April 24, 2026
Cyber Security Week in Review: April 24, 2026
In brief: CISA flags 9 vulnerabilities as exploited, UAT-4356 targets Cisco devices with the Firestarter backdoor, and more.
19 min read
Vulnerability Intelligence Services
Real-time Actionable Vulnerability Intelligence
Cybersecurity Help is a global vulnerability intelligence provider. We monitor vulnerabilities in software from 60,000+ vendors and help customers prevent potential data breaches by addressing them proactively.
Request DemoKey Metrics
66,713
Software vendors monitored
Continuously updated
1,070
Avg vulnerability reports processed daily
+386 today
8,799
Security Bulletins released in 2026
+2,693 this month
950
Zero-day vulnerabilities reported
+30 this year
Latest Security News
April 23, 2026
China-linked GopherWhisper APT targets governmental entities in Mongolia
The attackers leverage Go-based malware, deploying a modular toolkit that includes injectors, loaders, and multiple backdoors.
2 min read
April 23, 2026
New Lotuslite malware variant targets India’s banking sector
Lotuslite acts as a backdoor that communicates with command-and-control servers over HTTPS using dynamic DNS services.
3 min read
April 22, 2026
EU sanctions two pro-Russian organizations over disinformation campaigns
The sanctions target Euromore and Pravfond, both accused of spreading narratives that challenge the legitimacy of EU institutions and justifying Russia’s war against Ukraine.
3 min read
April 22, 2026
Former cybersecurity negotiator pleads guilty in BlackCat/ALPHV ransomware scheme
Acting as a negotiator for five victim organizations, Angelo Martino shared sensitive details with BlackCat operators, allowing them to extract higher ransom payments.
2 min readFeatured Security Bulletins
View vulnerability databaseCode
Security Bulletin
Severity
Status
Date
SB2026042541
Medium
Patched
Apr 25, 2026
SB20260424173
High
Patched
Apr 24, 2026
SB20260424172
Multiple vulnerabilities in KACE Systems Management Appliance (SMA)
CVE-2025-32975, CVE-2025-32976, CVE-2025-32977, and 1 more
CVE-2025-32975, CVE-2025-32976, CVE-2025-32977, and 1 more
High
Exploited
Apr 24, 2026
SB20260424171
Multiple vulnerabilities in IBM Netezza Appliance
CVE-2022-49846, CVE-2025-21759, CVE-2025-21887, and 2 more
CVE-2022-49846, CVE-2025-21759, CVE-2025-21887, and 2 more
Low
Patched
Apr 24, 2026
SB20260424170
Multiple vulnerabilities in IBM SDK, Java Technology Edition
CVE-2026-22016, CVE-2026-22021, CVE-2026-22013, and 3 more
CVE-2026-22016, CVE-2026-22021, CVE-2026-22013, and 3 more
Medium
Patched
Apr 24, 2026
SB20260424167
Multiple vulnerabilities in IBM Netezza Appliance
CVE-2025-68285, CVE-2025-40154, CVE-2025-39697, and 3 more
CVE-2025-68285, CVE-2025-40154, CVE-2025-39697, and 3 more
Low
Patched
Apr 24, 2026
SB20260424165
Low
Public exploit
Apr 24, 2026
SB20260424164
Low
Patched
Apr 24, 2026
SB20260424163
Low
Patched
Apr 24, 2026
SB20260424162
Medium
Patched
Apr 24, 2026