[Video] The TTP Ep. 22: The Collapse of the Patch Window

Cisco Talos feed (early Apr 2026) highlights accelerating exploitation and a collapsing patch window driven by attacker speed, AI, and exposed systems. Key observations: a new Lua-based malware family “LucidRook” used in targeted spear-phishing against Taiwanese NGOs; a large-scale automated credential-harvesting campaign (UAT-10608) leveraging the “NEXUS Listener” framework; Qilin ransomware campaigns featuring an EDR-evasion multi-stage loader (msimg32.dll); recent supply-chain compromises including an Axios NPM incident; abuse of SaaS notification pipelines to deliver phishing/spam; and an続