DEV Community: BeyondMachines

Adobe Issues Emergency Patch for Actively Exploited Acrobat Reader Zero-Day

BeyondMachines — Sun, 12 Apr 2026 11:01:10 +0000

Summary

Adobe released emergency patches for CVE-2026-34621, a critical prototype pollution vulnerability in Acrobat and Reader that is being actively exploited to run arbitrary code via malicious PDF files.

Take Action:

Update your Adobe Acrobat and Reader immediately because attackers are already using this flaw to take over computers through simple PDF files. If you cannot patch right away, use a browser-based PDF viewer as a temporary safety measure and disable Javascript in your Adobe Acrobat and Reader.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Spring ISD Accidental Email Leak Exposes Employee Social Security Numbers

BeyondMachines — Sun, 12 Apr 2026 10:01:10 +0000

Summary

Spring Independent School District in Texas accidentally leaked the Social Security numbers and dates of birth of its employees in an email sent to community partners.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Hong Kong Water Supplies Department Reports Data Leak Following Loss of Field Device

BeyondMachines — Sun, 12 Apr 2026 09:01:10 +0000

Summary

The Hong Kong Water Supplies Department reported a data breach affecting 495 individuals after a staff member lost a portable meter-reading device containing names and addresses.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Rockstar Games Confirms Data Breach Linked to SaaS Supply Chain Compromise

BeyondMachines — Sun, 12 Apr 2026 08:01:11 +0000

Summary

Rockstar Games confirmed a data breach after the ShinyHunters group exploited authentication tokens from the Anodot SaaS platform to access the company's Snowflake data warehouse. The incident exposed corporate information but reportedly did not impact player data or the development timeline for Grand Theft Auto VI.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

CPUID Website Compromised to Distribute STX RAT Malware via CPU-Z and HWMonitor

BeyondMachines — Sat, 11 Apr 2026 16:01:10 +0000

Summary

CPUID's official website was compromised to distribute the STX RAT infostealer through poisoned download links for popular tools like CPU-Z and HWMonitor. The attack used DLL sideloading and masquerading to bypass security defenses and target organizations across multiple global sectors.

Take Action:

If you downloaded CPU-Z, HWMonitor, or PerfMonitor between April 9–10, 2026, assume your system is compromised. Immediately change all your passwords (especially those saved in your browser), enable multi-factor authentication everywhere, and run a full security scan or reinstall your OS. Going forward, always verify software downloads by checking file signatures and hashes against the vendor's official published values before running any installer.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Researcher Leaks 'BlueHammer' Windows Zero-Day Exploit Following MSRC Dispute

BeyondMachines — Sat, 11 Apr 2026 14:01:09 +0000

Summary

A security researcher leaked the 'BlueHammer' zero-day exploit for Windows, which allows local attackers to gain SYSTEM privileges by exploiting a race condition in system update workflows. The flaw is not patched as of 11th of April 2026 and affects fully patched Windows 11 systems.

Take Action:

Be aware that a Windows zero-day called "BlueHammer" is publicly leaked and unpatched. It lets any standard user escalate to full SYSTEM privileges on fully patched Windows 11 and Server systems. Be very cautious of opening new files sent via email or downloads until it's patched. For system admins - monitor for unusual Volume Shadow Copy activity and unexpected service starts from low-privileged accounts. Don't delay the next Windows patches.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

OneDigital Reports Data Breach Following Salesforce and Drift Integration Compromise

BeyondMachines — Sat, 11 Apr 2026 11:01:10 +0000

Summary

OneDigital Investment Advisors report a data breach affecting 28,414 individuals after unauthorized actors exploited a compromise in the Drift chat tool integration with Salesforce.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Grand Process Technology Hit by Ransomware Attack

BeyondMachines — Sat, 11 Apr 2026 10:01:11 +0000

Summary

Grand Process Technology, a Taiwanese semiconductor equipment manufacturer, reported a ransomware attack on April 10, 2026.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

NYK Reports Data Breach in Bunker Fuel Procurement System

BeyondMachines — Sat, 11 Apr 2026 09:01:10 +0000

Summary

NYK reported a data breach in its marine fuel procurement system that led to the exfiltration of personal data belonging to employees and business partners. The company restored the system after a three-day shutdown.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Marimo Python Notebook RCE Exploited Hours After Disclosure

BeyondMachines — Sat, 11 Apr 2026 08:01:10 +0000

Summary

Marimo patched a critical RCE vulnerability (CVE-2026-39987) that was exploited within 10 hours of disclosure to steal cloud credentials and SSH keys. The flaw allows unauthenticated attackers to gain full interactive shell access via a WebSocket authentication bypass.

Take Action:

If you're running Marimo notebooks, update to version 0.23.0 immediately and rotate any credentials (AWS keys, SSH keys, database passwords, API secrets) that were stored on or accessible from that system. If you can't update right away, block access to the /terminal/ws endpoint or put the notebook behind a reverse proxy with authentication and never expose notebook platforms directly to the internet.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Aetna Reports Data Breaches Affecting Over 11,600 Members Due to Mailing Errors

BeyondMachines — Fri, 10 Apr 2026 17:01:11 +0000

Summary

Aetna reported two data breaches affecting 11,663 individuals caused by a mailing distribution error by a business associate that disclosed member information to unauthorized recipients.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Chevin Fleet Solutions Disconnects FleetWave SaaS Following Cybersecurity Incident

BeyondMachines — Fri, 10 Apr 2026 16:01:10 +0000

Summary

Chevin Fleet Solutions took its FleetWave SaaS platform offline in the UK and US following a cybersecurity incident discovered on April 3, 2026. The company is conducting an investigation with external experts to secure Azure-hosted environments before restoration.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines