Briefing del 2026-05-04

Fortinet's FortiClient EMS ha una vulnerabilità zero-day attualmente in fase di sfruttamento attivo, e la hotfix di emergenza copre solo due dei tre principali rami.

• MOVEit Automation Auth Bypass Forces Full-Installer Upgrades
• ShadowPad Espionage Campaign Targets Exchange and IIS Servers
• La breach di Canvas espone dati di identità condivisi degli studenti
• French Citizen Data Sale Creates Long-Term Fraud Pool
• Tax Phishing Delivers Swappable Malware in India and Russia
• Certificate Trust Breaks When DigiCert Is Breached
• Signed Adware Turns Update Channels Into AV Killers
• Black Shrantac Turns Perimeter Flaws Into Quiet Extortion
• FortiClient EMS Hotfixes Leave Uncertainty for 8.0 Users
• Authenticated Users Can Take Root on 3onedata Gateways
• AiTM Phishing Scales by Filtering Out Bots

Edizioni recenti

• domenica 3 maggio 2026: Exchange N-day Abuse Expands Espionage Reach Across Governments · 4 storie
• sabato 2 maggio 2026: Exchange N-day Abuse Expands Espionage Reach Across Governments · 18 storie
• venerdì 1 maggio 2026: Exchange N-day Abuse Expands Espionage Reach Across Governments · 19 storie