2026-04-06: Fortinet pushed an emergency weekend patch for CVE-2026-35616

Show Notes - 2026-04-06

Stories Covered

• 2026-04-06
• Today:
• Fortinet FortiClient EMS Zero-Day Under Active Exploitation (CVE-2026-35616) [Critical Alerts]
• Mass Credential Theft via React2Shell Next.js Exploit (CVE-2025-55182) [Critical Alerts]
• Cisco Exploit Developer Burned by Forum Marketplace Dynamics (CVE-2026-20045) [Critical Alerts]
• Germany Unmasks REvil Leaders Behind 130 Ransomware Attacks [Ransomware & Extortion]
• Do Ransomware Gangs Keep Their Promises to Delete Data? [Ransomware & Extortion]
• Cambodia Passes Life Imprisonment Law for Scam Compound Operators [Ransomware & Extortion]
• $285M Drift Hack Attributed to Six-Month DPRK Social Engineering Operation [Ransomware & Extortion]
• Trellix Launches "Dark Web Roast" to Demystify Cybercriminals [Business & Infrastructure Threats]
• Open Redirect Used in 21% of Q1 2026 Phishing Campaigns [Business & Infrastructure Threats]
• Traffic Violation Scams Switch to QR Codes [Business & Infrastructure Threats]
• AI Agent Liability Remains Unclear as Vendors Push Automation [General Security News]
• CBP Facility Codes Leaked via Public Quizlet Flashcards [General Security News]
• Anthropic Claude Code Source Leak Creates IPO Headache [General Security News]
• Fortinet FortiClient EMS (CVE-2026-35616, CVE-2026-21643) [Vulnerability Disclosures]
• Next.js React2Shell (CVE-2025-55182) [Vulnerability Disclosures]
• Cisco RCE (CVE-2026-20045) [Vulnerability Disclosures]

CVEs Referenced

CVE-2025-55182, CVE-2026-20045, CVE-2026-21643, CVE-2026-35616

Read the full brief