2026-04-05: Fortinet's FortiClient EMS faces its second critical zero-day in weeks (CVE-2026-35616

Show Notes - 2026-04-05

Stories Covered

• Today:
• Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS [Critical Alerts]
• Axios npm Hack Used Fake Teams Error Fix to Hijack Maintainer Account [Ransomware & Extortion]
• 36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants [Ransomware & Extortion]
• European Commission Confirms Data Breach Linked to Trivy Supply Chain Attack [Ransomware & Extortion]
• Meta Pauses Work With Mercor After Data Breach Puts AI Industry Secrets at Risk [Ransomware & Extortion]
• Device Code Phishing Attacks Surge 37x as New Kits Spread Online [Business & Infrastructure Threats]
• LinkedIn Secretly Scans for 6,000+ Chrome Extensions, Collects Data [Business & Infrastructure Threats]
• Claude Code Leak Used to Push Infostealer Malware on GitHub [Business & Infrastructure Threats]
• 'Serious Cyberattack' Impacts Phones, Public Safety Systems in Several Massachusetts Towns [Business & Infrastructure Threats]
• UK: School IT System Targeted in Cyber Attack Ahead of Exam Season [Business & Infrastructure Threats]
• Hong Kong Hospital Authority Apologises for Data Breach Involving 56,000 Patients [Business & Infrastructure Threats]
• The Breach Lasted 25 Minutes. How Long Will the Litigation Last? [Business & Infrastructure Threats]
• Ex-Microsoft Engineer Believes Azure Problems Stem from Talent Exodus [General Security News]
• Microsoft Security Update Guide (Linux/Open Source CVEs) [Vulnerability Disclosures]
• Microsoft Security Update Guide (Kernel CVEs) [Vulnerability Disclosures]
• CVE-2026-35414 [Vulnerability Disclosures]

CVEs Referenced

CVE-2026-21643, CVE-2026-23442, CVE-2026-23444, CVE-2026-23468, CVE-2026-23472, CVE-2026-23473, CVE-2026-27447, CVE-2026-27456, CVE-2026-31394, CVE-2026-34978, CVE-2026-34979, CVE-2026-34980, CVE-2026-34990, CVE-2026-35414, CVE-2026-35616

Read the full brief