2026-04-30: Microsoft's February patch for a Russian zero-day fell short

Show Notes - 2026-04-30

Stories Covered

• Today:
• Microsoft Windows CVE-2026-32202: Incomplete Patch Creates Zero-Click Credential Theft Flaw [Critical Alerts]
• GitHub CVE-2026-3854: Critical RCE Allowed Access to Millions of Private Repos [Critical Alerts]
• Linux CVE-2026-31431 (Copy Fail): Root Privilege Escalation in All Distributions Since 2017 [Critical Alerts]
• Vect 2.0 Ransomware Functions as Wiper Due to Design Flaw [Ransomware & Extortion]
• Sandhills Medical Foundation Breach Affects 170,000 [Ransomware & Extortion]
• Pine Bluff School District Loses $3.2 Million in Business Email Compromise [Ransomware & Extortion]
• TeamPCP Supply Chain Attack Targets SAP npm Packages with Credential Stealer [Business & Infrastructure Threats]
• Checkmarx Data Stolen in TeamPCP Supply Chain Attack [Business & Infrastructure Threats]
• Claude Mythos Finds 271 Zero-Days in Firefox [Business & Infrastructure Threats]
• GitHub Apologizes as Uptime Drops Below 85% [Business & Infrastructure Threats]
• AWS Engineers: AI Development Requires Human Review for Everything [Business & Infrastructure Threats]
• CISA Releases Zero Trust Guidance for Operational Technology [General Security News]
• AI Agent Identity Security Gap Emerging [General Security News]
• Microsoft to Block TLS 1.0/1.1 on Exchange Online POP3/IMAP4 in July 2026 [General Security News]
• CVE-2026-32202: Windows Shell Authentication Coercion (Zero-Day) [Vulnerability Disclosures]
• CVE-2026-3854: GitHub Remote Code Execution (Critical) [Vulnerability Disclosures]
• CVE-2026-31431: Linux Copy Fail Privilege Escalation (High) [Vulnerability Disclosures]
• Apache Thrift, Log4j, Python, and PostCSS Vulnerabilities [Vulnerability Disclosures]

CVEs Referenced

CVE-2022-0847, CVE-2024-41045, CVE-2024-41067, CVE-2024-41932, CVE-2024-57974, CVE-2024-57976, CVE-2025-48431, CVE-2026-21510, CVE-2026-21513, CVE-2026-31431, CVE-2026-31499, CVE-2026-31508, CVE-2026-31540, CVE-2026-31545, CVE-2026-31546, CVE-2026-32202, CVE-2026-3298, CVE-2026-34477, CVE-2026-3854, CVE-2026-41305, CVE-2026-41602, CVE-2026-41603, CVE-2026-41604, CVE-2026-41607, CVE-2026-41636, CVE-2026-6238, CVE-2026-6357

Read the full brief