Cybersecurity briefing — 2026-04-13

A critical Adobe Acrobat zero-day is being actively exploited right now, and it works on both Windows and macOS.

• Malicious PDFs Enable Code Execution Across Windows and macOS
• Phishing Marketplace Takedown Cuts Supply but Leaves Stolen Credentials Active
• Supply-Chain Attack on Axios Threatens Legitimate macOS App Signing
• APT37 Shifts to Facebook Social Engineering to Deliver RokRAT Malware
• Signed CPUID Installers Delivered Malware via DLL Sideloading
• Marimo Advisory Details Enabled Exploits Within Hours
• Basic-Fit Breach Exposes 1 Million Members’ Personal and Bank Data
• JanelaRAT’s Evolving Multi-Stage Attacks Sharpen Focus on Latin American Banks
• EncystPHP Webshell Scans Signal Persistent FreePBX Compromise Attempts
• Ransomware Groups Scale Double Extortion Using AI-Driven Reconnaissance
• Phishing Kit Takedown Disrupts MFA-Bypassing Access Resale Market
• Correlating Signals Exposes Reachable Autonomous AI Agent on Windows Server
• WolfSSL Flaw Lets Forged Certificates Bypass Multiple Signature Checks
• Obsidian Plugin Ecosystem Enables Stealthy Cross-Platform RAT Attacks
• Immediate Remote Code Execution Risk in Ninja Forms File Uploads
• AI Workflow Builder Flaw Enables Full Server Takeover