Cybersecurity briefing, 2026-04-10

Attackers built a working exploit for a critical Marimo notebook vulnerability in under ten hours from the moment the advisory went public.

• Docker AuthZ bypass reopens host compromise risk
• Backdoored Smart Slider update delivered via official channel
• macOS ClickFix bypass uses Script Editor to evade Terminal warnings
• Session replay enables silent payroll theft in Microsoft 365 phishing
• UK forces Russian submarine retreat over undersea cable surveillance
• GitHub Releases used to spread clipboard-stealing trojan
• Adobe Reader zero-day uses stealthy fingerprinting before RCE
• Hack-for-hire campaign combines phishing and Android spyware in MENA

Recent editions

• Thursday, April 9, 2026: Immediate remote code execution risk in Ninja Forms File Uploads · 11 stories
• Wednesday, April 8, 2026: Attackers exploit both decade-old and new flaws in federal systems · 14 stories
• Tuesday, April 7, 2026: FortiClient EMS hotfixes leave uncertainty for 8.0 users · 13 stories
• Monday, April 6, 2026: Developer machines became high-yield credential farms in LiteLLM supply-chain attack · 5 stories
• Sunday, April 5, 2026: Next.js React2Shell exploit automates AI and cloud credential theft · 6 stories
• Saturday, April 4, 2026: Cloud account takeover after Trivy supply-chain compromise · 12 stories
• Friday, April 3, 2026: Next.js React2Shell exploit automates AI and cloud credential theft · 20 stories