Briefing del 2026-04-16

Un zero-day critico di Fortinet è attualmente in fase di sfruttamento attivo, sono disponibili hotfix, e lo stato della versione 8.0 è ancora poco chiaro.

• Nginx UI’s MCP Endpoint Opens Full Server Takeover
• Black Shrantac Turns Perimeter Flaws Into Quiet Extortion
• Windows Task Host Flaw Gives Local Users SYSTEM
• Signed Adware Turns Update Channels Into AV Killers
• Old Excel RCE Returns to CISA’s Exploited List
• Russia-Linked Actors Shift Toward Physical Infrastructure Disruption
• UAC-0247 Uses Fake Aid Lures to Steal Chat Data
• FortiSandbox Bugs Let Attackers Skip Login and Run Commands
• Microsoft Sells Time for Legacy Exchange and Skype
• SharePoint Flaw Lets Attackers Spoof and Read Data
• NVD Backlog Leaves Most CVEs Unenriched
• Cisco Unity Connection Bugs Expose Admin Web Sessions
• Salesforce Misconfiguration Exposes Tenant Data Without Account Breach
• Trump Backs Clean 702 Renewal, Reform Window Narrows
• OpenAI Widens Defender Access, Raises Dual-Use Stakes
• Automotive Suppliers Turn Ransomware Into Sector-Wide Risk
• WordPress Plugin Buyout Turns Into Dormant Backdoor Risk
• School Network Attack Exposes Data Beyond Targeted Sites
• Chrome Extensions Turn OAuth Tokens Into Account Access
• Webex SSO Flaw Lets Attackers Impersonate Users