Cybersecurity News | Daily Recap [04 May 2026]

Vulnerabilities & Exploits

• CISA says the Copy Fail Linux kernel flaw (CVE-2026-31431) is now being actively exploited to gain root on major distributions, with a public PoC and mandatory federal patch deadline of May 15 – Copy Fail, Copy Fail
• Progress warned that a critical MOVEit Automation auth-bypass bug (CVE-2026-4670) lets remote, unauthenticated attackers bypass login, with a related privilege-escalation fix (CVE-2026-5174) and more than 1,400 online instances exposed – MOVEit Flaw

Incident Response & Breaches

• DigiCert revoked 60 certificates after a support-portal compromise let an attacker abuse analyst access to obtain EV code-signing certs, including ones used by the Zhong Stealer family, and the company has since tightened MFA and logging – DigiCert Hack
• Instructure confirmed a breach after ShinyHunters claimed the theft and leak of data, with possible exposure of identifying information and private messages and key rotation already underway – Instructure Breach

Platform & Security Tooling

• Microsoft said April 2026 updates added psmounterex.sys to the vulnerable driver blocklist, breaking some third-party backup apps that rely on VSS snapshots and requiring updated drivers instead of rollback – Backup Failures
• Microsoft Defender falsely flagged legitimate DigiCert root certificates as Trojan:Win32/Cerdigent.A!dha after an April 30 signature update, prompting a security-intelligence fix and restoration of affected trust-store entries – Defender False Flag

Fraud & Social Engineering

• Researchers say fraudsters are using structured loan scams against credit unions by exploiting onboarding and verification workflows with stolen identities and social engineering rather than “hacking” directly – Credit Union Fraud

AI, Defense & Critical Infrastructure

• The Pentagon struck deals with 7 tech companies to bring AI into classified systems, expanding decision-support capabilities while raising concerns about oversight and combat risk – Pentagon AI
• Analysts argue data centers should be treated as critical infrastructure after Middle East strikes and destructive cyber incidents highlighted how AI-era workloads make them high-value targets – Data Center Risk
• A webinar announcement noted AI-driven phishing and brand impersonation are accelerating attacks on MSPs, underscoring the need for SaaS backups and BCDR planning – MSP Webinar

Recaps & Market Moves

• A monthly roundup counted 33 cybersecurity M&A deals announced in April 2026, reflecting continued consolidation across the sector – M&A Roundup
• Weekly coverage highlighted broader security trends including active exploit campaigns, major breaches, AI attack-surface growth, and rising privacy enforcement across the industry – Week Review

Cybersecurity News | Daily Recap – hendryadrian.com