2026-04-09: CISA adds actively exploited Ivanti EPMM flaw to KEV catalog with today's deadline

Show Notes - 2026-04-09

Stories Covered

• April 9, 2026
• Today:
• Ivanti EPMM Code Injection (CVE-2026-1340) [Critical Alerts]
• Adobe Reader Zero-Day Exploited Since December [Critical Alerts]
• TeamPCP Supply Chain: Cisco Breach via Trivy, KEV Deadline Arrives (CVE-2026-33634) [Critical Alerts]
• Source: [Ransomware Claims (Last 48h)]
• Dutch Healthcare Vendor ChipSoft Hit by Ransomware [Ransomware & Extortion]
• Iran-Linked Pay2Key Targets US Healthcare with Destructive Intent [Ransomware & Extortion]
• 13-Year-Old Apache ActiveMQ RCE Discovered by AI (CVE-2026-34197) [Business & Infrastructure Threats]
• Russian GRU APT28 Exploits Routers for DNS Hijacking (CVE-2023-50224) [Business & Infrastructure Threats]
• APT28 Deploys PRISMEX Malware Targeting Ukraine and NATO Allies [Windows / AD Security]
• Cisco Talos: Using Year in Review for Incident Response Tabletops [General Security News]
• AWS Bedrock AgentCore "God Mode" IAM Privilege Escalation [General Security News]
• CUPS and Avahi Denial of Service Vulnerabilities [Vulnerability Disclosures]
• OpenSSL and ONNX Vulnerabilities [Vulnerability Disclosures]
• Libinput Plugin Vulnerability [Vulnerability Disclosures]

CVEs Referenced

CVE-2016-3088, CVE-2023-46604, CVE-2023-50224, CVE-2024-32114, CVE-2026-1340, CVE-2026-21509, CVE-2026-21513, CVE-2026-28387, CVE-2026-28388, CVE-2026-31789, CVE-2026-31790, CVE-2026-33634, CVE-2026-34197, CVE-2026-34445, CVE-2026-34446, CVE-2026-34933, CVE-2026-35093, CVE-2026-39314

Read the full brief