Microsoft rolls out revamped Windows Insider Program

BleepingComputer published multiple security and product updates (Apr 23–25, 2026). Major threats: UNC6692 is using Microsoft Teams social engineering to deploy a new 'Snow' malware suite (extension, tunneler, backdoor); 'Firestarter' malware persists on Cisco Firepower/ASA/FTD devices despite patches; a critical arbitrary file upload vulnerability in the Breeze Cache WordPress plugin is being actively exploited; more than 10,000 Zimbra instances are being targeted via an XSS flaw; a local privilege escalation dubbed Pack2TheRoot affects PackageKit allowing root access; the Bitwarden CLI npm发布