Cybersecurity briefing — 2026-04-01

Here is your PlainSec briefing for Wednesday, April 1st.

• Use‑After‑Free in Dawn Exploited; Chrome 146 Patch Released
• TrueConf Update Flaw Lets Attackers Reach Isolated Government Networks
• Critical Citrix NetScaler Bug Lets Attackers Steal Admin Sessions
• CISA Adds F5 BIG‑IP APM RCE Flaw to KEV
• Google Cloud warns of kernel, Envoy, and Vertex AI flaws
• UNC1069 Expands Node.js Supply Chain Attacks Beyond Axios
• Unauthenticated Shell via MAVLink Enables Remote Command Execution
• WhatsApp VBS Drops Renamed Windows Tools, MSI Backdoors
• Extradited Huione Executive Signals Crackdown on Scam Financial Infrastructure
• Default Vertex AI Agent Permissions Expose Cloud Data
• VenomStealer campaign update
• Open-Source AI Runtime Breach Disrupts Vendor Trust and Operations
• CrewAI Code Interpreter Flaws Let Agents Escape Sandboxes
• Supply-chain actor built reusable cache of stolen build secrets
• Iran Signals US Tech Firms Could Become Military Targets
• Preinstalled GIGABYTE Utility Allows Unauthenticated Arbitrary File Write
• Trojanized LiteLLM Package Executed Multi-Stage Supply-Chain Attack
• Backdoored LiteLLM Packages Exfiltrated Secrets and Built Backdoors