Feed aggregator

WHITEHALL, Ohio (WCMH) -- After days of disagreement, Whitehall City Council has finally set a date for a high-stakes special recall election that will determine the future of Mayor Michael Bivens and councilmembers Lori Elmore and Amy Harcar. "We were voted into office," Harcar said. "If the people did not like us, if they did [...]

We may already be living through the most consequential hundred days in cyber history, and the arrival of AI that can autonomously chain zero-day vulnerabilities into working exploits means the software industry's long-standing "ship it and patch it later" era is officially over.

Show Notes - https://www.grc.com/sn/SN-1074-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit

Sponsors:

• guardsquare.com
• hoxhunt.com/securitynow
• zscaler.com/security

COLUMBUS, Ohio (WCMH) – Two people have been arrested while protesting an event on the Ohio State University campus Tuesday night. The event, sponsored by a pro-Israel student group, was happening inside the Ohio Union, featuring soldiers from the Israeli Defense Forces sharing stories from the Oct. 7, 2023 Hamas attack. In response, pro-Palestinian groups [...]

The Ohio Casino Control Commission is looking to fine Kalshi $5 million for what it calls unlicensed sports gaming in the state.

COLUMBUS, Ohio (WCMH) -- Central Ohio has a connection to the recent Artemis II mission to the moon: a woman from the area helped retrieve the astronauts from the Pacific Ocean. Madison Morbitt graduated from Columbus School for Girls in 2017. She is now a Navy lieutenant and pilot. Leaders at Columbus School for Girls [...]

COLUMBUS, Ohio (WCMH) – The Ohio House of Representatives overwhelmingly passed legislation last year to create a community energy pilot program, sponsored by state Reps. Sharon Ray (R-Wadsworth) and Jim Hoops (R-Napoleon). Now that proposal lands in the Senate Energy Committee, where senators got the first chance to question Ray directly about the program, which [...]

WORTHINGTON, Ohio (WCMH) -- Many are mourning the loss of a young family who was killed in a crash near Interstate 71 at US-36/SR-37.   Lynnea, 36, and Luke Soposki, 37, are remembered as a kind couple who loved being parents to their one-year-old son, Logan. All three died in the crash on Saturday. The Soposkis were members at Metro Fitness Worthington for nearly a decade. Michael Davies, the owner and the couple’s personal [...]

COLUMBUS, Ohio (WCMH) – Neighbors and customers are rallying around a neighborhood gem after a fire on Sunday caused significant damage. The Thurman Cafe has been a staple in the German Village neighborhood since the 1940s. Now, former employees and nearby business owners are giving back to a place they said has given them so [...]

COLUMBUS, Ohio (WCMH) – Every day, 100 Americans are diagnosed with multiple myeloma, a cancer of the white blood cells in the bone marrow that produces antibodies. At OhioHealth, one survivor is taking part in a drug trial that is supporting new research. She’s someone who knows firsthand about the importance of patient services, because [...]

Microsoft today pushed software updates to fix a staggering 167 security vulnerabilities in its Windows operating systems and related software, including a SharePoint Server zero-day and a publicly disclosed weakness in Windows Defender dubbed “BlueHammer.” Separately, Google Chrome fixed its fourth zero-day of 2026, and an emergency update for Adobe Reader nixes an actively exploited flaw that can lead to remote code execution.

Redmond warns that attackers are already targeting CVE-2026-32201, a vulnerability in Microsoft SharePoint Server that allows attackers to spoof trusted content or interfaces over a network.

Mike Walters, president and co-founder of Action1, said CVE-2026-32201 can be used to deceive employees, partners, or customers by presenting falsified information within trusted SharePoint environments.

“This CVE can enable phishing attacks, unauthorized data manipulation, or social engineering campaigns that lead to further compromise,” Walters said. “The presence of active exploitation significantly increases organizational risk.”

This flaw drops alongside a separate SQL Server remote code execution vulnerability (CVE-2026-33120), notes Ryan Braunstein, manager of Security and IT at Automox.

“One bug allows an attacker to get into your SQL instance from the network,” Braundstein said. “The other lets someone already inside promote themselves to full control.”

Microsoft also addressed BlueHammer (CVE-2026-33825), a privilege escalation bug in Windows Defender. According to BleepingComputer, the researcher who discovered the flaw published exploit code for it after notifying Microsoft and growing exasperated with their response. Will Dormann, senior principal vulnerability analyst at Tharros, says he confirmed that the public BlueHammer exploit code no longer works after installing today’s patches.

Satnam Narang, senior staff research engineer at Tenable, said April marks the second-biggest Patch Tuesday ever for Microsoft. Narang also said there are indications that a zero-day flaw Adobe patched in an emergency update on April 11 — CVE-2026-34621 — has seen active exploitation since at least November 2025.

Adam Barnett, lead software engineer at Rapid7, called the patch total from Microsoft today “a new record in that category” because it includes nearly 60 browser vulnerabilities. Barnett said it might be tempting to imagine that this sudden spike was tied to the buzz around the announcement a week ago today of Project Glasswing — a much-hyped but still unreleased new AI capability from Anthropic that is reportedly quite good at finding bugs in a vast array of software.

But he notes that Microsoft Edge is based on the Chromium engine, and the Chromium maintainers acknowledge a wide range of researchers for the vulnerabilities which Microsoft republished last Friday.

“A safe conclusion is that this increase in volume is driven by ever-expanding AI capabilities,” Barnett said. “We should expect to see further increases in vulnerability reporting volume as the impact of AI models extend further, both in terms of capability and availability.”

Finally, no matter what browser you use to surf the web, it’s important to completely close out and restart the browser periodically. This is really easy to put off (especially if you have a bajillion tabs open at any time) but it’s the only way to ensure that any available updates get installed. For example, a Google Chrome update released earlier this month fixed 21 security holes, including the high-severity zero-day flaw CVE-2026-5281.

For a clickable, per-patch breakdown, check out the SANS Internet Storm Center Patch Tuesday roundup. Running into problems applying any of these updates? Leave a note about it in the comments below and there’s a decent chance someone here will pipe in with a solution.

COLUMBUS, Ohio (WCMH) — It's the signature call every Blue Jackets fan has heard for more than 25 years. "JACKETS....ON THE POWER PLAY!" Those five words, simple when written, but legendary when said with the flair and ferocity of CBJ public address announcer Greg Murray. "It happened very organically," said Murray. "It has remained consistent [...]

COLUMBUS, Ohio (WCMH) -- The second Black Maternal Health Summit at the Ohio Statehouse took place Tuesday morning, bringing the theme of change to women’s health. “None of this work happens in isolation,” Ohio Sen. Paula Hicks-Hudson (D-Toledo) said. “It happens in partnerships between government and communities.” The summit brought together mothers, providers and lawmakers [...]

COLUMBUS, Ohio (WCMH) - As military children face challenges like frequent moving or a parent's deployment, a national organization is shining a light on those youth and helping them reach their educational goals through life's obstacles. Children of Valor is a national nonprofit organization with the mission of helping children of active-duty and veteran families [...]

Set times for the Sonic Temple music festival were announced on Tuesday.

LANCASTER, Ohio (WCMH) -- A fire in Lancaster that left three people dead has been ruled accidental. The Lancaster Fire Department said the April 1 fire at a duplex on East 5th Avenue started on the ground floor outside near the building's landing. It's believed the fire started an hour before 911 was called. The [...]

COLUMBUS, Ohio (WCMH) — A man charged in connection with a double shooting which killed one of the victims has been sentenced after a months-long trial. After a Franklin County Court of Common Pleas jury convicted Devon Ford in the murder of 40-year-old Adbulrahman Mohamed, a judge handed down a multi-decade sentence Tuesday morning. According [...]

GRANVILLE, Ohio (WCMH) -- The Buxton Inn, a 214-year-old landmark in central Ohio, has been sold to a familiar local ownership group. The property, located at 313 E. Broadway in Granville, is now owned by New England Development Co., said Brandon Hess of Shai Hess Commercial Real Estate, who confirmed the transaction to The Reporting [...]

COLUMBUS, Ohio (WCMH) — A northwest Columbus unlicensed daycare has been shut down after reported safety and fire code violations. According to the Columbus City Attorney’s Office, the city’s Property Team Action confirmed it received a court order to shutter an unlicensed daycare facility located on West Dublin Granville Road in the Linworth area. The [...]