Fixed Intel

Knowledge Hub

Guides, playbooks, and learning resources to level up your cybersecurity knowledge and keep your organization secure.

Police dismantles 9 crypto scam centers, arrests 276 suspects
BleepingComputer
Malware & Threats

Police dismantles 9 crypto scam centers, arrests 276 suspects

A joint international operation involving U.S. and Chinese authorities arrested at least 276 suspects and shut down nine cryptocurrency investment fraud centers.

BleepingComputerApr 30, 20263m1
Critical cPanel & WHM Vulnerability Exploited as Zero-Day for Months
SecurityWeek
Industry News

Critical cPanel & WHM Vulnerability Exploited as Zero-Day for Months

The authentication bypass flaw allows attackers to gain administrative access to vulnerable servers.

SecurityWeekApr 30, 20263m1
‘Copy Fail’ Logic Flaw in Linux Kernel Enables System Takeover
SecurityWeek
Industry News

‘Copy Fail’ Logic Flaw in Linux Kernel Enables System Takeover

Affecting the kernel’s authencesn cryptographic template, the vulnerability was introduced in 2017 and impacts all distributions.

SecurityWeekApr 30, 20262m1
New Linux 'Copy Fail' Vulnerability Enables Root Access on Major Distributions
The Hacker News
Industry News

New Linux 'Copy Fail' Vulnerability Enables Root Access on Major Distributions

CVE-2026-31431 CVSS 7.8 flaw since 2017 enables root via 732-byte exploit, impacting major Linux distributions.

The Hacker NewsApr 30, 20263m1
Sandhills Medical Says Ransomware Breach Affects 170,000
SecurityWeek
Industry News

Sandhills Medical Says Ransomware Breach Affects 170,000

It took the healthcare organization nearly one year to publicly disclose a data breach after it was targeted by Inc Ransom.

SecurityWeekApr 30, 20262m1
Iran-linked Handala hackers leak US Marines data, send chilling WhatsApp threats
Graham Cluley
Industry News

Iran-linked Handala hackers leak US Marines data, send chilling WhatsApp threats

US Marines stationed around the Persian Gulf have been receiving WhatsApp messages from strangers suggesting they call home and make their final goodbyes.

Graham CluleyApr 30, 20263m1
Google Fixes CVSS 10 Gemini CLI CI RCE and Cursor Flaws Enable Code Execution
The Hacker News
Industry News

Google Fixes CVSS 10 Gemini CLI CI RCE and Cursor Flaws Enable Code Execution

Gemini CLI CVSS 10.0 flaw in versions below 0.39.1 enabled RCE in CI workflows, forcing Google to mandate explicit workspace trust.

The Hacker NewsApr 30, 20265m1
Vulnerabilities

ISC Stormcast For Thursday, April 30th, 2026 https://isc.sans.edu/podcastdetail/9912, (Thu, Apr 30th)

SANS ISC
Vulnerabilities

ISC Stormcast For Thursday, April 30th, 2026 https://isc.sans.edu/podcastdetail/9912, (Thu, Apr 30th)

No description available.

SANS ISCApr 30, 20261m2
Vulnerabilities

Danger of Libredtail [Guest Diary], (Wed, Apr 29th)

SANS ISC
Vulnerabilities

Danger of Libredtail [Guest Diary], (Wed, Apr 29th)

[This is a Guest Diary by James Roberts, an ISC intern as part of the SANS.edu BACS program]

SANS ISCApr 30, 20261m2
Industry News

Claude Mythos Fears Startle Japan's Financial Services Sector

Dark Reading
Industry News

Claude Mythos Fears Startle Japan's Financial Services Sector

Global financial institutions are panicked over Anthropic's new superhacker AI model. Cyber experts aren't quite as worried.

Dark ReadingApr 30, 20261m1
Smashing Security podcast #465: This developer wanted to cheat at Roblox. It cost millions
Graham Cluley
Industry News

Smashing Security podcast #465: This developer wanted to cheat at Roblox. It cost millions

A developer at an AI startup wanted to cheat at Roblox. They downloaded a dodgy script on their work laptop. That one decision triggered a cascade of failures…

Graham CluleyApr 29, 20263m1
Official SAP npm packages compromised to steal credentials
BleepingComputer
Malware & Threats

Official SAP npm packages compromised to steal credentials

Multiple official SAP npm packages were compromised in what is believed to be a TeamPCP supply-chain attack to steal credentials and authentication tokens from developers' systems.

BleepingComputerApr 29, 20263m1