Cybersecurity briefing, 2026-04-27

A federal agency was compromised through Cisco firewalls, and patching alone did not clean it up.

• Cisco Firewall Backdoors Survive Patching
• Itron breach leaves utility customers uncertain
• Developer Tooling Compromises Return Across npm, PyPI, and Docker
• PackageKit Auth Bypass Turns Local Users Root
• ADT Breach Exposes Identity Data, Not Alarm Systems
• Teams Trust Turned Into Browser Persistence
• Simulation Sabotage Malware May Have Preceded Stuxnet
• SilentGlass Targets a Neglected Monitor Attack Path
• Marimo Zero-Day Turns AI Demo Hosting Into Malware Delivery
• Marimo Advisory Details Enabled Exploits Within Hours
• FortiClient EMS Hotfixes Leave Uncertainty for 8.0 Users
• OpenSSH Parser Bug Turns CA Trust Into Root Access
• Immediate Remote Code Execution Risk in Ninja Forms File Uploads
• Private Browsing Leaks a Stable Cross-Site Identifier

Recent editions

• Sunday, April 26, 2026: GopherWhisper Turns Collaboration Tools Into Espionage Channels · 9 stories
• Saturday, April 25, 2026: Cisco Firewall Backdoors Survive Patching · 19 stories
• Friday, April 24, 2026: Cisco Firewall Backdoors Survive Patching · 18 stories
• Thursday, April 23, 2026: iPhone Notification Cache Exposed Deleted Signal Messages · 17 stories
• Wednesday, April 22, 2026: ActiveMQ Brokers Exposed to Active Exploitation at Scale · 18 stories
• Tuesday, April 21, 2026: ActiveMQ Brokers Exposed to Active Exploitation at Scale · 17 stories
• Monday, April 20, 2026: Vercel Breach Exposes Customer Secrets Risk · 12 stories