Daily Threat Briefing – April 13, 2026

Critical multi-threat briefing: active exploitation of an Adobe Reader zero-day (CVE-2026-34621), a CPUID supply-chain compromise that distributed STX RAT via trojanized utilities, Russian state-linked token harvesting from Microsoft Office via router exploits, an Iranian APT targeting over 4,000 exposed Rockwell PLCs, and a GlassWorm campaign using a Zig-based dropper in IDE extensions. Immediate actions recommended include emergency patching, forensic reviews/reimaging of potentially infected hosts, router and ICS audits/segmentation, enabling MFA/conditional access, and auditing/removing suspicious developer extensions.