2026-04-26: UNC6692 deploys custom "Snow" malware suite via Microsoft Teams social engineering

Show Notes - 2026-04-26

Stories Covered

• Today:
• Threat actor uses Microsoft Teams to deploy new "Snow" malware [Business & Infrastructure Threats]
• Microsoft rolls out revamped Windows Insider Program [General Security News]
• Linux Kernel: ksmbd and SMB Direct vulnerabilities (CVE-2026-31610, CVE-2026-31537, CVE-2026-31608, CVE-2026-31611, CVE-2026-31612, CVE-2026-31536, CVE-2026-31613) [Vulnerability Disclosures]
• TLS, KVM, USB, Network Driver CVEs (CVE-2026-23414, CVE-2026-31593, CVE-2026-31590, CVE-2026-31606, CVE-2026-31646) [Vulnerability Disclosures]
• Additional Linux kernel CVEs (31 CVEs) [Vulnerability Disclosures]
• OpenSSL c_rehash command injection (CVE-2022-2068) [Vulnerability Disclosures]
• rust-openssl PEM callback out-of-bounds read (CVE-2026-41677) [Vulnerability Disclosures]

CVEs Referenced

CVE-2022-2068, CVE-2026-23414, CVE-2026-23420, CVE-2026-23422, CVE-2026-31536, CVE-2026-31537, CVE-2026-31557, CVE-2026-31565, CVE-2026-31566, CVE-2026-31570, CVE-2026-31589, CVE-2026-31590, CVE-2026-31593, CVE-2026-31599, CVE-2026-31602, CVE-2026-31606, CVE-2026-31608, CVE-2026-31610, CVE-2026-31611, CVE-2026-31612, CVE-2026-31613, CVE-2026-31617, CVE-2026-31618, CVE-2026-31619, CVE-2026-31620, CVE-2026-31621, CVE-2026-31624, CVE-2026-31626, CVE-2026-31627, CVE-2026-31637, CVE-2026-31646, CVE-2026-31651, CVE-2026-31660, CVE-2026-31663, CVE-2026-31667, CVE-2026-31672, CVE-2026-41079, CVE-2026-41677

Read the full brief