Microsoft rolls out revamped Windows Insider Program

2026-04-26T01:23:32Z36003dda2e77edfeaf45bc36aa5bcbedfd80e97271ffb3751ce720dc04e08dbe
BitwardenBreeze CacheCheckmarxCisco ASACisco FirestarterDocker imagesFirepower FTDKICSLinuxMicrosoft TeamsPack2TheRootPackageKitSnow malwareUNC6692VSCode extension compromise (Open VSX) / supply‑chain breach ( KWordPressXSSZimbracredential theftfile uploadlocal privilege escalationmalwarenpm compromisepersistencesupply chain

What happened

Multiple active threats and supply‑chain incidents reported: UNC6692 is using Microsoft Teams social‑engineering to deploy a new malware suite called “Snow” (browser extension, tunneler, backdoor). A persistent malware named Firestarter survives updates on Cisco Firepower / ASA / FTD devices. A new local privilege escalation (Pack2TheRoot) in the PackageKit daemon can grant root on Linux. Over 10,000 Zimbra servers are being actively exploited via an XSS flaw. A critical file‑upload vulnerability in the Breeze Cache WordPress plugin is being exploited to upload arbitrary files. The Bitwarden‑l

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
bleepingcomputer
Record identifier
36003dda2e77edfeaf45bc36aa5bcbedfd80e97271ffb3751ce720dc04e08dbe
Enrichment time
2026-04-26T01:23:32Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.