April 2026

Capsule Security debuts with $7 million funding to secure AI agent behavior

Capsule Security debuts with $7 million funding to secure AI agent behavior 2026-04-15 at 17:15 By Industry News Capsule Security has launched from stealth with a $7 million seed round led by Lama Partners and Forgepoint Capital International. It prevents AI agents from being manipulated, misbehaving, or silently exfiltrating data when handling sensitive information and […]

Capsule Security debuts with $7 million funding to secure AI agent behavior Read More »

Broadcom introduces zero-trust runtime for scalable AI agents

Broadcom introduces zero-trust runtime for scalable AI agents 2026-04-15 at 17:15 By Industry News Broadcom has announced VMware Tanzu Platform agent foundations, introducing a secure-by-default agentic runtime designed to accelerate the delivery of autonomous AI applications. By extending the trusted code-to-production simplicity of Tanzu Platform to AI agents, Broadcom is enabling enterprise developers to move

Broadcom introduces zero-trust runtime for scalable AI agents Read More »

Capsule Security Emerges From Stealth With $7 Million in Funding

Capsule Security Emerges From Stealth With $7 Million in Funding 2026-04-15 at 17:15 By Ionut Arghire The Israeli startup aims to secure AI agents at runtime, continuously monitoring their behavior to prevent unsafe actions. The post Capsule Security Emerges From Stealth With $7 Million in Funding appeared first on SecurityWeek. This article is an excerpt

Capsule Security Emerges From Stealth With $7 Million in Funding Read More »

Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover

Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover 2026-04-15 at 17:15 By A recently disclosed critical security flaw impacting nginx-ui, an open-source, web-based Nginx management tool, has come under active exploitation in the wild. The vulnerability in question is CVE-2026-33032 (CVSS score: 9.8), an authentication bypass vulnerability that enables threat actors to seize control

Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover Read More »

April Patch Tuesday Fixes Critical Flaws Across SAP, Adobe, Microsoft, Fortinet, and More

April Patch Tuesday Fixes Critical Flaws Across SAP, Adobe, Microsoft, Fortinet, and More 2026-04-15 at 17:15 By A number of critical vulnerabilities impacting products from Adobe, Fortinet, Microsoft, and SAP have taken center stage in April’s Patch Tuesday releases. Topping the list is an SQL injection vulnerability impacting SAP Business Planning and Consolidation and SAP Business Warehouse (CVE-2026-27681,

April Patch Tuesday Fixes Critical Flaws Across SAP, Adobe, Microsoft, Fortinet, and More Read More »

Bitdefender extends GravityZone with continuous email threat protection

Bitdefender extends GravityZone with continuous email threat protection 2026-04-15 at 16:35 By Industry News Bitdefender has launched GravityZone Extended Email Security, unifying email and endpoint protection in one platform. Built for organizations and MSPs, it uses an ICES approach to deliver continuous protection against modern email threats, including phishing, BEC, ransomware, impersonation, and insider attacks.

Bitdefender extends GravityZone with continuous email threat protection Read More »

‘By Design’ Flaw in MCP Could Enable Widespread AI Supply Chain Attacks

‘By Design’ Flaw in MCP Could Enable Widespread AI Supply Chain Attacks 2026-04-15 at 16:34 By Kevin Townsend Researchers warn that a flaw in Anthropic’s Model Context Protocol allows unsanitized commands to execute silently, enabling full system compromise across widely used AI environments. The post ‘By Design’ Flaw in MCP Could Enable Widespread AI Supply

‘By Design’ Flaw in MCP Could Enable Widespread AI Supply Chain Attacks Read More »

100 Chrome Extensions Steal User Data, Create Backdoor

100 Chrome Extensions Steal User Data, Create Backdoor 2026-04-15 at 16:34 By Ionut Arghire Published through five accounts, the extensions appear part of a coordinated campaign based on shared C&C infrastructure. The post 100 Chrome Extensions Steal User Data, Create Backdoor appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

100 Chrome Extensions Steal User Data, Create Backdoor Read More »

How Cyble Blaze AI Delivers 360° Threat Visibility Across Dark Web and Enterprise Systems

How Cyble Blaze AI Delivers 360° Threat Visibility Across Dark Web and Enterprise Systems 2026-04-15 at 16:17 By Ashish Khaitan Modern cybersecurity no longer suffers from a lack of data; it suffers too much of it, scattered across systems that rarely speak the same language. Security teams today must monitor endpoints, cloud workloads, SaaS applications, and an ever-expanding universe

How Cyble Blaze AI Delivers 360° Threat Visibility Across Dark Web and Enterprise Systems Read More »

Tenable unveils OT discovery engine to expose cyber-physical risks

Tenable unveils OT discovery engine to expose cyber-physical risks 2026-04-15 at 16:17 By Industry News Tenable unveiled a new OT asset discovery engine that enables security teams to bring risks associated with cyber-physical systems (OT, IoT, and shadow IT) into a unified view of cyber exposure. With instant deployment and no additional IT overhead required,

Tenable unveils OT discovery engine to expose cyber-physical risks Read More »

CISO Conversations: Ross McKerchar, CISO at Sophos

CISO Conversations: Ross McKerchar, CISO at Sophos 2026-04-15 at 16:17 By Kevin Townsend Sophos’ Ross McKerchar discusses leadership at scale, retaining talent, defending against AI-enabled threats, and the industry’s growing trust problem. The post CISO Conversations: Ross McKerchar, CISO at Sophos appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

CISO Conversations: Ross McKerchar, CISO at Sophos Read More »

Fireblocks launches tool for institutions to earn yield on stablecoins

Fireblocks launches tool for institutions to earn yield on stablecoins 2026-04-15 at 16:08 By Cointelegraph by Zoltan Vardai Fireblocks launched Earn, giving institutions direct access to Aave and Morpho-based stablecoin lending as firms seek yield on idle balances. This article is an excerpt from Cointelegraph.com News View Original Source

Fireblocks launches tool for institutions to earn yield on stablecoins Read More »

Virginia updates law to hold unclaimed crypto in-kind for at least one year

Virginia updates law to hold unclaimed crypto in-kind for at least one year 2026-04-15 at 16:08 By Cointelegraph by Amin Haqshanas Virginia signed a law bringing digital assets into unclaimed property rules, requiring in-kind transfer and limiting how quickly the state can sell them. This article is an excerpt from Cointelegraph.com News View Original Source

Virginia updates law to hold unclaimed crypto in-kind for at least one year Read More »

Pakistan allows banks to serve licensed crypto firms after years-long ban

Pakistan allows banks to serve licensed crypto firms after years-long ban 2026-04-15 at 16:08 By Cointelegraph by Christina Comben Pakistan’s central bank has allowed banks to open accounts for licensed virtual asset service providers, ending years of restrictions and marking a shift toward a regulated framework. This article is an excerpt from Cointelegraph.com News View

Pakistan allows banks to serve licensed crypto firms after years-long ban Read More »

US states can’t account for datacenter tax breaks. Literally

US states can’t account for datacenter tax breaks. Literally 2026-04-15 at 16:08 By Dan Robinson Report says authorities are flouting accounting rules by failing to disclose revenue lost to server farm subsidies Many US states and local authorities are violating generally accepted accounting principles (GAAP) by failing to disclose revenue lost to datacenter tax subsidy

US states can’t account for datacenter tax breaks. Literally Read More »

Headless 360: Salesforce’s latest pitch to let AI do the dev work

Headless 360: Salesforce’s latest pitch to let AI do the dev work 2026-04-15 at 16:08 By Tim Anderson Here comes ‘enterprise vibe coding’ as CRM giant aims to open development to anyone on the platform Salesforce has introduced what it calls Headless 360 at its developer event TDX, which starts today in San Francisco, designed

Headless 360: Salesforce’s latest pitch to let AI do the dev work Read More »

Ancient Excel bug comes out of retirement for active attacks

Ancient Excel bug comes out of retirement for active attacks 2026-04-15 at 16:07 By Connor Jones Vuln old enough to drive lands on CISA’s exploited list While Microsoft was rolling out its bumper Patch Tuesday updates this week, US cybersecurity agency CISA was readying an alert about a 17-year-old critical Excel flaw now under exploit.…

Ancient Excel bug comes out of retirement for active attacks Read More »

Scroll to Top