Briefing del 2026-04-17

Fortinet ha appena rilasciato aggiornamenti di emergenza per una vulnerabilità zero-day di FortiClient EMS che gli attaccanti stanno già sfruttando in natura.

• Defender’s file rewrite turns patched PCs into SYSTEM targets
• ActiveMQ Management Endpoints Enable Credentialed RCE
• End-of-Life TP-Link Routers Face Botnet Infection Attempts
• DDoS-for-Hire Networks Lose Their User Base
• UAC-0247 Uses Fake Aid Lures to Steal Chat Data
• Bluesky’s Core Features Took a Day-Long DDoS Hit
• NVD Backlog Leaves Most CVEs Unenriched
• Marimo Zero-Day Turns AI Demo Hosting Into Malware Delivery
• Microsoft Sells Time for Legacy Exchange and Skype
• Trump Backs Clean 702 Renewal, Reform Window Narrows
• macOS Users Become the Weak Link in Fake Updates
• Bluesky Outage Points to Hosted Infrastructure Risk
• Tiny Archives Hide Massive Malware Payloads
• Water Plant Sabotage Malware Is One Bug Away
• Nginx UI’s MCP Endpoint Opens Full Server Takeover
• Black Shrantac Turns Perimeter Flaws Into Quiet Extortion
• Rhysida Leak Leaves 337,000 Patients Exposed
• Automotive Suppliers Turn Ransomware Into Sector-Wide Risk