Briefing del 2026-04-18

Una vulnerabilità critica di Ivanti è attualmente sfruttata attivamente, e le agenzie federali hanno appena ricevuto ordini di patch d'emergenza con scadenza per questa domenica.

• ActiveMQ Management Endpoints Enable Credentialed RCE
• End-of-Life TP-Link Routers Face Botnet Infection Attempts
• Defender’s file rewrite turns patched PCs into SYSTEM targets
• DDoS-for-Hire Networks Lose Their User Base
• Metasploit Adds Public RCE Modules for Web Apps
• Tycoon Takedown Pushes Phishers Toward Device-Code Abuse
• Bluesky’s Core Features Took a Day-Long DDoS Hit
• Black Shrantac Turns Perimeter Flaws Into Quiet Extortion
• APT28 Uses Roundcube to Reach Official Inboxes
• Trump Backs Clean 702 Renewal, Reform Window Narrows
• LLMs Now Cut Chrome Exploit Development to Pocket Change
• FortiClient EMS Hotfixes Leave Uncertainty for 8.0 Users
• Excel XSS Becomes Silent Data Exfiltration Path
• Teams Helpdesk Impersonation Turns Support Into Access