Briefing del 2026-04-27

Un'agenzia federale è stata compromessa attraverso i firewall Cisco, e la sola applicazione delle patch non ha risolto il problema.

• Cisco Firewall Backdoors Survive Patching
• Itron breach leaves utility customers uncertain
• Developer Tooling Compromises Return Across npm, PyPI, and Docker
• PackageKit Auth Bypass Turns Local Users Root
• ADT Breach Exposes Identity Data, Not Alarm Systems
• Teams Trust Turned Into Browser Persistence
• Simulation Sabotage Malware May Have Preceded Stuxnet
• SilentGlass Targets a Neglected Monitor Attack Path
• Marimo Zero-Day Turns AI Demo Hosting Into Malware Delivery
• I dettagli dell'advisory di Marimo hanno abilitato exploit in poche ore
• FortiClient EMS Hotfixes Leave Uncertainty for 8.0 Users
• OpenSSH Parser Bug Turns CA Trust Into Root Access
• Rischio immediato di esecuzione remota di codice in Ninja Forms File Uploads
• Private Browsing Leaks a Stable Cross-Site Identifier