Briefing del 2026-05-01

Nginx UI è attualmente oggetto di sfruttamento attivo attraverso una grave vulnerabilità di bypass dell'autenticazione, e le patch sono già in fase di distribuzione.

• Exchange N-day Abuse Expands Espionage Reach Across Governments
• Headless Gemini CLI Turns CI Into Host Compromise Path
• French Citizen Data Sale Creates Long-Term Fraud Pool
• SAP Build Packages Turn Install Time Into Theft Time
• PackageKit Auth Bypass Turns Local Users Root
• Deep#Door Turns Windows Hosts Into Stealthy Spyware Nodes
• No-Code Phishing Pages Reclaim Exchange Credentials
• Cargo Theft Moves Into Broker Email and Load Boards
• Federal OT Zero-Trust Guidance Raises Governance Bar
• SaaS Extortion Groups Hide Inside IdP Access
• Black Shrantac Turns Perimeter Flaws Into Quiet Extortion
• Soft PLC Backdoors Survive Restarts in CODESYS Runtime
• Patch Wave Will Expose Weak Supply Chains
• Handala Moves From Doxxing to Direct Troop Threats
• Russian Aviation Targets Lose GIS Data to Spyware
• Sleeper Packages Turn CI Hosts Into Credential Farms
• Rischio immediato di esecuzione remota di codice in Ninja Forms File Uploads
• Vulnerabilità nel AI Workflow Builder consente il completo takeover del server
• Former Incident Responders Joined BlackCat Extortion Crew