Briefing del 2026-04-14

Una vulnerabilità critica in Ninja Forms è attualmente in fase di sfruttamento attivo, con migliaia di attacchi che colpiscono i siti WordPress solo nelle ultime 24 ore.

• Malicious PDFs Enable Code Execution Across Windows and macOS
• Phishing Marketplace Takedown Cuts Supply but Leaves Stolen Credentials Active
• Mirax Malware Turns Infected Phones into Anonymized Fraud Infrastructure
• Basic-Fit Breach Exposes 1 Million Members’ Personal and Bank Data
• APT37 Shifts to Facebook Social Engineering to Deliver RokRAT Malware
• Correlating Signals Exposes Reachable Autonomous AI Agent on Windows Server
• Zero-Day di Adobe Reader utilizza un fingerprinting furtivo prima della RCE
• JanelaRAT’s Evolving Multi-Stage Attacks Sharpen Focus on Latin American Banks