2026-04-25: CISA warns federal agencies that Cisco Firestarter backdoor survives patches and firmware updates

Show Notes - 2026-04-25

Stories Covered

• Today:
• CISA Adds Four Known Exploited Vulnerabilities to Catalog [Critical Alerts]
• Firestarter Malware Survives Cisco Firewall Updates and Security Patches [Critical Alerts]
• Over 10,000 Zimbra Servers Vulnerable to Ongoing XSS Attacks (CVE-2025-48700) [Critical Alerts]
• New BlackFile Extortion Group Linked to Surge of Vishing Attacks [Ransomware & Extortion]
• OCR Announces Settlements of Four Ransomware Investigations (427,000+ Affected) [Ransomware & Extortion]
• ADT Confirms Data Breach After ShinyHunters Leak Threat [Ransomware & Extortion]
• Crime Crew Impersonates Help Desk, Abuses Microsoft Teams to Steal Data (UNC6692) [Business & Infrastructure Threats]
• NASA Employees Duped in Chinese Phishing Scheme Targeting U.S. Defense Software [Business & Infrastructure Threats]
• China-Linked Threat Actors Expand Botnets to Disguise Cyberattacks [Business & Infrastructure Threats]
• Microsoft Now Lets Admins Uninstall Copilot on Enterprise Devices [Windows / AD Security]
• Microsoft to Roll Out Entra Passkeys on Windows in Late April [Windows / AD Security]
• Windows Update Gets New Controls to Reduce Forced Restarts [Windows / AD Security]
• New 'Pack2TheRoot' Flaw Gives Hackers Root Linux Access (CVE-2026-41651) [General Security News]
• UNC3944 Leader and DigitalMint Ransomware Negotiator Plead Guilty [General Security News]
• The npm Threat Landscape: Shai-Hulud Worm Marks New Era of Supply Chain Attacks [General Security News]
• 26 FakeWallet Apps Found on Apple App Store Targeting Crypto Seed Phrases [General Security News]
• Researchers Uncover Pre-Stuxnet 'fast16' Malware Targeting Engineering Software [General Security News]
• Microsoft Security Update Guide CVEs (Low Priority) [Vulnerability Disclosures]

CVEs Referenced

CVE-2024-57726, CVE-2024-57728, CVE-2024-7399, CVE-2025-13763, CVE-2025-20333, CVE-2025-20362, CVE-2025-29635, CVE-2025-48700, CVE-2025-66376, CVE-2026-23428, CVE-2026-23434, CVE-2026-23438, CVE-2026-23439, CVE-2026-23446, CVE-2026-23447, CVE-2026-41080, CVE-2026-41205, CVE-2026-41651

Read the full brief