Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Forward Networks

How Forward Networks Helps You Respond to CISA Emergency Directive 26-03

Apr 6, 2026 By Forward Networks In Forward Networks
CISA issued Emergency Directive 26-03 in response to active exploitation of vulnerabilities in Cisco SD-WAN management systems, specifically Cisco Catalyst SD-WAN Manager and SD-WAN Controller platforms. The vulnerabilities include an authentication bypass flaw (CVE-2026-20127) that allows unauthenticated remote attackers to gain administrative privileges and manipulate network configuration, and a path traversal vulnerability (CVE-2022-20775) that enables local privilege escalation to root.
Read Post
Arctic Wolf

CVE-2026-35616: Fortinet Releases Hotfix for Critical Exploited Vulnerability in FortiClient EMS

Apr 6, 2026 By Andres Ramos In Arctic Wolf
On April 4, 2026, Fortinet released a hotfix for a critical vulnerability in FortiClient EMS (CVE-2026-35616) that allows unauthenticated remote threat actors to execute unauthorized code or commands via crafted requests. The flaw stems from improper access control in the API authentication. Fortinet has confirmed observing exploitation of CVE-2026-35616 in the wild. The vulnerability was responsibly disclosed by Defused, which had observed exploitation prior to Fortinet’s official disclosure.
Read Post
How Minimal Container Images Are Reshaping the Fight Against CVE Exposure in Modern Cloud Environments

How Minimal Container Images Are Reshaping the Fight Against CVE Exposure in Modern Cloud Environments

Apr 6, 2026 By SecuritySenses In SecuritySenses
As the adoption of containers grows across Cloud infrastructure, Cybersecurity experts and DevSecOps leaders continue to deal with the persistent surge of publicly available software vulnerabilities. The National Vulnerability Database documented an alarming figure of 29,000 CVEs for 2023, and the numbers since then show no signs of slowing down. Research shows that the majority of production container images have known vulnerabilities. This article explores the relationship between container images and CVE vulnerabilities (exposure), the growing burden of compliance, and the target risk reduction of minimal-image strategies.
Read Post
cycognito

Emerging Threat: (CVE-2026-27876) Grafana Remote Code Execution via SQL Expressions

Apr 5, 2026 By Igal Zeifman In CyCognito
CVE-2026-27876 is an arbitrary file write vulnerability in Grafana's sqlExpressions feature that can be chained with a Grafana Enterprise plugin to achieve remote code execution (RCE) on the underlying host. The flaw exists because Grafana's SQL expressions feature permits writing arbitrary files to the server filesystem. An attacker can exploit this to overwrite a Sqlyze driver or write an AWS data source configuration file, ultimately obtaining an SSH connection to the Grafana host.
Read Post
cycognito

Emerging Threat: (CVE-2026-20093) Cisco IMC Authentication Bypass

Apr 5, 2026 By Igal Zeifman In CyCognito
CVE-2026-20093 is an authentication bypass vulnerability in the change password functionality of Cisco Integrated Management Controller (IMC), caused by improper input validation (CWE-20) in how the IMC XML API processes password modification requests. The vulnerability carries a CVSS v3.1 base score of 9.8 (Critical). Exploitation is fully pre-authentication and requires no privileges and no user interaction.
Read Post
Snyk

You Patched LiteLLM, But Do You Know Your AI Blast Radius?

Apr 2, 2026 By Rudy Lai In Snyk
For a brief window, a widely used open source package in the AI ecosystem was compromised with credential-stealing malware. LiteLLM, a model gateway used to route requests to more than 100 LLM providers, has been downloaded millions of times per day. In that short window, the malicious versions were likely pulled tens of thousands of times before being caught.
Read Post
Secure Coding Techniques that Is Critical for Modern Applications

Secure Coding Techniques that Is Critical for Modern Applications

Apr 2, 2026 By SecuritySenses In SecuritySenses
Let's be honest: software ships faster today than most security teams can comfortably keep up with. Microservices, sprawling APIs, cloud-native deployments, and AI-assisted code generation have accelerated development at an unprecedented pace. But buried within that speed are small, overlooked coding mistakes that quietly open the door to serious breaches.
Read Post
tac security

Cybersecurity Firm TAC Security Hits 10,000 Clients, Enters Top 5 in Global VM & AppSec

Apr 1, 2026 By TAC Security
TAC Infosec, a global leader in cybersecurity (NSE: TAC), with presence across 100+ countries, announced a historic milestone by crossing 10,000 clients - 6,500+ of TAC Security and 3,500+ of CyberScope, since April 2024, delivering on its commitment to shareholders to achieve this by 2026.
Read Post
Snyk

Building AI Security with Our Customers: 5 Lessons from Evo's Design Partner Program

Apr 1, 2026 By Rudy Lai In Snyk
In 2025, we embarked on a new journey to secure the most important technology transformation of this decade – generative AI. Our vision is to help companies secure their AI fast, so that they can innovate on the cutting edge and put AI and agentic use cases into production. To do this, we built Evo, the world’s first agentic orchestrator for AI security. The foundation of any product is customer needs.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.