April 11, 2026 - Red Dot Security

Header image for the Red Dot Weekly Cyber Security News https://reddotsecurity.news

Hello all,

Artemis II splashed down on Friday off the US Pacific coast after making a successful orbit around the moon – very cool! In the world of cyber, Anthropic’s latest AI, Claude Mythos, continues to rattle experts and tantalize evil people worldwide with its unprecedented ability to find and exploit vulnerabilities. The US Treasury and Federal Reserve is highly concerned about AI’s burgeoning ability to autonomously perform compromise, and has summoned bank executives to meet to discuss the situation. Additionally, the US government is warning about Iranian threat actors actively probing industrial control systems and critical infrastructure nationwide, with nearly 4,000 Rockwell Automation/Allen-Bradley PLC devices known to be potentially vulnerable. In a bit of good news, the FBI took decisive action regarding vulnerable TP-Link and MikroTik routers that were part of a massive botnet, removing malware and hardening them against further compromise. And there’s much more in this week’s links.

Headline NEWS:

Adobe Acrobat had a zero-day vulnerability that has been under active exploitation since at least December revealed by a researcher. In response, Adobe has released an emergency patch for both Windows and Mac to address the defect. Readers are urged to update their Adobe Acrobat Readers to the latest version to prevent this exploit.
Fortinet FortiClient EMS received an emergency update last week for yet another defect. CISA ordered all federal agencies to update by this past Thursday since it is already under active exploitation. If you have it, patch it.
Juniper Networks patched for dozens of Juno OS vulnerabilities. At least one is a remote code execution defect that doesn’t require authentication. Unbelievably, one of the flaws is a default password in Support Insights (JSI) Virtual Lightweight Collector (vLWC). When will this stop being a thing? Come on! It is high time that all default passwords were required to be changed before allowing a device into service. There are a lot of items that have been addressed by these patches and none are known to be actively exploited yet, so don’t wait to plug these defects.
Palo Alto Networks and SonicWall both released patches for high-severity vulnerabilities. For Palo Alto’s part, they’ve patched three flaws in their own and in third-party products that are integrated into their solutions, such as Chrome. SonicWall patched four vulnerabilities in the SMA1000 series firewalls. The vulnerabilities are not known to be exploited yet and are not present in their other SSL-VPN firewalls.

In Ransomware, Malware, and Vulnerabilities News:

Anthropic Claude Mythos is everywhere in the news this week. This newest unreleased AI agent is so effective at finding and exploiting vulnerabilities, that Anthropic has decided to not release it to the public, but has instead created Project Glasswing where they’ve invited security vendors and major cyber companies to use the model to find and plug defects in their products. The fascinating thing about this AI agent is that it wasn’t designed to be a cyber security agent, it is just that good at what it does. The 245 page “Claude Mythos Preview System Card” PDF is an eye-opening very interesting read about the limitations, capabilities, and downright scary behavior of this new agent.
Device Code Phishing Attacks have grown by 3,600% this year. You can have all the secure systems you want, but if users enable access to their accounts by giving access to a rogue application, then all the threat actor needs to do is log in. Click-Fix attacks are still dominating the phishing vector, but a new form of attack that asks you to enter a pin to verify a login is actually tricking the user to authorize a “device”, which in turn grants that threat actor access to the user’s account and anything therein. The particularly insidious part of this attack is that it uses the legitimate Microsoft login page to accomplish the goal.

In Other News Events of Note and Interest:

Unitree launching a sub $4,500 robot this coming week. I saw the recent Chinese New Year Celebrations that showcased robots performing parkour, martial arts moves, and dancing, and I was absolutely amazed at the nimbleness and dexterity of these automatons. Well, that’s the units that will be selling for just a tiny bit over the average New York city monthly rent. The world of robotics is about to change rapidly, it would appear.

Musings

While the news headlines generally are about problems, issues, defects, and disasters, there is always something good out there. Don’t allow yourself to become cynical and like Winnie the Pooh’s friend Eeyore. Bad news sells, good news rarely does. There are good people, there is good news, and there is hope to be found, we just need to be willing to open our eyes and look for it. If you need a dose of positive to start your day, check out the Good News Network. How can you not like a headline like “Urine From Music Festival Toilets is Fertilizing a New Biodiverse Forest With Odor-Free Nutrients.”

Headline NEWS

Ransomware, Malware, and Vulnerabilities News

Other News Events of Note and Interest

Like this: