Microsoft Exposes Malicious AI Browser Extensions Harvesting ChatGPT and DeepSeek Conversations — 900K Installs
Summary Microsoft has identified a wave of malicious Chromium browser extensions masquerading as AI assistants, distributed through official browser extension stores. The extensions accumulated approximately 900,000 installs across more than…
Zhipu AI Releases GLM-5.1 Under MIT License — 744B MoE Model Claims to Beat Claude Opus 4.6 and GPT-5.4
Summary Chinese AI lab Zhipu AI has released GLM-5.1, a massive 744-billion-parameter mixture-of-experts (MoE) model, under the permissive MIT license. The company claims GLM-5.1 surpasses both Anthropic’s Claude Opus 4.6…
Fortinet Releases Emergency Patch for Actively Exploited FortiClient EMS Zero-Day — CVE-2026-35616
Summary Fortinet has issued an emergency hotfix for CVE-2026-35616, a critical improper access control vulnerability in FortiClient Enterprise Management Server (EMS). The flaw enables unauthenticated attackers to execute arbitrary code…
Critical Marimo Python Notebook Zero-Day Exploited Within 10 Hours of Disclosure — CVE-2026-39987
Summary A critical pre-authentication remote code execution (RCE) vulnerability in the open-source Marimo Python notebook platform, tracked as CVE-2026-39987 with a CVSS severity score of 9.3, was actively exploited in…
OpenAI GPT-6 Launches Tomorrow — A Generational Leap in Coding, Reasoning, and Agent Tasks
Summary OpenAI is set to launch GPT-6 globally on April 14, 2026 — internally codenamed “Spud” — marking what the company describes as a generational leap over GPT-5.4. The new…
Industrial OT Systems Face Growing Quantum Threat — Why “Harvest Now, Decrypt Later” Is a Present Danger
Summary A growing body of research and regulatory action is highlighting the acute vulnerability of industrial Operational Technology (OT) systems to quantum computing threats. While cryptographically relevant quantum computers (CRQCs)…
Cursor 3.0 Goes Agent-First — The IDE That Manages AI Agents Instead of Files
Summary Cursor 3.0 has officially launched, representing the most significant overhaul of the AI-powered IDE since its inception. The update introduces a completely rebuilt interface centered around a new “Agents…
Adobe Patches Actively Exploited Acrobat Reader Zero-Day (CVE-2026-34621) — Update Now
Summary Adobe has released emergency security patches for a critical zero-day vulnerability in Acrobat Reader that has been actively exploited in the wild for months. Tracked as CVE-2026-34621, the flaw…
Device Code Phishing Attacks Surge 37x as EvilTokens Kit Goes Mainstream
Summary Security researchers are sounding the alarm on a massive surge in device code phishing attacks, with detected phishing pages increasing by a staggering 37.5x as of April 2026. The…
Australian Fintech youX Breach Exposes 444,000 Borrowers — Driver’s Licenses Reissued Nationwide
Summary A major data breach at Sydney-based financial technology firm youX has exposed the personal information of over 444,000 borrowers and 229,000 driver’s license numbers. The attacker gained unauthorized access…