Daily Security Briefing #228

April 18, 2026 | Read Online

Critical vulnerabilities exposed, AI-powered exploits on the rise, and cryptocurrency exchange hacks…

Executive Summary

Cybersecurity threats continue to escalate with malicious actors leveraging AI-powered tools to exploit vulnerabilities. The recent discovery of a Mirai variant targeting IoT devices highlights the growing concern of botnet attacks. Meanwhile, critical flaws in popular libraries have been exposed, and cryptocurrency exchanges are falling victim to sophisticated hacks.

Top Articles

Critical Flaw in Protobuf Library Enables JavaScript Code Execution A widely used JavaScript implementation of Google’s Protocol Buffers has a critical remote code execution flaw that can be exploited by attackers. bleepingcomputer

Nexcorium Mirai Variant Weaponises TBK DVR Vulnerability in Fresh IoT Botnet Push A newly discovered Mirai malware variant named Nexcorium is actively targeting unpatched Internet of Things (IoT) devices, exploiting a severe vulnerability in TBK DVR systems to build a massive botnet capable of launching destructive DDoS attacks. gbhackers

Researcher Claims Claude Opus Enabled Creation of Working Chrome Exploit A security researcher has shown that Anthropic’s Claude Opus can help build a working browser exploit chain against Google Chrome’s V8 engine, raising fresh concerns about how quickly AI can speed up offensive security work. gbhackers

Apple Addresses iPhone Passcode Glitch Caused by Absent Czech Keyboard Symbol Apple is developing a software patch to resolve an unusual iOS 26 passcode bug that has left some iPhone users locked out of their personal devices for months. cyberpress

Researchers Claim Fiverr User Data Is Exposed in Google Search Results Security researchers claim that sensitive customer files, including tax documents and personal information, are currently accessible to the public and actively indexed within Google search results. cyberpress

$13.74M Hack Shuts Down Sanctioned Grinex Exchange After Intelligence Claims Grinex, a Kyrgyzstan-incorporated cryptocurrency exchange sanctioned by the U.K. and the U.S., has suspended operations after blaming Western intelligence agencies for a $13.74 million hack. thehackernews

Microsoft Teams Right-Click Paste Broken by Edge Update Bug A recent Microsoft Edge browser update introduced a bug that breaks right-click paste in chats in the Microsoft Teams desktop client. bleepingcomputer

Threat Brief: Escalation of Cyber Risk Related to Iran Unit 42 details recent Iranian cyberattack activity, sharing direct observations of phishing, hacktivist activity and cybercrime. unit42

Tycoon 2FA Loses Phishing Kit Crown Amid Surge in Attacks Threat actors are reusing Tycoon 2FA tools across other phishing kits following the platform’s disruption. securityweek

AI Transparency: This newsletter uses AI to curate, rank, and summarize cybersecurity content from leading industry blogs. All articles link directly to original authors. Executive summaries are AI-generated based on article content. I curate the sources and deliver the digest—the original authors deserve the credit for their excellent work.