Microsoft rolls out revamped Windows Insider Program
2026-04-26T01:23:32Z•36003dda2e77edfeaf45bc36aa5bcbedfd80e97271ffb3751ce720dc04e08dbe
BitwardenBreeze CacheCheckmarxCisco ASACisco FirestarterDocker imagesFirepower FTDKICSLinuxMicrosoft TeamsPack2TheRootPackageKitSnow malwareUNC6692VSCode extension compromise (Open VSX) / supply‑chain breach ( KWordPressXSSZimbracredential theftfile uploadlocal privilege escalationmalwarenpm compromisepersistencesupply chain
What happened
Multiple active threats and supply‑chain incidents reported: UNC6692 is using Microsoft Teams social‑engineering to deploy a new malware suite called “Snow” (browser extension, tunneler, backdoor). A persistent malware named Firestarter survives updates on Cisco Firepower / ASA / FTD devices. A new local privilege escalation (Pack2TheRoot) in the PackageKit daemon can grant root on Linux. Over 10,000 Zimbra servers are being actively exploited via an XSS flaw. A critical file‑upload vulnerability in the Breeze Cache WordPress plugin is being exploited to upload arbitrary files. The Bitwarden‑l
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 36003dda2e77edfeaf45bc36aa5bcbedfd80e97271ffb3751ce720dc04e08dbe
- Enrichment time
- 2026-04-26T01:23:32Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.