2026-04-17: Apache ActiveMQ flaw now under active exploitation with CISA KEV deadline April 30

Show Notes - 2026-04-17

Stories Covered

• April 17, 2026
• Today:
• Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation [Critical Alerts]
• Microsoft Defender "RedSun" Zero-Day Grants SYSTEM Privileges (Unpatched) [Critical Alerts]
• 17-Year-Old Excel RCE CVE-2009-0238 Added to CISA KEV [Critical Alerts]
• McGraw Hill Appears on ShinyHunters Leak Site After 13.5M Record Exposure [Ransomware & Extortion]
• Tennessee Hospital Breach Affects 337,000 After Rhysida Ransomware Attack [Ransomware & Extortion]
• P3 Campus Tip System Breached: 8.3 Million Anonymous Tips Exposed [Ransomware & Extortion]
• Cisco Patches Critical Webex and Identity Services Engine Vulnerabilities [Business & Infrastructure Threats]
• Claude Opus Developed Chrome Exploit for $2,283 in API Costs [Business & Infrastructure Threats]
• Git Identity Spoofing Fools Claude into Approving Malicious Code [Business & Infrastructure Threats]
• Google Expands Gemini AI Use to Fight Malicious Ads [Business & Infrastructure Threats]
• Some Windows Domain Controllers Entering Reboot Loops After April Patches [Windows / AD Security]
• North Korean Sapphire Sleet Targets macOS with Social Engineering Campaign [Windows / AD Security]
• Microsoft's Original Windows Secure Boot Certificate Expiring [Windows / AD Security]
• Ghost Breaches: AI-Generated Narratives Become New Threat Vector [General Security News]
• CrowdStrike Selected for OpenAI's Trusted Access for Cyber Program [General Security News]
• Multiple Industrial Control System Vulnerabilities Disclosed by CISA [Vulnerability Disclosures]
• Multiple Third-Party Component Vulnerabilities in Microsoft Update Guide [Vulnerability Disclosures]
• Mirai-like Botnet Exploiting End-of-Life TP-Link Routers (CVE-2023-33538) [Vulnerability Disclosures]

CVEs Referenced

CVE-2009-0238, CVE-2023-33538, CVE-2024-32114, CVE-2025-14821, CVE-2025-64669, CVE-2026-20147, CVE-2026-20180, CVE-2026-20184, CVE-2026-20186, CVE-2026-32316, CVE-2026-33825, CVE-2026-33947, CVE-2026-33948, CVE-2026-34197, CVE-2026-35199, CVE-2026-35469, CVE-2026-39956, CVE-2026-39979, CVE-2026-40164, CVE-2026-40179, CVE-2026-5387, CVE-2026-5726, CVE-2026-6284

Read the full brief