Cybersecurity briefing, 2026-04-19

• End-of-life TP-Link routers face botnet infection attempts
• Cisco SD-WAN flaw joins KEV without vendor confirmation

Recent editions

• Saturday, April 18, 2026: ActiveMQ management endpoints enable credentialed RCE · 14 stories
• Friday, April 17, 2026: Defender’s file rewrite turns patched PCs into SYSTEM targets · 18 stories
• Thursday, April 16, 2026: Nginx UI’s MCP endpoint opens full server takeover · 20 stories
• Wednesday, April 15, 2026: SharePoint zero-day lands in Microsoft’s huge April batch · 18 stories
• Tuesday, April 14, 2026: Malicious PDFs enable code execution across Windows and macOS · 8 stories
• Monday, April 13, 2026: Phishing marketplace takedown cuts supply but leaves stolen credentials active · 16 stories
• Sunday, April 12, 2026: Signed CPUID installers delivered malware via DLL sideloading · 3 stories