Cybersecurity briefing — 2026-04-09
Here's your PlainSec briefing for Wednesday, April 9th.
Immediate Remote Code Execution Risk in Ninja Forms File Uploads
macOS ClickFix Bypass Uses Script Editor to Evade Terminal Warnings
Hack-for-Hire Campaign Combines Phishing and Android Spyware in MENA
GitHub Releases Used to Spread Clipboard-Stealing Trojan
AI-Powered Vulnerability Discovery Centralized Among Tech Giants
Corporate Wallet Breach Drains $3.6M from Bitcoin Depot
APT28 Expands Supply-Chain Attacks Using Fresh Office Zero-Days
Iran-Linked Hackers Pause US Attacks but Keep Targeting Israel
Flatpak Sandbox Escape Exposes Linux Hosts to Full Compromise
Adobe Reader Zero-Day Uses Stealthy Fingerprinting Before RCE
Chained RCE in ActiveMQ Classic Bypasses Authentication
Cybersecurity briefing — 2026-04-09
Here's your PlainSec briefing for Wednesday, April 9th.
Immediate Remote Code Execution Risk in Ninja Forms File Uploads
macOS ClickFix Bypass Uses Script Editor to Evade Terminal Warnings
Hack-for-Hire Campaign Combines Phishing and Android Spyware in MENA
GitHub Releases Used to Spread Clipboard-Stealing Trojan
AI-Powered Vulnerability Discovery Centralized Among Tech Giants
Corporate Wallet Breach Drains $3.6M from Bitcoin Depot
APT28 Expands Supply-Chain Attacks Using Fresh Office Zero-Days
Iran-Linked Hackers Pause US Attacks but Keep Targeting Israel
Flatpak Sandbox Escape Exposes Linux Hosts to Full Compromise
Adobe Reader Zero-Day Uses Stealthy Fingerprinting Before RCE
Chained RCE in ActiveMQ Classic Bypasses Authentication