MSP cybersecurity news digest, April 13, 2026

This report summarizes several active and high-impact cyber incidents: Storm-1175’s rapid exploitation of multiple n-day/zero-day flaws leading to Medusa ransomware across healthcare, education, professional services and finance; Iran-linked large-scale password-spraying against Microsoft 365 tenants; a device-code phishing campaign that harvested valid tokens to persist in cloud environments; the LucidRook Lua/Rust-based malware used in targeted spear-phishing against NGOs and academia in Taiwan; and a CPUID download infrastructure compromise that delivered trojanized CPU-Z/HWMonitor installers with STX RAT — collectively demonstrating high sophistication, multi-vector attacks, and notable supply-chain and cloud-native threats.