InfoSecBulletin Cybersecurity for mankind
Palo Alto fixes multiple flaws, including CVE-2026-0232 which impacts the Cortex XDR Agent on Windows computers. There is an issue with a safety feature that lets a local Windows admin turn off the agent completely.
Another vulnerability, tracked as CVE-2026-0233, allows a local Windows user to “execute arbitrary code with NT AUTHORITY\SYSTEM privileges”.
“InfoSecCon-2026: Bangladesh’s Cybersecurity Leaders Unite to Shape a Safer Digital Future”
Microsoft Patches CVSS 10.0 Azure AI Foundry Vulnerability Allowing Privilege Escalation
AWS is unable to restore access to Bahrain, one UAE cloud data zone after war damage
Cisco Warns of Critical ISE 0-Day Flaw and Hackers Allegedly Selling Fortinet FortiGate 1-Day Flaw
Anthropic prepares “Claude Money” to analyze bank account and financial data
GhostCode Phishing Kit Evades Microsoft 365 MFA to Hijack Accounts in 78 Seconds
CISA Warns of Cisco Secure Email Gateway 0-Day Flaw Actively Exploited in Attacks
VPN flaw exposed 246,000 personnel records in japan
Hackers deploy Casbaneiro Trojan that activates on bank websites
German police read Signal, Telegram, WhatsApp messages without breaking encryption
Thirdly, the flaw known as CVE-2026-0234 (CVSS 7.2), is worrying because it lets anyone without a login get into and change protected information. By avoiding signature checks, a hacker could insert themselves into secure chats or alter platform data.
Companies are encouraged to quickly install these updates to keep their defenses strong.
Ivanti
The Cybersecurity and Infrastructure Security Agency (CISA) issued an urgent alert about a critical flaw (CVE-2026-1340) in Ivanti Endpoint Manager Mobile that is actively being exploited.
They added it to their Known Exploited Vulnerabilities catalog on April 8, 2026, and ordered U.S. federal agencies to fix it within 3 days (by April 11).
CISA urges all organizations to act just as quickly: apply patches immediately, follow Ivanti’s guidance, and if mitigation isn’t possible, disconnect the affected system until it’s secured.
GitLab
GitLab released urgent updates (18.10.3, 18.9.5, 18.8.9) to fix multiple vulnerabilities. High-severity issues include:
CVE-2026-5173: Authenticated command execution via WebSockets
CVE-2026-1092: Unauthenticated DoS via Terraform API
CVE-2025-12664: Unauthenticated DoS via GraphQL
Medium-severity flaws include:
CVE-2026-1516: Code injection leaking user IPs
CVE-2026-1403: CSV import crash (Sidekiq)
CVE-2026-4332: Malicious JavaScript in dashboards
CVE-2026-1101: DoS via GraphQL input validation
All administrators are strongly advised to upgrade immediately to prevent exploitation.
SonicWall
SonicWall warned of serious problems with its SMA 1000 devices. They found four issues that could let someone gain higher access, bypass multi-factor authentication, and find out user details.
Key CVEs:
CVE-2026-4112: SQL injection leading to admin-level access
CVE-2026-4113: User credential enumeration without authentication
CVE-2026-4114: TOTP MFA bypass for administrators
CVE-2026-4116: TOTP MFA bypass for users
Users are urged to apply the latest hotfixes immediately to mitigate risks.
