Cybersecurity briefing — 2026-04-18

A critical Ivanti flaw is being actively exploited right now, and federal agencies just got emergency patch orders with a deadline this Sunday.

• ActiveMQ Management Endpoints Enable Credentialed RCE
• End-of-Life TP-Link Routers Face Botnet Infection Attempts
• Defender’s file rewrite turns patched PCs into SYSTEM targets
• DDoS-for-Hire Networks Lose Their User Base
• Metasploit Adds Public RCE Modules for Web Apps
• Tycoon Takedown Pushes Phishers Toward Device-Code Abuse
• Bluesky Outages Push Users Toward Rival Networks
• Black Shrantac Turns Perimeter Flaws Into Quiet Extortion
• APT28 Uses Roundcube to Reach Official Inboxes
• Trump Backs Clean 702 Renewal, Reform Window Narrows
• LLMs Now Cut Chrome Exploit Development to Pocket Change
• FortiClient EMS Hotfixes Leave Uncertainty for 8.0 Users
• Excel XSS Becomes Silent Data Exfiltration Path
• Teams Helpdesk Impersonation Turns Support Into Access