Infosec bits for 2026 week 15

Anele Siwela | April 10, 2026, 12:49 p.m.

Cybersecurity News:

Microsoft 365 Network-Level Disruption Affecting Exchange Online, Teams, and Core Suite Services [Guru Baran, Cybersecurity News]

ConnectWise CISO: MSP Cybersecurity Readiness Isn’t About ‘Chasing The Latest Zero-Day Anymore’ [CJ Fairfield, CRN]

PSA demands public sector cybersecurity overhaul after Stats SA breach [Siphesihle Buthelezi, iol]

Data Breaches and Attacks:

Standard Bank suffers data leak [Luis Monzon, Mybroad Band]

Data Leakage Vulnerability Patched in OpenSSL [Eduard Kovacs, SecurityWeek]

Phishing LNK files and GitHub C2 power new DPRK cyber attacks [Pierluigi Paganini, Security Affairs]

Chrome Security Alert: Update Required to Prevent Cyber Attacks [The420 Staff, The 420]

Hackers Actively Attacking Adobe Reader Users Using Sophisticated 0-Day Exploit [Abinaya, Cybersecurity News]

Vulnerabilities and Patches:

Fortinet Issues Emergency Patch for FortiClient Zero-Day [Rob Wright, Dark Reading]

GitLab Patches Multiple Vulnerabilities That Enables DoS and Code Injection Attacks [Abinaya, Cybersecurity News]

Google patches fourth Chrome zero-day so far this year News [Maxwell Cooter, Cso Online]

Anonymizing Linux Tails 7.6.1: Emergency update patches browser vulnerabilities [Dirk Knop, Heise]

AWS Patches Critical RCE and Escalate Privileges in Research and Engineering Studio [Abinaya, Cybersecurity News]