet Online Booking System

Apr 23, 2026 ICS Advisory | ICSA-26-113-06 Intrado 911 Emergency Gateway (EGW)

CISA orders feds to patch BlueHammer flaw exploited as zero-day

CISA has given U.S. government agencies two weeks to secure their Windows systems against a Microsoft Defender privilege escalation vulnerability that has been exploited in zero-day attacks.