ADT confirms data breach after ShinyHunters leak threat

Multiple high-risk security incidents reported on 24–23 Apr 2026: ADT confirmed a data breach after extortion threats from ShinyHunters; a persistent custom malware named Firestarter is surviving updates on Cisco ASA/FTD (Firepower/Secure Firewall) appliances; a local privilege-escalation flaw dubbed Pack2TheRoot in the PackageKit daemon can allow local users to gain root; over 10,000 Zimbra Collaboration instances are being actively exploited via an XSS flaw; a critical arbitrary file upload vulnerability in the Breeze Cache WordPress plugin is under active exploitation; the Bitwarden CLI npm