General Medium 5 May
(The Hacker News) / The Hacker News:

MetInfo CMS CVE-2026-29014 Exploited for Remote Code Execution Attacks

Threat actors are actively exploiting a critical security flaw impacting an open-source content management system (CMS) known as MetInfo, according to new findings from VulnCheck. The vulnerability in question is CVE-2026-29014 (CVSS score: 9.8), a code injection flaw that could result in arbitrary Source: The Hacker News

General High 5 May
Cybersecurity News:

pnpm 11 Enhances npm Supply Chain Security by Default

pnpm 11 introduces a new default security feature to combat supply chain attacks in the npm ecosystem. This update enables a minimum release age for packages, directly addressing the risk of malicious code injection into developer environments. The move aims to enhance security protections and reduce the overall attack surface for software development. Source: Cybersecurity […]

Why it matters: Indian organizations relying on npm for software development should ensure their teams are aware of and leverage such security enhancements to mitigate supply chain risks.
General High 5 May
Cybersecurity News:

Microsoft Edge Stores Passwords in Cleartext Memory at Launch

A security researcher has uncovered a critical vulnerability in Microsoft Edge, revealing that the browser decrypts and stores all saved passwords in cleartext process memory upon launch. This exposure occurs regardless of user activity, making credentials susceptible to memory scraping attacks. The flaw, disclosed by PaloAltoNtwks Norway, highlights a significant risk to user data. Source: […]

Why it matters: Indian organizations using Microsoft Edge should be aware of this vulnerability and consider advising users on alternative password management or browser usage until a patch is released.
General High 5 May
Cityairnews:

CERT-In warns of rising AI-driven cyber threats, ‘Mythos’ concerns

India's CERT-In has issued a warning regarding the increasing prevalence of AI-driven cyber threats. The advisory specifically highlights concerns related to a potential threat named 'Mythos'. This alert underscores the evolving landscape of cyber risks powered by artificial intelligence. Source: Cityairnews

Why it matters: Indian organizations must enhance their cybersecurity defenses and threat intelligence capabilities to counter sophisticated AI-driven attacks warned by CERT-In.
General High 5 May
BleepingComputer:

Amazon SES Abuse for Phishing Bypasses Security Filters

Amazon's Simple Email Service (SES) is being exploited by threat actors to launch sophisticated phishing campaigns. These malicious emails are designed to bypass standard security filters and render traditional reputation-based blocking mechanisms ineffective. The technique allows attackers to deliver highly convincing phishing messages directly to inboxes, increasing the risk of compromise. Source: BleepingComputer

Why it matters: Indian organizations must enhance their email security defenses and user awareness training to counter phishing attacks leveraging Amazon SES, as these can bypass common security measures.
General High 5 May
BleepingComputer:

Trellix Discloses Data Breach After Source Code Repository Hack

Cybersecurity firm Trellix has disclosed a data breach after attackers gained access to a portion of its source code repository. This incident involves unauthorized access to the company's internal development environment. The breach underscores the critical need for robust supply chain security and continuous monitoring of vendor risks. Source: BleepingComputer

Why it matters: Indian critical infrastructure organizations using Trellix products should monitor for further advisories and evaluate potential supply chain risks stemming from this incident.
General Critical 4 May
Thehawk:

Indian IT Firms See Critical Surge in Credential Theft Detections

A recent report indicates a significant surge in credential theft attempts targeting Indian IT firms. Over 265 million detections of credential theft were recorded, highlighting a widespread and persistent threat landscape. This increase emphasizes the urgent need for enhanced cybersecurity measures, particularly around remote access and identity management. Source: Thehawk

Why it matters: Indian organizations, especially those in the IT sector or relying on IT service providers, must prioritize robust identity and access management to counter this escalating threat.
General High 4 May
Techinasia:

India Warns: AI Accelerates Software Flaw Exploitation

India's cybersecurity agency has issued a warning about emerging AI capabilities. Anthropic's Mythos AI is reportedly compressing the timeline between identifying software flaws and developing functional exploits. This acceleration poses a significant new challenge for cybersecurity defenses, potentially increasing the speed and impact of cyber attacks. Source: Techinasia

Why it matters: Indian organizations must prioritize rapid vulnerability patching and robust threat intelligence to mitigate risks from AI-accelerated exploit development.
General High 4 May
MediaNama:

CERT-In Issues High-Severity Advisory on ‘Mythos’ Threat

India's CERT-In has issued a high-severity advisory concerning the 'Mythos' threat, which officials deem unprecedented. The directive urges all organizations to treat this threat with extreme caution and implement robust security measures. This development occurs as Anthropic introduces its Claude Security offering, highlighting growing concerns around advanced threats. Source: MediaNama

Why it matters: Indian organizations must heed CERT-In's high-severity advisory on the unprecedented Mythos threat and implement necessary security measures promptly to protect critical infrastructure.
General High 4 May
Digitalterminal:

ESET Establishes Dedicated India Entity Amidst Rising Cyber Threats

ESET has announced the establishment of a dedicated entity in India, aiming to bolster its long-term growth strategy across the APAC region. This move comes as India's cybersecurity landscape experiences a significant increase in complexity and threats, including ransomware. The new entity will enable ESET to better serve the growing demand for robust cybersecurity solutions […]

Why it matters: Indian organisations can expect enhanced local support and access to ESET's cybersecurity solutions as the company deepens its commitment to the region.
General Critical 4 May
Cybersecurity News:

Critical MOVEit Flaws Allow Authentication Bypass, Full System Control

Progress Software has issued a critical security bulletin for its MOVEit Automation platform, detailing two highly severe vulnerabilities. These flaws could enable attackers to bypass security checkpoints and gain full system control over affected systems. The vulnerabilities pose a significant risk given MOVEit Automation's widespread use for secure enterprise file transfers. Source: Cybersecurity News

Why it matters: Indian critical infrastructure organizations utilizing MOVEit Automation must promptly review this alert and apply all necessary patches to mitigate the risk of authentication bypass and system compromise.
General Critical 4 May
BleepingComputer:

CISA Warns of Active Exploitation of ‘Copy Fail’ Linux Root Vulnerability

CISA has issued a warning regarding the active exploitation of the 'Copy Fail' Linux security vulnerability. Threat actors are leveraging a recently disclosed proof-of-concept exploit to gain root access to affected systems. This critical flaw allows attackers to take full control of vulnerable Linux machines. Source: BleepingComputer

Why it matters: Indian organizations using Linux systems must immediately identify and patch vulnerable machines to prevent root compromise and potential data breaches.
General High 4 May
BleepingComputer:

Microsoft April Windows Updates Cause Third-Party Backup Failures

Microsoft has confirmed that its April 2026 security updates are causing significant failures in third-party backup applications. The issue specifically affects software utilizing the psmounterex.sys driver, leading to operational disruptions. Organizations relying on these backup solutions should be aware of the problem and monitor for official resolutions from Microsoft. Source: BleepingComputer

Why it matters: Indian critical infrastructure operators must assess their backup systems for compatibility with recent Windows updates and prepare for potential recovery challenges.
General Critical 4 May
Security Week:

40,000 Servers Compromised via cPanel Zero-Day Exploitation

Over 40,000 servers have been compromised due to ongoing exploitation of a cPanel vulnerability. The attacks are targeting CVE-2026-41940, a recently patched zero-day flaw. This vulnerability grants administrative access to affected systems, posing a significant risk. Source: Security Week

Why it matters: Indian organizations utilizing cPanel must immediately verify patch status for CVE-2026-41940 to prevent administrative compromise of their servers.
General Critical 4 May
Cybersecurity News:

Apache MINA Critical Vulnerabilities Allow Remote Code Execution, Urgent Updates Issued

The Apache MINA project has released urgent security updates to address two critical vulnerabilities. These flaws could enable attackers to execute arbitrary code on affected systems. Developers are strongly advised to update their software immediately to prevent potential exploitation. Source: Cybersecurity News

Why it matters: Indian organizations utilizing Apache MINA in their network applications must apply these critical updates to mitigate severe remote code execution risks.
General High 4 May
Cybersecurity News:

CISA Warns: Critical cPanel & WHM Vulnerability Actively Exploited

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding a critical security flaw in cPanel & WHM web hosting platforms. This vulnerability, tracked as CVE-2026-41940, has been added to CISA's Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation by threat actors. The flaw affects WebPros products and poses a significant […]

Why it matters: Indian organizations utilizing cPanel & WHM for their web hosting or relying on service providers using these platforms must prioritize immediate patching or mitigation to prevent active exploitation.
General High 4 May
Cybersecurity News:

New Microsoft Teams Phishing Attacks Use Email Bombing, Fake IT Support

A new wave of cyberattacks is leveraging email bombing and fake IT support calls on Microsoft Teams to trick employees. These sophisticated phishing campaigns aim to gain remote access to user devices. Security researchers warn these attacks are increasing and pose a significant threat. Source: Cybersecurity News

Why it matters: Indian critical infrastructure organizations must enhance employee training on phishing awareness and implement robust email and collaboration platform security measures to counter these evolving threats.
General Critical 4 May
Cybersecurity News:

AI-Powered Threat Actors Automate Zero-Day Exploitation at Machine Speed

Threat actors are now leveraging artificial intelligence to rapidly discover and exploit zero-day vulnerabilities. This shift enables them to identify and weaponize software flaws in minutes, fundamentally changing the speed of cyberattacks. Organizations across all sectors face heightened and accelerated risks from these AI-driven, machine-speed attacks. Source: Cybersecurity News

Why it matters: Indian critical infrastructure operators must enhance their threat intelligence, vulnerability management, and rapid response capabilities to counter AI-accelerated zero-day exploitation.
General High 4 May
BleepingComputer:

Microsoft Defender Flags Legitimate DigiCert Certificates as Trojan

Microsoft Defender is erroneously identifying legitimate DigiCert root certificates as Trojan:Win32/Cerdigent.A!dha. This widespread false-positive issue is causing alerts and, in some instances, the removal of critical certificates from Windows systems. Operators must be aware of this issue to prevent unnecessary remediation or operational disruption. Source: BleepingComputer

Why it matters: Indian organizations using Microsoft Defender on Windows systems must be vigilant for these false positives to avoid service disruptions caused by the removal of essential certificates.