Briefing del 2026-04-05

Ecco il tuo briefing di PlainSec per domenica 5 aprile.

• Next.js React2Shell Exploit Automates AI and Cloud Credential Theft
• FortiClient EMS Hotfixes Leave Uncertainty for 8.0 Users
• Cloud Account Takeover After Trivy Supply-Chain Compromise
• UNC1069 Expands Node.js Supply Chain Attacks Beyond Axios
• Attore guidato da AI ha condotto sei ondate di abuso di GitHub pull_request_target
• Open-Source AI Runtime Breach Disrupts Vendor Trust and Operations