2026-04-11: Marimo Python notebook flaw CVE-2026-39987 exploited within 10 hours of disclosure

Show Notes - 2026-04-11

Stories Covered

• Today:
• Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of Disclosure [Critical Alerts]
• CPUID Hacked to Deliver Malware via CPU-Z, HWMonitor Downloads [Critical Alerts]
• Silent Ransom Group Leaked Orrick Law Firm After $1M Offer Rejected [Ransomware & Extortion]
• Lotte Card Faces $3M Penalty, 4-Month Business Suspension Over Data Breach [Ransomware & Extortion]
• Analysis of One Billion CISA KEV Remediation Records Exposes Limits of Human-Scale Security [General Security News]
• Anthropic's Mythos AI Can Find Zero-Days 72% of the Time [General Security News]
• FCC Foreign-Made Router Policy Faces Industry Pushback [General Security News]
• Go Language Multiple CVEs [Vulnerability Disclosures]
• Microsoft Edge Chromium CVEs [Vulnerability Disclosures]
• CVE-2026-33119 Microsoft Edge for Android Spoofing Vulnerability [Vulnerability Disclosures]
• CVE-2026-4878 Libcap Privilege Escalation [Vulnerability Disclosures]
• OpenTelemetry-Go CVEs [Vulnerability Disclosures]
• CVE-2026-28389 OpenSSL NULL Dereference [Vulnerability Disclosures]
• CVE-2026-35611 Addressable Regular Expression DoS [Vulnerability Disclosures]
• CVE-2026-24302 Azure Arc Elevation of Privilege [Vulnerability Disclosures]

CVEs Referenced

CVE-2026-24302, CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-28389, CVE-2026-28810, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33119, CVE-2026-33810, CVE-2026-35611, CVE-2026-39882, CVE-2026-39987, CVE-2026-4878, CVE-2026-5869, CVE-2026-5871, CVE-2026-5876, CVE-2026-5883, CVE-2026-5884, CVE-2026-5886, CVE-2026-5888, CVE-2026-5889, CVE-2026-5891, CVE-2026-5893, CVE-2026-5894, CVE-2026-5896, CVE-2026-5899

Read the full brief