Briefing del 2026-04-23

Un difetto critico nei notebook Marimo è passato da avviso pubblico a sfruttamento attivo in meno di dieci ore.

• iPhone Notification Cache Exposed Deleted Signal Messages
• npm Worm Turns Developer Tokens Into Propagation Fuel
• China-Nexus Botnets Turn Everyday Devices Into Cover
• Trusted Bitwarden CLI Release Turned Secret Harvester
• GopherWhisper Turns Collaboration Tools Into Espionage Channels
• Biobank Data Sale Exposes Research Access Weakness
• SilentGlass Targets a Neglected Monitor Attack Path
• Federal Privacy Bill Could Override Stronger State Protections
• Passkeys Become the Default Login Standard
• Rituals Member Data Downloaded in Breach
• AI Agents Can Now Chain Cloud Breaches Alone
• ASP.NET Core Token Forgery Leaves Privileged Sessions Behind
• Wiper Attack Removes Recovery Before Destruction Begins
• Ghost Carriers Turn Telecom Trust Into Location Tracking
• Oracle Communications Takes the Biggest Hit in April CPU
• Discontinued D-Link Routers Become Mirai Entry Point
• Black Shrantac Turns Perimeter Flaws Into Quiet Extortion