Briefing del 2026-04-21

Se utilizzi Ivanti's Endpoint Manager Mobile e è accessibile da Internet, hai tempo fino a domenica per applicare la patch.

• ActiveMQ Brokers Exposed to Active Exploitation at Scale
• Vercel Breach Exposes Customer Secrets Risk
• Single Verifier Let Lazarus Forge Cross-Chain Messages
• Ransomware Crew Arms Affiliates for Cross-Platform Datacenter Hits
• Trojanized Payment App Turns Android Phones Into Card Skimmers
• App Store Wallet Clones Steal Crypto Recovery Phrases
• Serial-to-IP Flaws Expose Legacy OT at Scale
• Cisco SD-WAN Flaw Joins KEV Without Vendor Confirmation
• SEC Penalizes Weak Cyber Governance After Data Exposure
• Meraki Portal Breach Risks Cross-Client Camera Exposure
• Palantir Ties Ideology to Surveillance Contracts
• Google Antigravity Patch Leaves Prompt Injection Risk Exposed
• Water Plant Sabotage Malware Is One Bug Away
• Ransomware Negotiator Turned BlackCat Insider
• Kyber Turns ESXi and Windows Into One Blackout
• Malicious Model Files Can Own SGLang Servers
• Admin Access Turns Progress ADC Into Command Execution Risk