CISO Daily Digest: Data Breaches & Leaks (20260427)

This data exposure potentially compromises sensitive information. Assess exposure risk and implement remediation.

Event Context:

• Discord sleuths breach Anthropic’s zero-day hunter in a wake-up call for contained AI security
• Researchers Uncover 73 Fake VS Code Extensions Delivering GlassWorm v2 Malware
• HTB Sorcery. Захватываем домен FreeIPA
• CISA將微軟Defender漏洞BlueHammer列入KEV清單，要求各機構限期修補
• PhantomCore Exploits TrueConf Vulnerabilities to Breach Russian Networks

Organizations should review the relevant security advisories and ensure their defenses are updated accordingly.

---

Active threats this week

📌 Researchers Uncover 73 Fake VS Code Extensions Delivering GlassWorm v2 Malware

This campaign targets VS Code extensions in the software supply chain. Developers should audit installed extensions and verify publisher identities.

🔗 Reference: Source

📌 HTB Sorcery. Захватываем домен FreeIPA

🔗 Reference: Source

📌 CISA將微軟Defender漏洞BlueHammer列入KEV清單，要求各機構限期修補

This vulnerability requires assessment and prioritization. Identify affected systems and apply patches or compensating controls.

📌 PhantomCore Exploits TrueConf Vulnerabilities to Breach Russian Networks

This data exposure potentially compromises sensitive information. Assess exposure risk and implement remediation.

🔗 Reference: Source

📌 注意喚起: Cisco ASAおよびFTDにおける複数の脆弱性（CVE-2025-20333、CVE-2025-20362）に関する注意喚起 (更新)

This vulnerability requires assessment and prioritization. Identify affected systems and apply patches or compensating controls.

🔗 Reference: Source

📌 Google發布Chrome瀏覽器更新，修補19項漏洞，含2個高風險漏洞

This vulnerability requires assessment and prioritization. Identify affected systems and apply patches or compensating controls.

📌 後門程式FireStarter鎖定思科防火牆，中國駭客利用已知漏洞滲透裝置

This backdoor targeted Cisco firewalls in U.S. federal agencies. Check for compromise indicators and apply available mitigations.

📌 LMDeploy LLM推論工具SSRF漏洞公開後13小時內即遭利用

This vulnerability requires assessment and prioritization. Identify affected systems and apply patches or compensating controls.

📌 漏洞獵補

This vulnerability requires assessment and prioritization. Identify affected systems and apply patches or compensating controls.

📌 資安院首屆漏洞獵補發現20個硬體產品漏洞，今年第二屆活動開放AI工具挖掘軟體漏洞

This vulnerability requires assessment and prioritization. Identify affected systems and apply patches or compensating controls.

📌 CrowdStrike修補LogScale重大漏洞，未更新可能導致遠端讀取任意檔案

This vulnerability requires assessment and prioritization. Identify affected systems and apply patches or compensating controls.

📌 用AI發現漏洞還不夠，Google指出自動化大規模修補才是防禦核心

This vulnerability requires assessment and prioritization. Identify affected systems and apply patches or compensating controls.

---

How Can OPSWAT Help

Supply chain threat prevention: OPSWAT MetaDefender’s multi-engine scanning (30+ AV engines) and Content Disarm and Reconstruction (CDR) can inspect downloaded packages and binaries before they reach enterprise systems—stripping active threats while preserving usability.

Malware and ransomware defense: OPSWAT’s Deep CDR removes active content from files, neutralizing embedded threats including zero-day exploits. Combined with multi-engine scanning, this provides defense-in-depth against known and unknown malware.