2026-04-07: China-backed Storm-1175 is weaponizing zero-days to deploy Medusa ransomware against healthcare and

Show Notes - 2026-04-07

Stories Covered

• April 7, 2026
• Today:
• China-Linked Storm-1175 Exploits Zero-Days to Deploy Medusa Ransomware [Critical Alerts]
• Fortinet FortiClient EMS Zero-Day Under Active Exploitation (CVE-2026-35616) [Critical Alerts]
• Chrome Zero-Day (CVE-2026-5281) Actively Exploited [Critical Alerts]
• TrueConf Zero-Day (CVE-2026-3502) Exploited in Government Attacks [Critical Alerts]
• German Authorities Identify REvil and GandCrab Leaders [Ransomware & Extortion]
• Jones Day Law Firm Confirms Breach After Silent Ransom Group Attack [Ransomware & Extortion]
• Iran-Linked Pay2Key Ransomware Returns with Upgraded Tactics [Ransomware & Extortion]
• Axios npm Package Compromised by North Korean Hackers (UNC1069) [Business & Infrastructure Threats]
• AI-Enabled Device Code Phishing Campaign [Business & Infrastructure Threats]
• Iran-Linked Password Spraying Campaign Targets Microsoft 365 [Business & Infrastructure Threats]
• Qilin and Warlock Ransomware Use BYOVD to Disable 300+ EDR Tools [Business & Infrastructure Threats]
• Flowise AI Platform Under Active Exploitation (CVE-2025-59528) [Vulnerability Disclosures]
• Windows Privilege Escalation Zero-Day (BlueHammer) Leaked [Vulnerability Disclosures]
• GPUBreach Attack Enables Full CPU Privilege Escalation via GDDR6 Bit-Flips [Vulnerability Disclosures]
• Gritman Medical Center Reopens After Cybersecurity Incident [General Security News]
• Maine House Advances Bill to Strengthen Hospital Cybersecurity [General Security News]
• Microsoft Fixes Classic Outlook Bug Causing Email Delivery Issues [General Security News]

CVEs Referenced

CVE-2023-27350, CVE-2023-27351, CVE-2023-46805, CVE-2024-1708, CVE-2024-1709, CVE-2024-21887, CVE-2024-27198, CVE-2024-27199, CVE-2024-57726, CVE-2024-57727, CVE-2024-57728, CVE-2025-10035, CVE-2025-26319, CVE-2025-31324, CVE-2025-59528, CVE-2025-8943, CVE-2026-1731, CVE-2026-21643, CVE-2026-23760, CVE-2026-3502, CVE-2026-35616, CVE-2026-5281

Read the full brief